Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/m4Me6Uw3ubEVnH13MpNhgatUHYA.mft
File:                     m4Me6Uw3ubEVnH13MpNhgatUHYA.mft (raw, json)
Hash identifier:          PJkhjwnemWof0GjqzFRDsCCdE9rUUeVsHY8L715Eaoc=
Subject key identifier:   EB:89:4C:F6:DA:3F:D6:B0:CA:62:54:C0:AC:20:40:74:DC:DD:92:F9
Authority key identifier: 9B:83:1E:E9:4C:37:B9:B1:15:9C:7D:77:32:93:61:81:AB:54:1D:80
Certificate issuer:       /CN=9b831ee94c37b9b1159c7d7732936181ab541d80
Certificate serial:       019D273AF38C14D9D5272363A7A469B08D62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m4Me6Uw3ubEVnH13MpNhgatUHYA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/m4Me6Uw3ubEVnH13MpNhgatUHYA.mft
Manifest number:          188E
Signing time:             Wed 25 Mar 2026 23:01:07 +0000
Manifest this update:     Wed 25 Mar 2026 23:01:07 +0000
Manifest next update:     Thu 26 Mar 2026 23:01:07 +0000
Files and hashes:         1: MlOfNk7Q3shUXI9a3n1KJjtXLCU.roa (hash: AIXKvNEgmoHFwpe6ZZaU57lVrd3l/1EtmwOvF6+bSNc=)
                          2: m4Me6Uw3ubEVnH13MpNhgatUHYA.crl (hash: 390y9bJ7FF9L2FEOgQEfS3wr+O32POik3pqfI4Zr7qY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/m4Me6Uw3ubEVnH13MpNhgatUHYA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/m4Me6Uw3ubEVnH13MpNhgatUHYA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m4Me6Uw3ubEVnH13MpNhgatUHYA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:3a:f3:8c:14:d9:d5:27:23:63:a7:a4:69:b0:8d:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b831ee94c37b9b1159c7d7732936181ab541d80
        Validity
            Not Before: Mar 25 23:01:07 2026 GMT
            Not After : Mar 26 23:01:07 2026 GMT
        Subject: CN=eb894cf6da3fd6b0ca6254c0ac204074dcdd92f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c1:d2:65:c4:a1:44:fd:e3:fa:a0:79:89:cd:
                    2d:0f:57:68:85:cd:82:e0:42:1b:15:d8:7e:46:ca:
                    22:f0:10:b1:3f:36:82:38:da:4f:62:f5:81:31:d5:
                    ec:3b:18:2f:ce:ca:51:fc:7d:a3:58:c0:92:cd:94:
                    77:7e:f3:a0:f1:59:0f:8f:13:45:df:94:16:77:06:
                    17:bc:a0:89:9b:86:1e:fe:0f:02:04:e5:94:a2:5f:
                    69:9a:d9:74:fa:fa:9c:3a:ff:3a:89:23:7c:83:cb:
                    f2:46:89:fe:9c:b8:d5:cb:16:46:ac:ea:c4:7c:75:
                    c4:1e:32:06:0c:82:52:66:5f:41:67:62:b6:0d:1e:
                    03:be:ca:31:de:50:78:12:a6:0c:ac:e8:eb:78:e9:
                    a7:ad:f6:f0:86:5b:52:d5:72:11:b6:0e:34:f1:f2:
                    7b:1b:61:55:cc:d5:c0:70:17:39:10:c2:32:9c:82:
                    62:04:14:26:24:41:31:ba:19:2b:b7:2e:ea:16:92:
                    8d:46:c2:f9:f5:69:07:70:3c:e1:7c:7d:d9:0d:33:
                    ab:65:0a:df:a6:f7:ad:21:ad:35:1f:a2:5f:78:cb:
                    41:cb:bf:42:21:fc:0d:7b:82:f5:40:91:4f:f2:bb:
                    70:42:2a:f2:c7:b4:01:ab:01:78:bd:22:2a:f4:34:
                    cb:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:89:4C:F6:DA:3F:D6:B0:CA:62:54:C0:AC:20:40:74:DC:DD:92:F9
            X509v3 Authority Key Identifier:
                keyid:9B:83:1E:E9:4C:37:B9:B1:15:9C:7D:77:32:93:61:81:AB:54:1D:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4Me6Uw3ubEVnH13MpNhgatUHYA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/m4Me6Uw3ubEVnH13MpNhgatUHYA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/m4Me6Uw3ubEVnH13MpNhgatUHYA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:7e:a4:54:c5:11:78:4c:06:78:08:c6:36:d0:7d:58:46:2c:
         60:dc:21:73:ed:3f:9a:d8:e5:10:e5:7c:79:65:a4:28:2a:8e:
         3b:56:d4:76:9b:38:93:e5:ed:de:7e:e1:fe:05:44:db:9d:4c:
         de:85:05:87:e4:bf:07:e9:8a:6b:e3:cd:95:30:a0:bb:3f:0f:
         2b:23:e7:ab:c1:7b:c9:97:61:62:3f:39:bd:35:ca:38:91:a0:
         69:4b:f2:2e:85:2b:e6:6a:6e:e2:85:ae:83:a2:59:93:e5:e0:
         97:6f:58:14:fe:b6:1c:3b:13:96:47:4a:05:02:32:49:64:b8:
         d7:f8:95:39:14:4a:1d:83:cb:f7:cc:b7:e3:f7:fa:c4:84:a0:
         19:aa:ac:76:90:86:c3:b2:f5:71:03:66:8d:4d:ad:7b:12:5f:
         f5:e2:75:00:dd:c7:0d:ed:cc:92:42:5f:f7:30:71:b0:23:45:
         13:ac:53:92:40:07:6e:d4:91:1e:5a:f0:76:3a:00:48:c2:47:
         40:76:28:75:48:23:8c:b2:7f:6b:ce:38:58:c0:32:f0:e1:66:
         a5:2f:84:cf:4f:b0:d9:a5:bb:d4:87:8e:3c:d9:4b:6b:4d:6e:
         63:3b:c3:bb:19:1e:86:6d:b7:93:70:cf:cf:67:0f:01:8a:ff:
         32:df:3e:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:08 2026 by rpki-client