Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.mft
File:                     PSOEt4Txl-oD2sL-2niV_Et0Byk.mft (raw, json)
Hash identifier:          377nLSQkOp0cjjsx5tmpYtEbVQKz0N3xFr1gWYSxwB4=
Subject key identifier:   05:63:2F:DB:D8:59:FD:6F:28:CD:3E:E9:40:61:C4:13:3C:05:9F:F5
Authority key identifier: 3D:23:84:B7:84:F1:97:EA:03:DA:C2:FE:DA:78:95:FC:4B:74:07:29
Certificate issuer:       /CN=3d2384b784f197ea03dac2feda7895fc4b740729
Certificate serial:       019D29975D1659BF98CA587F39A8AAD86AB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PSOEt4Txl-oD2sL-2niV_Et0Byk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.mft
Manifest number:          188D
Signing time:             Thu 26 Mar 2026 10:01:18 +0000
Manifest this update:     Thu 26 Mar 2026 10:01:18 +0000
Manifest next update:     Fri 27 Mar 2026 10:01:18 +0000
Files and hashes:         1: 9nNyzPySymEM7sc2oK89zLOdPps.roa (hash: REW3iMc5Rvj/cI6qbWCaSFdTmGA7s4x31HfoeK6bal8=)
                          2: PSOEt4Txl-oD2sL-2niV_Et0Byk.crl (hash: VQ55wWiI48WAy7JEK8cPYtym2Q2YnHD8hF+3Bqw5Te4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PSOEt4Txl-oD2sL-2niV_Et0Byk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:97:5d:16:59:bf:98:ca:58:7f:39:a8:aa:d8:6a:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d2384b784f197ea03dac2feda7895fc4b740729
        Validity
            Not Before: Mar 26 10:01:18 2026 GMT
            Not After : Mar 27 10:01:18 2026 GMT
        Subject: CN=05632fdbd859fd6f28cd3ee94061c4133c059ff5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:91:bf:16:fe:51:89:b7:66:d1:44:06:b6:b3:
                    29:32:91:da:bf:7b:f4:ae:12:3c:37:30:7b:13:65:
                    54:a5:4b:1c:69:f3:0e:aa:a5:e1:4e:b8:8d:31:2a:
                    21:aa:64:5b:d4:5e:e0:52:04:b2:ce:3b:ad:af:33:
                    fd:ba:1f:97:1a:5a:6b:c5:92:bd:17:27:b8:90:70:
                    ce:1f:1e:62:a2:02:f0:9e:9d:cb:ad:71:2a:fe:28:
                    83:16:db:19:c5:cc:42:bf:cd:11:0d:3c:01:b9:de:
                    fc:b9:39:b0:b3:bc:fd:4a:46:22:7d:9d:fe:1c:04:
                    40:1f:43:55:7d:ba:d5:92:69:3c:fd:59:1c:0d:7e:
                    b6:3b:8d:19:8c:88:33:d3:7c:5a:5a:26:15:d2:97:
                    55:1b:ca:d7:19:1b:b1:3c:41:b5:25:23:e9:05:95:
                    20:80:34:47:00:a3:64:80:1b:e3:e2:60:87:51:1e:
                    a9:3d:c7:75:df:ea:91:1b:1b:31:bd:46:90:6b:1f:
                    04:a3:61:89:5d:2d:9f:30:95:6f:dd:70:98:a0:5f:
                    d3:db:03:d7:4f:02:3a:9b:c9:34:08:43:cc:8c:e2:
                    20:86:8e:ba:77:3e:01:92:c6:25:bb:14:0c:16:4a:
                    7c:eb:e4:22:c7:5d:ae:ae:d6:44:49:be:19:ad:86:
                    57:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:63:2F:DB:D8:59:FD:6F:28:CD:3E:E9:40:61:C4:13:3C:05:9F:F5
