Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.mft
File:                     cBxcPyilwHENvkgp0hbInpQu8Os.mft (raw, json)
Hash identifier:          Hcp/LkDcRl19T+yT0NmOXp0CzHfeyjx5FqzTcAWtuVc=
Subject key identifier:   F9:8E:4C:B6:94:FD:FB:37:E4:DB:B0:51:F2:F1:27:CE:8B:03:81:47
Authority key identifier: 70:1C:5C:3F:28:A5:C0:71:0D:BE:48:29:D2:16:C8:9E:94:2E:F0:EB
Certificate issuer:       /CN=701c5c3f28a5c0710dbe4829d216c89e942ef0eb
Certificate serial:       019D27E0694C2D7AFCC8046889DE235E887D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cBxcPyilwHENvkgp0hbInpQu8Os.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.mft
Manifest number:          188A
Signing time:             Thu 26 Mar 2026 02:01:51 +0000
Manifest this update:     Thu 26 Mar 2026 02:01:51 +0000
Manifest next update:     Fri 27 Mar 2026 02:01:51 +0000
Files and hashes:         1: cBxcPyilwHENvkgp0hbInpQu8Os.crl (hash: n6GBeK+vDxJ0j1BD4Tscmi+w8+zSZO634QITqZq7s+I=)
                          2: eq_DMYPwsIw93qds04ZGjJJH5B4.roa (hash: AYOWm+f8xS5MEpFp7ruiXJOd+PYdgBsKeFC1t5gELcY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cBxcPyilwHENvkgp0hbInpQu8Os.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:e0:69:4c:2d:7a:fc:c8:04:68:89:de:23:5e:88:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=701c5c3f28a5c0710dbe4829d216c89e942ef0eb
        Validity
            Not Before: Mar 26 02:01:51 2026 GMT
            Not After : Mar 27 02:01:51 2026 GMT
        Subject: CN=f98e4cb694fdfb37e4dbb051f2f127ce8b038147
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:45:55:70:b1:26:2b:15:47:a7:82:0e:99:db:
                    4a:87:14:f4:76:15:bb:06:4e:ab:fc:ff:d4:76:27:
                    1b:6e:53:62:42:21:e5:e2:78:85:0c:56:88:08:be:
                    18:bb:f0:f8:6a:d9:c9:f8:b9:d8:d0:b8:d1:80:bf:
                    46:99:73:dc:52:5a:6a:4a:b3:bd:e4:a5:e9:7b:c6:
                    cb:b9:45:8e:6e:0f:38:8c:e9:f1:a4:af:e3:cb:8c:
                    9a:f0:84:71:3d:db:02:dd:fc:44:1c:2b:f3:b8:94:
                    5f:cd:33:fa:26:67:f3:b1:87:76:1a:86:38:f4:d3:
                    85:ab:39:c0:d1:77:ee:75:b3:13:bb:92:1b:29:66:
                    f6:3e:c6:89:fd:d4:0f:b2:2b:19:91:ff:6f:88:50:
                    5d:8f:ce:eb:9c:37:c6:e3:08:73:e6:f6:70:a7:4f:
                    3b:3c:a3:18:76:90:ff:64:32:88:15:0d:5f:1f:7b:
                    fc:f2:3c:42:74:9a:75:e8:b7:9e:ca:e1:a6:e9:c3:
                    5e:f8:4a:99:e3:ff:7a:24:bb:3b:e1:f8:8c:f9:f6:
                    d7:df:ae:d2:a8:82:dd:47:3d:44:5e:54:1b:73:ef:
                    51:9b:ef:00:b0:9d:9d:76:7a:2c:ac:96:7d:b9:bf:
                    a1:8e:35:a6:16:58:4b:0d:7d:8d:db:bb:7e:bd:e5:
                    10:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:8E:4C:B6:94:FD:FB:37:E4:DB:B0:51:F2:F1:27:CE:8B:03:81:47
            X509v3 Authority Key Identifier:
                keyid:70:1C:5C:3F:28:A5:C0:71:0D:BE:48:29:D2:16:C8:9E:94:2E:F0:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cBxcPyilwHENvkgp0hbInpQu8Os.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:6b:71:db:28:64:ec:9b:2e:93:ad:16:7a:cb:71:56:13:e1:
         6f:be:72:e0:e3:38:fe:61:a0:c6:f2:22:8b:a4:07:2e:70:e8:
         08:da:c7:a2:cb:d8:f1:79:f8:72:e2:79:d9:dc:00:2a:77:47:
         0b:be:18:e8:82:c4:52:4f:5d:df:54:06:95:9a:c8:c8:82:b6:
         8a:d5:f1:dd:a0:cd:02:bb:c0:3f:59:6e:c3:23:1c:3d:6b:a4:
         45:61:64:25:53:02:26:2f:1d:0f:9b:e0:72:7c:4d:18:3f:19:
         6a:ac:be:f5:ce:cb:7b:5f:6f:f0:cb:84:32:e0:e9:87:97:2b:
         c3:92:19:07:bd:1f:5e:27:79:4a:85:55:30:c7:c6:7e:44:ed:
         d7:86:2d:f9:25:56:62:b9:48:d6:81:4e:c5:37:71:69:d4:cd:
         2c:e8:3d:9a:78:07:91:ca:22:d3:bb:6a:6a:39:98:2d:81:b2:
         3b:a5:77:3e:15:c1:af:3e:19:90:a9:df:17:d4:41:0a:00:52:
         e4:b7:67:d1:26:ba:be:99:9c:bf:b3:cd:f8:cd:66:9c:5e:e7:
         e0:85:84:29:58:ab:1e:fe:c7:02:16:8e:46:a7:64:b3:36:a2:
         fb:6a:c8:4b:63:e4:39:cf:19:ab:d1:12:b4:3e:75:a1:7f:f6:
         29:e6:0b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:17:56 2026 by rpki-client