Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.mft
File:                     g2Uo4VK23LoVcSQaxVvlvOARGLc.mft (raw, json)
Hash identifier:          iadCKhPv8H9ZuFyedNEPnzVngwX83YY1Z6wqWbP7JoM=
Subject key identifier:   C6:B5:61:5A:84:59:C6:0B:E3:1A:88:5B:F6:EA:D2:7A:E6:ED:7A:8B
Authority key identifier: 83:65:28:E1:52:B6:DC:BA:15:71:24:1A:C5:5B:E5:BC:E0:11:18:B7
Certificate issuer:       /CN=836528e152b6dcba1571241ac55be5bce01118b7
Certificate serial:       019D284D3D71FA98A5A87F4B0A659C029C88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g2Uo4VK23LoVcSQaxVvlvOARGLc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.mft
Manifest number:          188A
Signing time:             Thu 26 Mar 2026 04:00:43 +0000
Manifest this update:     Thu 26 Mar 2026 04:00:43 +0000
Manifest next update:     Fri 27 Mar 2026 04:00:43 +0000
Files and hashes:         1: 4vogBCHvVhbK8N2sbK3joTZSar8.roa (hash: pJFApZIgzEg6Z5G8+ARw6VHXe5cVu/+xIPiV86FoPSo=)
                          2: 7lhE6bzZhG0C5CmBmaI7HzYPl8s.roa (hash: ToooYHL477UW9eXXr8dqX98p19Eo18MQyb6sYa2XGsM=)
                          3: TsBKJ5VG1iOHqte2doC7OTdW_hw.roa (hash: KJo9UiYoALbrSsQU23bvnMkU2vT+dKNpE5NMA+Hvo6E=)
                          4: g2Uo4VK23LoVcSQaxVvlvOARGLc.crl (hash: VZG+yqodOkjkVz/Klf0+uGy02/I28nKcqNR+FhavZXY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g2Uo4VK23LoVcSQaxVvlvOARGLc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4d:3d:71:fa:98:a5:a8:7f:4b:0a:65:9c:02:9c:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=836528e152b6dcba1571241ac55be5bce01118b7
        Validity
            Not Before: Mar 26 04:00:43 2026 GMT
            Not After : Mar 27 04:00:43 2026 GMT
        Subject: CN=c6b5615a8459c60be31a885bf6ead27ae6ed7a8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d3:76:c3:40:e7:70:5f:a9:12:dd:9a:c6:80:
                    84:5d:79:a3:f1:fe:fc:4a:04:ce:d0:d1:fa:e4:da:
                    96:80:65:82:81:4b:c5:2b:18:61:e3:80:33:46:41:
                    79:35:88:10:72:ab:fe:5c:cc:56:b7:0c:19:ec:e4:
                    e0:55:17:c9:58:09:53:14:68:da:b1:e5:4c:c6:fb:
                    86:56:92:80:cc:20:4f:b5:7b:c9:ad:3a:1c:6d:4d:
                    ca:ce:c2:f2:5a:7c:39:32:92:1e:b2:b0:41:9a:7c:
                    e4:66:21:40:85:e1:b9:9a:80:8d:ac:41:65:f0:ef:
                    fd:a3:a8:c7:00:6f:98:6f:0e:2e:97:6c:3c:ca:8b:
                    7f:2a:99:3b:af:c2:59:d3:74:3b:80:5d:f3:69:dc:
                    d2:b4:ec:12:f9:ac:53:6e:ca:52:76:3e:92:c6:39:
                    00:49:d4:3b:f2:76:3e:5b:9f:c5:10:40:ea:15:ea:
                    9a:b6:c2:d9:9f:b9:00:fd:38:a9:c1:37:ea:39:64:
                    1c:c4:37:b9:b0:c1:f1:43:d0:8d:41:20:8d:86:80:
                    ce:65:b4:82:12:13:aa:84:63:6f:c4:a8:f6:fc:4c:
                    bc:33:47:34:e7:cc:76:1e:39:e3:50:d4:c3:91:50:
                    69:61:65:c8:a3:98:cb:04:da:5b:8b:63:03:f1:04:
                    06:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:B5:61:5A:84:59:C6:0B:E3:1A:88:5B:F6:EA:D2:7A:E6:ED:7A:8B
            X509v3 Authority Key Identifier:
                keyid:83:65:28:E1:52:B6:DC:BA:15:71:24:1A:C5:5B:E5:BC:E0:11:18:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2Uo4VK23LoVcSQaxVvlvOARGLc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:6c:b7:ec:08:00:cd:c6:4b:3c:46:54:02:42:ec:0b:4e:3c:
         e9:03:7b:d2:65:4b:98:d9:54:04:cb:81:4c:4d:56:b8:f8:e2:
         c4:d1:08:c0:8b:d0:26:7e:ed:e9:73:08:42:d3:7c:4d:29:9a:
         b6:44:ec:1a:fc:72:af:b4:5c:82:71:9f:bd:bd:5a:c1:c7:1a:
         93:00:20:a9:c7:ac:ca:e8:81:cb:45:40:70:47:2c:f7:61:c8:
         c0:41:9d:46:c3:fe:06:db:2a:aa:5b:d2:dd:78:ee:19:a7:d8:
         ea:e5:da:5c:d1:4b:1b:be:c3:f1:7e:34:b9:60:8b:11:6e:9e:
         1d:7b:f9:68:cc:2b:e5:e2:cd:e5:14:72:e6:8d:ac:cc:9f:68:
         56:0c:92:0a:ae:fc:6d:a6:8c:1e:aa:4c:23:1b:af:6e:92:ce:
         ee:93:5c:0b:ee:c3:10:b5:b2:2e:e5:4c:97:2b:ab:83:d4:00:
         20:6b:fb:cc:24:89:0e:ba:8f:53:86:85:11:79:64:1a:b5:09:
         5d:d5:e8:db:36:be:16:99:e8:8e:5e:06:2e:b6:d2:37:95:86:
         2d:6f:69:8e:e5:66:d0:e9:48:57:9b:0f:80:51:99:3b:56:fb:
         66:81:84:08:f6:83:ca:78:3a:79:74:0c:df:2a:c3:b0:68:13:
         3b:6e:d5:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:00:45 2026 by rpki-client