Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.mft
File:                     Zo2pL5m1QH8oovNmE-hJRHqT9rk.mft (raw, json)
Hash identifier:          WRfds9eQV8OSMI0c/sS9y0VNSuNq79muL7uZrEVZg8c=
Subject key identifier:   4C:55:EC:57:2F:0C:DA:F9:44:72:11:8D:6C:5A:8B:72:EB:04:5F:52
Authority key identifier: 66:8D:A9:2F:99:B5:40:7F:28:A2:F3:66:13:E8:49:44:7A:93:F6:B9
Certificate issuer:       /CN=668da92f99b5407f28a2f36613e849447a93f6b9
Certificate serial:       019D2C60D91345EBF2BCE15BD77711439083
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zo2pL5m1QH8oovNmE-hJRHqT9rk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.mft
Manifest number:          188E
Signing time:             Thu 26 Mar 2026 23:00:37 +0000
Manifest this update:     Thu 26 Mar 2026 23:00:37 +0000
Manifest next update:     Fri 27 Mar 2026 23:00:37 +0000
Files and hashes:         1: 0R8Nyml_jNijyqA_Jia2Nz1Ew_0.roa (hash: j8m8dgU0c2ttdrUH0oHPxb+CqlN+qsjDTMJ+LPXhKnk=)
                          2: Zo2pL5m1QH8oovNmE-hJRHqT9rk.crl (hash: cc/s5lCi36qisR4DKp72OXTOa7rcMFek8PShWxxzopQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zo2pL5m1QH8oovNmE-hJRHqT9rk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:32:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2c:60:d9:13:45:eb:f2:bc:e1:5b:d7:77:11:43:90:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=668da92f99b5407f28a2f36613e849447a93f6b9
        Validity
            Not Before: Mar 26 23:00:37 2026 GMT
            Not After : Mar 27 23:00:37 2026 GMT
        Subject: CN=4c55ec572f0cdaf94472118d6c5a8b72eb045f52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:45:01:7f:4e:5e:38:aa:eb:8f:39:fe:52:8c:
                    ac:c3:2e:90:99:b6:2b:27:48:9a:29:b6:ee:2f:22:
                    90:e2:f4:12:88:e3:8f:1f:06:b3:e3:dd:46:fd:fc:
                    73:26:b2:90:da:9c:df:c4:33:7d:b0:49:27:2e:3e:
                    77:0b:98:78:2c:91:d5:96:8c:00:38:b7:9c:d9:2d:
                    1e:81:1b:d7:2b:60:e2:43:30:1b:2e:fe:b2:c6:f5:
                    59:f9:62:a1:60:db:a2:be:cd:01:b6:29:b5:bf:1b:
                    82:ef:50:46:d7:f0:92:39:27:5a:25:ad:c3:d0:fe:
                    b5:72:40:44:d5:ea:c4:fa:ac:60:0e:ae:9f:24:e3:
                    59:bd:59:10:5e:50:32:87:2e:14:72:a2:99:4c:e8:
                    04:bd:07:ae:08:1c:d9:1d:bf:3b:03:de:23:5c:63:
                    a1:a3:ad:8c:13:36:47:23:96:9a:50:6d:2f:c6:dc:
                    4d:fe:c7:0a:82:75:8b:b5:f2:d3:db:d7:26:3b:ab:
                    bd:84:18:b2:bf:8b:78:e9:6c:e3:56:9f:2f:23:b8:
                    d3:e8:06:e3:78:51:70:ae:71:4e:a9:cf:aa:25:96:
                    b8:13:4c:68:35:83:d6:7a:e9:48:27:0b:c3:65:5f:
                    5b:24:d6:77:a1:cd:1e:9b:ec:19:5c:04:9e:70:81:
                    5a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:55:EC:57:2F:0C:DA:F9:44:72:11:8D:6C:5A:8B:72:EB:04:5F:52
            X509v3 Authority Key Identifier:
                keyid:66:8D:A9:2F:99:B5:40:7F:28:A2:F3:66:13:E8:49:44:7A:93:F6:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zo2pL5m1QH8oovNmE-hJRHqT9rk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:29:bf:c0:83:d6:7d:f7:de:41:33:d7:27:4d:d5:e0:e5:b5:
         11:3d:e4:d2:f4:28:0c:d0:00:42:fe:d9:1c:cd:48:7a:62:8c:
         28:a5:df:1f:db:2c:d6:14:d4:92:d5:5d:e7:9b:bb:aa:52:ef:
         55:9f:21:ea:44:0b:d3:6e:14:61:9e:b2:a5:63:0a:00:9d:84:
         b5:8e:5d:d7:02:50:c8:ee:b7:89:c6:bc:b4:8e:20:73:2f:eb:
         af:fb:2e:ab:0f:d7:db:21:86:64:4c:31:87:87:f5:ae:74:23:
         b9:b2:74:d8:c1:2f:e1:d5:e2:29:8b:3a:ce:e9:f9:f5:2e:0a:
         28:35:64:7c:50:75:99:23:fd:52:a6:59:5e:02:ee:b1:30:2f:
         31:62:cd:2f:93:82:b4:6c:8b:20:70:c0:50:3a:62:66:d8:28:
         2f:88:f6:dc:0a:5c:49:99:c1:9a:3e:16:5e:7e:ab:1d:1c:09:
         85:bf:88:cd:00:a1:7d:66:e1:34:7e:a4:49:32:ab:3f:ad:d6:
         8b:62:c7:ee:a6:7a:08:58:3a:51:07:95:ce:9a:92:9d:a6:b5:
         a7:76:38:8e:a7:cc:27:dd:3e:03:e2:e2:50:91:93:1c:71:34:
         d3:d0:76:a6:1a:e2:3b:ac:bb:0a:b4:d5:76:60:08:02:c1:cd:
         96:37:64:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:34:18 2026 by rpki-client