Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.mft
File:                     ztdVcz6RIDoXwwk8pdnLA5LZT2E.mft (raw, json)
Hash identifier:          K79XVjiTaHU4Hl1MgwUN21ShqZvSvkk56ZDctYaiBKw=
Subject key identifier:   69:1E:E8:CC:6E:34:87:29:92:84:F7:A8:6E:E5:4A:EA:D2:15:BE:4F
Authority key identifier: CE:D7:55:73:3E:91:20:3A:17:C3:09:3C:A5:D9:CB:03:92:D9:4F:61
Certificate issuer:       /CN=ced755733e91203a17c3093ca5d9cb0392d94f61
Certificate serial:       019D2884DF66866730F3CB9B9EECC4D9B744
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ztdVcz6RIDoXwwk8pdnLA5LZT2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.mft
Manifest number:          188A
Signing time:             Thu 26 Mar 2026 05:01:29 +0000
Manifest this update:     Thu 26 Mar 2026 05:01:29 +0000
Manifest next update:     Fri 27 Mar 2026 05:01:29 +0000
Files and hashes:         1: 1-QSBwL6YQNpRB581xj69Bh0HK0w.roa (hash: 5GWzZ29/zinUcM0sRPnSs7Ch4eJ52d1lcTmUUiRhGHw=)
                          2: 1-kWvGwe3rzaIsRc1gmxCFz8lXgU.roa (hash: daW3ebtu2fPNsARxfFCyXqL/swO4wfgF7RvbMI+oQl0=)
                          3: vVYDZup6TPMR4MVl16L5Tcxugnk.roa (hash: YNo9hVKBV6+t6/2iujMaXScihQA5Uyp7lluOC3Eyk8o=)
                          4: ztdVcz6RIDoXwwk8pdnLA5LZT2E.crl (hash: nTFTE7k2g6kIqmIuymVQk4VEALgpUsC7R4+p0S3lBtA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ztdVcz6RIDoXwwk8pdnLA5LZT2E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:84:df:66:86:67:30:f3:cb:9b:9e:ec:c4:d9:b7:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ced755733e91203a17c3093ca5d9cb0392d94f61
        Validity
            Not Before: Mar 26 05:01:29 2026 GMT
            Not After : Mar 27 05:01:29 2026 GMT
        Subject: CN=691ee8cc6e3487299284f7a86ee54aead215be4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:67:67:5e:44:8d:ce:38:f6:fd:03:a8:1b:49:
                    bf:0e:e6:64:45:11:9b:ae:c9:c0:fc:00:ea:2d:36:
                    b6:ee:32:3b:22:0b:04:28:17:31:16:84:9f:90:7d:
                    9c:4f:61:46:90:1e:02:f4:c0:93:01:c8:70:13:c6:
                    a2:66:dd:0b:2c:3b:44:33:92:3c:5e:a0:c7:77:b7:
                    39:b7:b8:f6:d1:a3:9d:c5:27:be:bd:3a:f6:57:15:
                    51:ea:c8:b9:44:ec:a7:69:4f:a1:4f:04:be:a5:20:
                    b1:5e:dc:77:5f:f8:c3:ed:ac:10:c5:01:a7:16:71:
                    16:9c:b1:51:f7:4c:fc:51:60:02:d2:43:7c:32:68:
                    2c:f9:ff:2f:7e:c4:44:c1:3f:eb:4b:13:23:5b:57:
                    41:1d:26:1c:fe:8a:f3:8e:d8:6e:e9:6f:cc:f9:a5:
                    ae:81:9b:77:cb:b3:94:a6:92:3e:d8:59:59:08:e0:
                    bd:52:ae:11:5a:50:b6:15:02:c8:60:24:4b:9c:3f:
                    48:05:4c:f3:4c:a7:fb:e2:86:75:37:e8:e6:a2:82:
                    62:bf:b5:d1:fc:27:11:5d:01:80:a2:c6:1c:51:b2:
                    62:da:5f:99:31:11:29:1d:5e:0f:71:64:b8:54:29:
                    c8:1c:bf:b1:d6:aa:aa:22:39:10:71:0f:22:0a:e7:
