Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/2fb8bd-e1a0-454c-8bca-25effdd796dc/1/_08Gv_OluFFRtlcFtDCOmvsf2Pc.mft
File:                     _08Gv_OluFFRtlcFtDCOmvsf2Pc.mft (raw, json)
Hash identifier:          fU5K0IF1AGJncmXwbmXG/lWra290QiY1AHeFaKeHMSw=
Subject key identifier:   76:44:EA:04:87:C9:8B:26:01:66:E4:14:88:5B:AB:33:38:9A:72:2C
Authority key identifier: FF:4F:06:BF:F3:A5:B8:51:51:B6:57:05:B4:30:8E:9A:FB:1F:D8:F7
Certificate issuer:       /CN=ff4f06bff3a5b85151b65705b4308e9afb1fd8f7
Certificate serial:       019D26CCE0D2F98D5A86E39FB1B0DC984FF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_08Gv_OluFFRtlcFtDCOmvsf2Pc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/2fb8bd-e1a0-454c-8bca-25effdd796dc/1/_08Gv_OluFFRtlcFtDCOmvsf2Pc.mft
Manifest number:          188E
Signing time:             Wed 25 Mar 2026 21:00:54 +0000
Manifest this update:     Wed 25 Mar 2026 21:00:54 +0000
Manifest next update:     Thu 26 Mar 2026 21:00:54 +0000
Files and hashes:         1: ZZSujaCywYYBPGcUKJLCx-iYKGY.roa (hash: A7oLxvVZYFnaxAjlUArrfm3Zu1qybxKzD2ovuJ4kp4g=)
                          2: _08Gv_OluFFRtlcFtDCOmvsf2Pc.crl (hash: PXH/iPNWigrQeYqyLK/xbpwBmJt0zULlGNlHHF9/B9s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/2fb8bd-e1a0-454c-8bca-25effdd796dc/1/_08Gv_OluFFRtlcFtDCOmvsf2Pc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/2fb8bd-e1a0-454c-8bca-25effdd796dc/1/_08Gv_OluFFRtlcFtDCOmvsf2Pc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_08Gv_OluFFRtlcFtDCOmvsf2Pc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 21:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:cc:e0:d2:f9:8d:5a:86:e3:9f:b1:b0:dc:98:4f:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff4f06bff3a5b85151b65705b4308e9afb1fd8f7
        Validity
            Not Before: Mar 25 21:00:54 2026 GMT
            Not After : Mar 26 21:00:54 2026 GMT
        Subject: CN=7644ea0487c98b260166e414885bab33389a722c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:73:0a:66:3d:2e:c6:99:d2:f4:98:a8:b6:1d:
                    17:40:b1:61:e5:8e:ca:3c:02:67:9e:3b:4a:53:03:
                    e4:fc:99:d9:a2:03:02:ff:80:e9:6f:60:2b:f8:75:
                    b8:6f:4e:8c:c9:11:c3:d1:af:02:df:6d:70:89:08:
                    e4:41:bb:74:bd:da:e0:70:6e:df:1f:ac:25:86:16:
                    34:ac:be:f3:73:38:3c:9e:0a:b6:a6:73:d4:dc:0d:
                    c0:53:82:0a:0d:42:39:4b:2a:ee:6a:f9:1d:59:ca:
                    8a:74:29:a6:a5:f2:fd:f2:20:7b:54:f7:cf:55:33:
                    49:41:c2:f9:97:06:19:89:8e:ba:74:43:eb:84:9f:
                    de:dc:a1:38:46:31:ad:83:f6:52:13:d4:aa:b8:a4:
                    34:87:0f:49:a9:4d:e8:aa:7b:9c:8c:6f:d7:f8:21:
                    24:45:ed:ad:11:38:28:19:48:a4:cb:05:0e:4e:31:
                    13:f9:4b:da:0e:dc:62:4b:1d:35:15:cb:a8:e1:13:
                    e6:ee:9b:71:19:1e:1b:44:b1:3c:05:2b:ce:73:5a:
                    78:e7:d4:93:6b:c6:64:6e:16:16:51:36:fb:15:53:
                    f2:f5:bb:31:d6:97:d8:39:70:75:2f:db:b2:0a:ad:
                    34:fe:05:c6:65:bc:f9:4f:80:f0:22:04:af:8a:58:
                    cf:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:44:EA:04:87:C9:8B:26:01:66:E4:14:88:5B:AB:33:38:9A:72:2C
            X509v3 Authority Key Identifier:
                keyid:FF:4F:06:BF:F3:A5:B8:51:51:B6:57:05:B4:30:8E:9A:FB:1F:D8:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_08Gv_OluFFRtlcFtDCOmvsf2Pc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2fb8bd-e1a0-454c-8bca-25effdd796dc/1/_08Gv_OluFFRtlcFtDCOmvsf2Pc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2fb8bd-e1a0-454c-8bca-25effdd796dc/1/_08Gv_OluFFRtlcFtDCOmvsf2Pc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:82:44:57:42:b5:55:ec:7e:c5:20:9c:f1:d0:60:22:3e:05:
         1c:cb:1e:83:75:bb:03:2b:4e:0e:95:eb:d4:8a:d2:42:46:c6:
         f0:cc:4f:26:30:f7:86:51:4c:ce:0c:71:05:18:e7:7e:02:f8:
         34:99:3f:20:6f:41:8b:0c:2e:a8:5f:b8:57:a0:1a:96:3e:12:
         ef:ee:e9:05:79:52:6a:fb:c4:65:f6:fe:25:12:1a:a4:b9:0c:
         31:f4:d9:6b:c4:35:68:67:a5:1c:5b:44:d6:f7:d7:cc:2b:09:
         cd:73:c3:37:e7:32:bf:f3:69:b7:17:57:06:7a:7a:48:d0:16:
         83:81:1e:47:26:3c:e4:fe:de:bf:ac:cb:77:a5:f9:f8:3a:5b:
         1f:2c:5e:c0:2d:3c:1e:cc:63:ff:f5:68:23:d2:91:c2:20:d8:
         eb:df:f8:b5:90:b9:d4:8c:1c:59:f9:92:b2:7f:22:36:a0:d0:
         10:80:45:22:75:ec:bc:0b:63:56:89:6a:6d:87:7b:30:3d:6f:
         34:12:3a:d6:1b:53:76:54:12:92:c3:76:70:1b:eb:ba:63:fd:
         02:46:92:e1:f1:2e:ac:ff:e9:7e:4d:74:10:4b:7b:7c:49:ca:
         f0:4e:f7:3d:4d:0d:5e:fe:2b:e7:c1:12:89:c8:d8:6f:ed:08:
         2c:9d:85:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:52:34 2026 by rpki-client