            X509v3 Authority Key Identifier:
                keyid:3D:23:84:B7:84:F1:97:EA:03:DA:C2:FE:DA:78:95:FC:4B:74:07:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PSOEt4Txl-oD2sL-2niV_Et0Byk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:be:74:ea:8c:9a:13:4a:23:3e:6f:8d:0c:89:4c:80:9b:76:
         ab:ff:de:b4:03:79:23:6d:62:34:3c:b1:4b:ff:65:bf:1e:33:
         a9:55:0f:30:86:39:76:46:b5:66:d2:48:2d:9e:8d:14:ae:cc:
         c8:2d:71:fa:b5:a4:51:fb:bb:f5:8b:62:5f:0e:a2:75:d4:e6:
         f6:89:63:15:08:16:ab:24:1e:c7:ce:d2:22:67:6f:d1:c7:03:
         37:0b:e7:1f:2b:b2:d0:b3:1a:df:d0:b5:5a:5a:a1:83:6d:4e:
         61:d7:76:b7:a5:1a:4e:fd:d1:3f:70:b3:62:96:bf:1d:5a:2e:
         51:5f:2e:09:2b:a1:36:42:fd:4c:36:ff:9e:bf:d7:da:a1:63:
         52:bb:6d:21:31:18:02:19:60:a7:cd:b9:5a:94:de:b5:a7:b9:
         6b:74:0c:27:34:9c:a0:af:86:4d:11:79:8d:81:45:bb:75:18:
         8c:33:eb:0b:3c:be:a6:02:f6:10:b5:ea:83:28:d2:21:26:98:
         af:af:a2:ae:98:40:80:f5:a6:8a:15:ac:3c:c8:6c:39:3d:5e:
         99:59:90:ec:af:08:e4:ee:7d:ba:dd:0a:cb:54:a3:91:91:b5:
         f3:7d:97:8e:b2:d2:98:a7:44:48:89:b7:8f:6a:1e:d6:ab:8f:
         2d:4f:ad:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pl10WWb+Yylh/Oaiq2Gq4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkMjM4NGI3ODRmMTk3ZWEwM2RhYzJmZWRhNzg5NWZjNGI3
NDA3MjkwHhcNMjYwMzI2MTAwMTE4WhcNMjYwMzI3MTAwMTE4WjAzMTEwLwYDVQQD
EygwNTYzMmZkYmQ4NTlmZDZmMjhjZDNlZTk0MDYxYzQxMzNjMDU5ZmY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJG/Fv5Ribdm0UQGtrMpMpHav3v0
rhI8NzB7E2VUpUscafMOqqXhTriNMSohqmRb1F7gUgSyzjutrzP9uh+XGlprxZK9
Fye4kHDOHx5iogLwnp3LrXEq/iiDFtsZxcxCv80RDTwBud78uTmws7z9SkYifZ3+
HARAH0NVfbrVkmk8/VkcDX62O40ZjIgz03xaWiYV0pdVG8rXGRuxPEG1JSPpBZUg
gDRHAKNkgBvj4mCHUR6pPcd13+qRGxsxvUaQax8Eo2GJXS2fMJVv3XCYoF/T2wPX
TwI6m8k0CEPMjOIgho66dz4BksYluxQMFkp86+Qix12urtZESb4ZrYZXAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAVjL9vYWf1vKM0+6UBhxBM8BZ/1MB8GA1UdIwQY
MBaAFD0jhLeE8ZfqA9rC/tp4lfxLdAcpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFNPRXQ0VHhsLW9EMnNMLTJuaVZfRXQwQnlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8zYmQxM2QtZmU5NS00ODZmLTgwZWYt
ZjA3MzU0ODM1MmJmLzEvUFNPRXQ0VHhsLW9EMnNMLTJuaVZfRXQwQnlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC8zYmQxM2QtZmU5NS00ODZmLTgwZWYtZjA3MzU0ODM1MmJm
LzEvUFNPRXQ0VHhsLW9EMnNMLTJuaVZfRXQwQnlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf7506oya
E0ojPm+NDIlMgJt2q//etAN5I21iNDyxS/9lvx4zqVUPMIY5dka1ZtJILZ6NFK7M
yC1x+rWkUfu79YtiXw6iddTm9oljFQgWqyQex87SImdv0ccDNwvnHyuy0LMa39C1
Wlqhg21OYdd2t6UaTv3RP3CzYpa/HVouUV8uCSuhNkL9TDb/nr/X2qFjUrttITEY
Ahlgp825WpTetae5a3QMJzScoK+GTRF5jYFFu3UYjDPrCzy+pgL2ELXqgyjSISaY
r6+irphAgPWmihWsPMhsOT1emVmQ7K8I5O59ut0Ky1SjkZG1832XjrLSmKdESIm3
j2oe1quPLU+tlw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:05:36 2026 by rpki-client