                    8f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:1E:E8:CC:6E:34:87:29:92:84:F7:A8:6E:E5:4A:EA:D2:15:BE:4F
            X509v3 Authority Key Identifier:
                keyid:CE:D7:55:73:3E:91:20:3A:17:C3:09:3C:A5:D9:CB:03:92:D9:4F:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztdVcz6RIDoXwwk8pdnLA5LZT2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:b7:ca:33:e9:fd:3e:64:7a:16:85:f4:ee:25:f9:f9:2e:89:
         28:d4:f6:ed:f4:8e:c0:94:18:ae:f3:82:2b:5e:d8:6f:b7:c4:
         51:24:56:0e:ad:3b:06:3e:8d:d8:42:f9:ce:05:ee:c6:17:21:
         34:7b:56:d6:3e:51:22:f9:2c:d3:a2:bf:d6:dc:cf:b9:4a:59:
         0c:a6:5c:31:5b:34:2f:73:06:06:e3:62:d9:32:13:92:8e:57:
         09:5f:2c:1a:51:44:ad:7f:63:65:5f:da:36:9e:5c:de:04:f9:
         51:41:9e:e5:7a:3f:47:40:58:1a:98:f4:af:6a:95:6a:25:31:
         ce:d7:b4:15:ba:be:03:52:bd:04:99:0b:d3:36:5e:cf:a2:0f:
         b3:37:a4:d9:41:93:f7:63:ed:3a:b8:64:aa:c9:5c:46:19:67:
         5b:e4:42:7a:b3:97:91:bb:2f:c6:27:4e:a2:da:c2:5e:4a:b7:
         17:a0:5d:2f:22:33:e2:71:29:d1:da:b1:83:47:73:bf:cf:20:
         59:04:26:fe:f7:56:9e:a5:c4:5e:4d:90:e2:32:2a:75:9e:d6:
         f6:4f:e5:ba:2b:a0:80:e9:37:f2:1e:87:b6:2d:07:f0:d2:b9:
         68:d3:19:de:04:a8:58:11:04:00:7e:99:a5:99:a5:37:50:ee:
         03:27:60:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ohN9mhmcw88ubnuzE2bdEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlZDc1NTczM2U5MTIwM2ExN2MzMDkzY2E1ZDljYjAzOTJk
OTRmNjEwHhcNMjYwMzI2MDUwMTI5WhcNMjYwMzI3MDUwMTI5WjAzMTEwLwYDVQQD
Eyg2OTFlZThjYzZlMzQ4NzI5OTI4NGY3YTg2ZWU1NGFlYWQyMTViZTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA42dnXkSNzjj2/QOoG0m/DuZkRRGb
rsnA/ADqLTa27jI7IgsEKBcxFoSfkH2cT2FGkB4C9MCTAchwE8aiZt0LLDtEM5I8
XqDHd7c5t7j20aOdxSe+vTr2VxVR6si5ROynaU+hTwS+pSCxXtx3X/jD7awQxQGn
FnEWnLFR90z8UWAC0kN8Mmgs+f8vfsREwT/rSxMjW1dBHSYc/orzjthu6W/M+aWu
gZt3y7OUppI+2FlZCOC9Uq4RWlC2FQLIYCRLnD9IBUzzTKf74oZ1N+jmooJiv7XR
/CcRXQGAosYcUbJi2l+ZMREpHV4PcWS4VCnIHL+x1qqqIjkQcQ8iCuePdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGke6MxuNIcpkoT3qG7lSurSFb5PMB8GA1UdIwQY
MBaAFM7XVXM+kSA6F8MJPKXZywOS2U9hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenRkVmN6NlJJRG9Yd3drOHBkbkxBNUxaVDJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9jMmY2MWEtMTVmOS00YzZiLTkwZTUt
ZWY0YjY1OWVmZjhkLzEvenRkVmN6NlJJRG9Yd3drOHBkbkxBNUxaVDJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9jMmY2MWEtMTVmOS00YzZiLTkwZTUtZWY0YjY1OWVmZjhk
LzEvenRkVmN6NlJJRG9Yd3drOHBkbkxBNUxaVDJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASrfKM+n9
PmR6FoX07iX5+S6JKNT27fSOwJQYrvOCK17Yb7fEUSRWDq07Bj6N2EL5zgXuxhch
NHtW1j5RIvks06K/1tzPuUpZDKZcMVs0L3MGBuNi2TITko5XCV8sGlFErX9jZV/a
Np5c3gT5UUGe5Xo/R0BYGpj0r2qVaiUxzte0Fbq+A1K9BJkL0zZez6IPszek2UGT
92PtOrhkqslcRhlnW+RCerOXkbsvxidOotrCXkq3F6BdLyIz4nEp0dqxg0dzv88g
WQQm/vdWnqXEXk2Q4jIqdZ7W9k/luiuggOk38h6Hti0H8NK5aNMZ3gSoWBEEAH6Z
pZmlN1DuAydg3Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:53:16 2026 by rpki-client