Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Di5P0hn1t3zoDN-vnjpkQd7FAEI.mft
File:                     Di5P0hn1t3zoDN-vnjpkQd7FAEI.mft (raw, json)
Hash identifier:          IMBFV7Z0xVWrfxz2/SdIPGXz8ERzKPw11KvmbQ6xPUg=
Subject key identifier:   5D:AD:C6:BF:94:90:C7:DA:F9:A3:54:17:70:4E:70:A6:22:68:19:D6
Authority key identifier: 0E:2E:4F:D2:19:F5:B7:7C:E8:0C:DF:AF:9E:3A:64:41:DE:C5:00:42
Certificate issuer:       /CN=0e2e4fd219f5b77ce80cdfaf9e3a6441dec50042
Certificate serial:       019D2A0505E34F6D2E759046122415773020
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Di5P0hn1t3zoDN-vnjpkQd7FAEI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Di5P0hn1t3zoDN-vnjpkQd7FAEI.mft
Manifest number:          188F
Signing time:             Thu 26 Mar 2026 12:01:05 +0000
Manifest this update:     Thu 26 Mar 2026 12:01:05 +0000
Manifest next update:     Fri 27 Mar 2026 12:01:05 +0000
Files and hashes:         1: Bzo_d6zW3tj-cs4yT8d3sKOXlfg.roa (hash: sB4IjXQ2q1JliT65t5pMashaLGv9OdpiFjT65GllIOg=)
                          2: Di5P0hn1t3zoDN-vnjpkQd7FAEI.crl (hash: w7Y5o3iWVcE9qc292fFiIP8aRpYOj7GXqfdBsLAJjJ0=)
                          3: E3W4jp5zsoikKWLmA1V7bWlcpV4.roa (hash: YJ9yEvPcrd1MOHEooUf+VZebkz+BFG/oUSCxEMHiKbk=)
                          4: aUScLYE7hWlZLrttrbL09JUvQA0.roa (hash: x+eRx80jxSLOtFgW7pQIqcwn52mE8qpARjfDhLVRoV4=)
                          5: i72bIypIf2CpFKoEg8C1pt-mNRo.roa (hash: IFGCEB1czLr3SQqiMmwkpKpmacuW/s1RIwvjueqrec8=)
                          6: syHsa3UwI7A4E1vFkZMbu6fpkLc.roa (hash: KLgolmeV6tSpGZyB1XkLi7+L/oDApU24VOgy7S5H3dg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Di5P0hn1t3zoDN-vnjpkQd7FAEI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Di5P0hn1t3zoDN-vnjpkQd7FAEI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Di5P0hn1t3zoDN-vnjpkQd7FAEI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:05:05:e3:4f:6d:2e:75:90:46:12:24:15:77:30:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e2e4fd219f5b77ce80cdfaf9e3a6441dec50042
        Validity
            Not Before: Mar 26 12:01:05 2026 GMT
            Not After : Mar 27 12:01:05 2026 GMT
        Subject: CN=5dadc6bf9490c7daf9a35417704e70a6226819d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:8e:10:a1:7d:2f:83:2f:fe:88:66:ac:7b:c1:
                    c9:e2:c7:ff:3a:d4:30:a1:44:bb:10:de:c3:64:80:
                    e5:92:a2:88:1b:e6:ed:d4:0f:28:05:29:32:ef:93:
                    24:e7:92:9e:bf:78:88:bb:85:78:2e:fd:ed:4d:be:
                    6c:6c:ee:a7:db:3b:58:43:c5:b0:98:e7:34:82:05:
                    4c:0c:61:23:6c:3f:fe:e1:a3:0c:cb:99:03:4b:7d:
                    40:13:c0:84:d9:3c:55:c1:b8:28:6a:75:d6:f4:5f:
                    5b:c8:6e:c7:d4:fb:63:50:49:02:e0:8b:d1:63:93:
                    bf:c0:31:12:74:fe:f5:0e:18:5f:25:01:63:0f:57:
                    b0:d3:29:48:43:2d:dc:c1:5e:9a:52:c5:e3:d4:e0:
                    84:12:a0:7d:1a:66:1c:c5:cb:96:fb:79:b9:c9:37:
                    d6:a1:7c:62:f5:d3:66:0c:8e:0b:9c:f3:d6:9b:cc:
                    32:51:07:87:bd:ce:49:10:cf:99:94:09:84:45:90:
                    20:dd:cb:01:67:1f:85:d1:84:f9:98:9c:9b:3e:a7:
                    3e:95:4f:18:ec:e7:3f:a1:a0:15:f3:33:df:14:76:
                    e1:73:6f:59:87:1f:f3:32:86:b5:8b:29:d2:e0:f1:
                    fa:7c:ba:7c:ad:9e:6c:89:06:44:09:c8:e5:b6:a4:
                    d4:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:AD:C6:BF:94:90:C7:DA:F9:A3:54:17:70:4E:70:A6:22:68:19:D6
            X509v3 Authority Key Identifier:
                keyid:0E:2E:4F:D2:19:F5:B7:7C:E8:0C:DF:AF:9E:3A:64:41:DE:C5:00:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Di5P0hn1t3zoDN-vnjpkQd7FAEI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Di5P0hn1t3zoDN-vnjpkQd7FAEI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Di5P0hn1t3zoDN-vnjpkQd7FAEI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:0f:d8:94:d7:86:f1:10:3d:d4:34:04:a0:f6:8a:cf:66:24:
         5e:de:7e:d3:d1:cf:ec:79:e0:8d:b7:f6:68:6b:e6:83:41:60:
         ce:86:96:d5:4a:9b:67:23:31:99:fe:aa:e5:b3:55:b2:d0:eb:
         a2:0d:64:84:b6:5f:19:53:59:6c:4d:1c:9e:0f:8d:36:5d:56:
         12:9d:e9:8d:13:14:fd:d3:78:6d:1a:f3:64:8a:14:ea:8c:e0:
         a6:61:45:3a:74:be:99:3b:7f:e4:bd:8c:41:e2:59:1d:69:d9:
         cf:54:02:7b:2e:47:42:3d:48:64:eb:2d:0b:2e:d7:35:0c:97:
         22:70:fb:d5:cf:cd:fc:63:d3:6a:4c:b8:87:2d:53:7f:70:bf:
         b4:67:b5:68:f7:e9:29:fa:91:a1:da:69:66:47:57:ee:58:82:
         ed:50:38:38:c2:1a:53:2e:66:67:ed:d2:ca:51:f3:6d:c4:b2:
         c3:bb:8c:a0:24:89:d0:9c:66:09:73:2d:14:16:08:48:0f:32:
         5d:b7:0f:d3:59:47:50:c2:c4:3a:17:40:64:2b:f0:12:7e:bb:
         99:02:69:2e:37:ba:46:6d:c5:f3:d7:70:f8:ec:7b:8d:0f:34:
         97:f3:d2:81:0f:88:27:83:11:73:1a:44:56:98:3e:8d:d5:15:
         de:e1:f3:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:08:43 2026 by rpki-client