Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft
File:                     ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft (raw, json)
Hash identifier:          iNtW17xImKd00SepAH0/20mbsGjBifCs6F8wuLYlW1A=
Subject key identifier:   43:B2:35:91:89:B1:41:19:14:FD:8D:F7:37:26:43:11:9B:83:E7:6B
Authority key identifier: 49:C4:03:D4:3B:5F:38:FC:A2:11:9C:D1:40:9A:92:76:3E:DE:FE:71
Certificate issuer:       /CN=49c403d43b5f38fca2119cd1409a92763edefe71
Certificate serial:       019D2695EE9B4F33AA8DEF4863F7D25F4FF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft
Manifest number:          188C
Signing time:             Wed 25 Mar 2026 20:00:53 +0000
Manifest this update:     Wed 25 Mar 2026 20:00:53 +0000
Manifest next update:     Thu 26 Mar 2026 20:00:53 +0000
Files and hashes:         1: 01DTvRDJh5LAMewuiaxq8ihTWOw.roa (hash: 873+VYTyzWaUqkJstRwODHvpIJL6rDoaYBv6eGv0Qo0=)
                          2: 5rakYdNxKMjh5JNPex8iKzp_gtA.roa (hash: 6LspddKmtQtuac9ZuOl1VnhHP0Iq5oFWoFzvEG8ERXE=)
                          3: 814WTzXBXOIciV517t_FSJpheFU.roa (hash: 3rVBxA84Q0GQ5WcUB0js4QFJ7jGwBh1Rh823C6IzdeE=)
                          4: PQhkPKvFMO7XAZJCK0yg6JOYn-Q.roa (hash: GclksRKdEgrXLLR1LhQTLSvorV7LCPoO0w2Ir6KfZ4M=)
                          5: Qi3PbQnrdw7q8NtmLcDOyzuEuok.roa (hash: Ene2M6hdbbKNY0YIKXvUxR9PygRHkyqGW28j+nRBH9E=)
                          6: ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl (hash: cg7kDwmIuSqY/ugAaDsVr6blBci3uhjlMbRXbONjvQE=)
                          7: UKQMI_1tAdL7QkXpECyLkKgiFXw.roa (hash: xCvizHfY/xMnYQ9a7uuh91R0ms1D7ktEV/mIEaRjfJ8=)
                          8: iB6K871-MTgrHCKR-pl3wKEY8VE.roa (hash: evrLdA7V1aTPB0+S9RwUtMXPCQscLGRKXxGpKmpY5Z4=)
                          9: of6LgZjZn377OWe4qW9VxsrXlzU.roa (hash: mzM/Cns9/j03lTiA+9ZfDQNcGWtBmHN0WQWYMBfi0eo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:95:ee:9b:4f:33:aa:8d:ef:48:63:f7:d2:5f:4f:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49c403d43b5f38fca2119cd1409a92763edefe71
        Validity
            Not Before: Mar 25 20:00:53 2026 GMT
            Not After : Mar 26 20:00:53 2026 GMT
        Subject: CN=43b2359189b1411914fd8df7372643119b83e76b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:50:7f:26:94:4e:25:8e:e0:aa:b4:20:04:c9:
                    b0:85:d5:71:f3:db:8e:5c:26:1c:c8:4f:6c:8d:ec:
                    f9:b2:11:8a:de:5d:4b:ff:bd:eb:b2:6e:bf:c5:43:
                    fb:66:5d:41:10:02:41:b8:95:5f:30:79:71:b9:d7:
                    7b:62:38:85:ba:dd:2a:e9:1d:58:1b:4a:b7:34:be:
                    22:7d:1a:cd:cc:ae:5b:0e:a3:15:2d:ac:53:fb:ce:
                    fd:7b:ad:f2:bb:07:27:e8:54:66:cb:d1:d6:f0:4d:
                    8b:54:df:82:91:08:40:e0:05:55:7c:7e:5a:fc:f9:
                    be:3d:9e:24:0f:ed:a2:96:ce:fb:c2:3c:ff:e4:7a:
                    71:f8:90:5b:3f:f3:ac:57:ff:b8:79:17:85:83:22:
                    67:57:59:1b:0e:4e:6e:37:16:4f:b5:e5:f9:36:a9:
                    ba:5c:11:03:08:92:2e:13:b3:bd:66:da:db:a8:09:
                    3c:2e:17:28:5e:76:81:bb:b1:16:b5:7f:18:b9:6c:
                    03:a9:f1:c7:0a:b1:a0:28:0d:61:64:f4:bf:5a:de:
                    14:af:ad:ae:81:de:c4:56:8f:77:eb:46:d5:cb:72:
                    c2:3d:34:b2:d0:be:5a:5a:ea:b3:81:e4:9a:57:0d:
                    47:de:4a:db:67:33:0a:32:ac:bd:28:e3:39:18:7f:
                    12:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:B2:35:91:89:B1:41:19:14:FD:8D:F7:37:26:43:11:9B:83:E7:6B
            X509v3 Authority Key Identifier:
                keyid:49:C4:03:D4:3B:5F:38:FC:A2:11:9C:D1:40:9A:92:76:3E:DE:FE:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:61:f8:f1:6e:14:60:1d:a4:6c:49:9a:a6:18:96:13:ee:65:
         40:3b:b0:fe:df:e4:8b:79:66:b9:fa:1c:eb:1b:31:11:e3:01:
         a0:1d:30:e0:8e:9a:5b:b9:8d:d3:e6:2a:6f:27:af:63:ca:f1:
         1d:07:eb:b0:4a:15:32:f2:0c:8d:06:b5:31:eb:65:00:ee:ba:
         cf:db:7f:a3:c5:9a:44:4c:5b:32:ae:e3:d5:d7:2a:57:ac:bb:
         a0:04:6f:6f:b0:77:f1:c3:20:f7:39:9f:14:5f:69:a7:48:9f:
         1c:98:67:ba:73:16:f6:0a:f3:61:21:1d:3d:48:0a:43:49:11:
         49:7f:63:8e:be:3b:2c:88:ce:ad:5f:e5:a5:8d:3f:2d:d6:0b:
         0c:ab:62:34:b8:49:cf:7b:8f:ea:a1:40:0d:1c:df:ab:37:c4:
         4a:63:ae:69:f9:be:08:7b:d7:f8:c7:fa:74:fa:8e:d2:0f:59:
         af:79:a2:27:cc:de:37:50:48:99:7f:7b:fc:bb:38:f2:c2:d2:
         6f:e5:ab:bf:84:fd:9f:a2:02:73:20:d5:09:70:ba:b2:45:58:
         2a:c9:f7:4e:18:7f:5c:a7:69:88:34:5e:ec:ec:50:a4:79:b3:
         f8:59:0b:70:ca:6b:d3:cc:11:71:75:8c:03:d4:d2:ca:66:7b:
         20:50:25:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:18 2026 by rpki-client