Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.mft
File:                     TXaD1upTn-8ba22910ox0F5fCiM.mft (raw, json)
Hash identifier:          siJR3wwN7GKWGU0sblfN5EHYE7G5jqGmLXX7Bn+gCcY=
Subject key identifier:   30:65:9B:2A:7F:49:EE:0F:67:1B:84:BD:F7:6C:32:18:7D:DD:43:28
Authority key identifier: 4D:76:83:D6:EA:53:9F:EF:1B:6B:6D:BD:D7:4A:31:D0:5E:5F:0A:23
Certificate issuer:       /CN=4d7683d6ea539fef1b6b6dbdd74a31d05e5f0a23
Certificate serial:       019D296193BCD3EA46BF775EA548B8932B7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TXaD1upTn-8ba22910ox0F5fCiM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.mft
Manifest number:          188C
Signing time:             Thu 26 Mar 2026 09:02:33 +0000
Manifest this update:     Thu 26 Mar 2026 09:02:33 +0000
Manifest next update:     Fri 27 Mar 2026 09:02:33 +0000
Files and hashes:         1: 9nRBo0Yomhpgm9TNkjDZWwhznG4.roa (hash: JVKW/CXhEruKd4nkDT8EtdFwFBbGNGwV/vGyVQso2YA=)
                          2: CJ1p60ncJ6lwmkba6tzp8PwUtGA.roa (hash: Fs77R9OF/tCUM07EJYitJlab1am9Hn64q8ob0oebDkA=)
                          3: PabEzo_xhzNh86GJKwujZAVSaKY.roa (hash: KpQX2bvuJbagEXNR3/7qIg5Rru1wDlXdCAjMjXG/6Mc=)
                          4: TXaD1upTn-8ba22910ox0F5fCiM.crl (hash: NhTgYwC2kQ9Eh7cdEnaZ04ptU8LVvesUosiYwYK6Tg4=)
                          5: fTj8VjA3jlGkhYbcidRdlQKvw2s.roa (hash: jRzOWOgwnHuf2EMT7ZgwseHhtj6/xt+nW051JNR2aY4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TXaD1upTn-8ba22910ox0F5fCiM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:61:93:bc:d3:ea:46:bf:77:5e:a5:48:b8:93:2b:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d7683d6ea539fef1b6b6dbdd74a31d05e5f0a23
        Validity
            Not Before: Mar 26 09:02:33 2026 GMT
            Not After : Mar 27 09:02:33 2026 GMT
        Subject: CN=30659b2a7f49ee0f671b84bdf76c32187ddd4328
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:28:d1:43:81:cc:3c:4b:bb:39:3d:9b:1a:8b:
                    0e:a7:c0:58:19:14:e7:43:8b:f9:fe:67:11:38:72:
                    8e:e8:7a:e4:ac:35:31:45:7e:2a:2e:e2:ef:f5:af:
                    04:9b:fd:e2:ad:30:56:b6:5a:d6:e4:22:58:d2:81:
                    27:d6:1f:25:64:2e:5d:5d:eb:25:ab:98:54:58:c3:
                    ff:52:61:28:f1:9f:36:1c:32:6d:97:8f:42:61:14:
                    f1:39:14:56:f7:16:07:6d:bd:51:34:db:1d:ba:73:
                    35:f2:45:d6:7c:ad:11:57:51:72:c1:42:16:0c:03:
                    77:6d:b7:4f:81:d0:b2:d8:88:f5:b3:29:49:f8:63:
                    de:7f:ea:63:ca:42:3e:ea:2b:32:f1:36:eb:2e:6c:
                    7c:6c:f5:9e:be:c8:4f:29:66:c5:5a:19:0c:9e:9f:
                    12:d0:a9:81:d8:eb:5f:b7:06:b4:0a:5d:8d:eb:e2:
                    91:9f:2f:f0:be:a6:81:05:26:2f:9c:ff:c2:9b:b9:
                    77:bc:f0:f8:c0:18:8b:06:7e:92:07:94:ae:0e:8d:
                    d9:62:24:19:83:93:ac:53:80:5a:0d:81:94:b0:65:
                    ba:ad:82:9e:d4:e3:ee:45:23:e7:93:ef:f7:c6:24:
                    ed:c7:57:02:a3:01:a3:58:c5:41:0f:ad:cb:ee:ab:
                    21:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:65:9B:2A:7F:49:EE:0F:67:1B:84:BD:F7:6C:32:18:7D:DD:43:28
            X509v3 Authority Key Identifier:
                keyid:4D:76:83:D6:EA:53:9F:EF:1B:6B:6D:BD:D7:4A:31:D0:5E:5F:0A:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TXaD1upTn-8ba22910ox0F5fCiM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:71:d7:5a:3a:f4:7b:02:7d:38:41:a2:0d:32:39:ad:eb:43:
         03:a5:b2:6e:ad:95:a9:e0:5d:de:18:66:86:bd:f7:c5:51:09:
         04:bf:50:bb:b9:6a:a0:89:73:4a:80:62:3d:a9:c0:3c:20:3b:
         e3:83:ee:c5:21:34:df:52:53:c9:16:da:d4:88:22:50:37:8b:
         28:da:a1:c2:1a:c1:5a:42:31:02:a8:d4:98:5a:ed:af:68:16:
         2e:a4:6a:bf:fa:58:70:36:1b:b4:5c:b3:e9:6f:ff:8e:1a:8c:
         5d:0d:46:94:2e:5f:db:63:85:f3:32:58:fa:27:0a:75:cc:29:
         90:f2:4c:ec:93:78:1f:c8:51:97:d4:1d:94:ed:aa:d5:9d:84:
         4f:bb:f3:e8:e0:48:cb:04:3a:7a:b6:73:2f:3e:c5:e6:c1:10:
         48:f5:6a:65:f6:f9:b2:13:37:51:e3:42:18:6d:5d:b9:18:05:
         84:06:30:89:91:d5:d9:b2:38:49:0e:c5:3e:8d:30:b4:98:f3:
         1e:8c:90:4d:0a:70:ab:f9:e9:a9:b9:46:46:b6:35:2f:f8:5b:
         d9:1e:13:e1:10:ff:0d:79:21:ca:b7:10:f7:78:69:fb:fd:e3:
         a8:05:fc:09:94:09:d0:f3:83:cd:c9:2f:aa:67:17:64:a7:bb:
         ca:fc:43:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:29:10 2026 by rpki-client