Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft
File:                     6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft (raw, json)
Hash identifier:          EDahcphq5lAzbc02foBQv8eK6RRNMKKNT+/ei4enETA=
Subject key identifier:   C1:B5:15:32:B6:C1:56:38:B4:C8:2C:AC:12:DA:44:CD:D2:B1:0A:33
Authority key identifier: E9:76:56:F2:20:15:58:9F:F7:CC:66:05:68:67:F6:05:D8:14:49:BC
Certificate issuer:       /CN=e97656f22015589ff7cc66056867f605d81449bc
Certificate serial:       019D2B856A57BA5412C2F3C499714EBB91CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft
Manifest number:          188B
Signing time:             Thu 26 Mar 2026 19:00:56 +0000
Manifest this update:     Thu 26 Mar 2026 19:00:56 +0000
Manifest next update:     Fri 27 Mar 2026 19:00:56 +0000
Files and hashes:         1: 4ZkKYT4tRABWwIPFtbKwFSuv7hE.roa (hash: D0yakznjZ4GLkw8PJfZndlmaCDEdQxVUthJnURjvcH4=)
                          2: 6XZW8iAVWJ_3zGYFaGf2BdgUSbw.crl (hash: l/9zhs7odPt3LGGjkaJ153IHVmOe1++fqMdK8Tdp1oQ=)
                          3: MUlaySuRJAJWjFOIuDQTeuxgbkI.roa (hash: k8la9Hpl6/O/fQnwY4pQN76Y+PJ8sXIpVpbtRiPNQgQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2b:85:6a:57:ba:54:12:c2:f3:c4:99:71:4e:bb:91:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e97656f22015589ff7cc66056867f605d81449bc
        Validity
            Not Before: Mar 26 19:00:56 2026 GMT
            Not After : Mar 27 19:00:56 2026 GMT
        Subject: CN=c1b51532b6c15638b4c82cac12da44cdd2b10a33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f5:54:ef:82:66:ea:1d:f2:b1:21:ec:17:96:
                    70:4c:2a:e1:95:4b:52:77:50:8f:0a:e4:7c:60:eb:
                    28:91:53:6d:22:14:ae:cc:2b:b1:26:30:5d:e9:fb:
                    cb:d9:ac:5a:35:bf:20:44:5a:79:f0:c8:c1:a0:40:
                    0f:72:fa:d2:70:51:e1:02:8b:39:7f:88:74:5c:f6:
                    5a:1e:48:7a:58:87:b7:15:49:83:5d:a9:77:91:f5:
                    c2:a8:ea:ff:5d:2f:5a:b5:5a:8b:61:9e:08:4d:a7:
                    30:24:95:c4:0c:1b:b4:d2:7c:48:11:0e:71:34:a5:
                    f0:0a:66:7e:71:b2:15:b1:35:5d:0b:0b:72:59:31:
                    55:d3:d2:35:fc:13:b5:40:e5:ae:67:24:06:c4:18:
                    59:fb:29:45:be:83:75:fa:04:29:9c:a6:22:bc:90:
                    1e:1a:cf:3a:fb:f7:27:82:08:14:ae:3a:d3:09:c2:
                    73:8d:0d:d0:b2:e0:8f:53:0e:cd:54:63:3e:46:ff:
                    3b:cf:72:1d:bb:24:16:ee:f3:ef:83:d6:d2:20:b6:
                    c4:9d:06:c6:81:84:18:38:d5:8c:96:35:2f:87:6e:
                    49:9f:fc:46:1d:fa:1b:f8:cc:96:98:b3:f5:a8:1b:
                    8a:b5:32:1b:6b:c3:71:bd:bb:62:c7:b8:0f:29:84:
                    af:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:B5:15:32:B6:C1:56:38:B4:C8:2C:AC:12:DA:44:CD:D2:B1:0A:33
            X509v3 Authority Key Identifier:
                keyid:E9:76:56:F2:20:15:58:9F:F7:CC:66:05:68:67:F6:05:D8:14:49:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:64:e5:6b:4d:06:22:b7:d7:8f:1e:2f:e1:e7:6a:f6:d1:6b:
         7b:db:d4:c4:6a:85:69:81:43:af:03:34:94:bd:8f:94:8c:06:
         a9:b3:7a:ff:e8:d1:ed:05:b4:91:b8:04:ba:dd:ec:f3:b4:75:
         3d:9f:18:7a:a5:62:66:a2:75:af:55:74:d5:63:8a:a1:06:10:
         e8:05:fd:e4:b3:7f:6f:e7:0e:77:77:47:16:30:64:2c:0d:2a:
         c4:f2:36:80:df:71:7c:80:5e:c4:b6:9a:56:cd:bc:3e:20:e5:
         ae:07:7d:88:86:82:5f:ed:55:70:e1:a2:e9:27:71:0a:05:87:
         bc:ec:82:f1:f6:47:6d:b4:bc:11:c3:58:af:7d:f5:d4:9d:85:
         11:81:15:1e:fc:21:c2:fc:d5:e9:b1:e3:cb:8e:12:e1:7e:99:
         aa:ac:bc:de:52:30:91:4a:53:d9:48:90:99:4b:82:9c:13:71:
         9a:63:6c:c6:5e:f6:4a:a9:36:d6:04:f7:35:57:0d:79:e6:fa:
         ca:37:20:b6:b3:1b:3c:d9:f2:39:fb:0e:89:f5:7c:96:b1:17:
         00:11:0e:c3:d7:f6:94:80:2d:a4:d4:30:95:56:b0:0b:d4:94:
         39:8b:29:d4:4e:97:06:cb:30:75:31:95:e9:ff:5d:a8:d0:57:
         a4:f1:b8:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:29:04 2026 by rpki-client