Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/c36f83-8b35-4d05-a334-f98c483015d7/1/0wGZH8ND81jA8u665Vzy2jRSHHo.mft
File:                     0wGZH8ND81jA8u665Vzy2jRSHHo.mft (raw, json)
Hash identifier:          6+P9EUCLIUa9N3Xn9DiRHiSP3k8Hx7abLafHrna5pfc=
Subject key identifier:   03:B0:B4:FB:DB:9E:9F:2B:32:96:A3:BA:C7:95:A6:ED:45:30:63:FC
Authority key identifier: D3:01:99:1F:C3:43:F3:58:C0:F2:EE:BA:E5:5C:F2:DA:34:52:1C:7A
Certificate issuer:       /CN=d301991fc343f358c0f2eebae55cf2da34521c7a
Certificate serial:       019D2AA9872CD06A17CE35853E19D4D94315
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0wGZH8ND81jA8u665Vzy2jRSHHo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/c36f83-8b35-4d05-a334-f98c483015d7/1/0wGZH8ND81jA8u665Vzy2jRSHHo.mft
Manifest number:          188A
Signing time:             Thu 26 Mar 2026 15:00:46 +0000
Manifest this update:     Thu 26 Mar 2026 15:00:46 +0000
Manifest next update:     Fri 27 Mar 2026 15:00:46 +0000
Files and hashes:         1: 0wGZH8ND81jA8u665Vzy2jRSHHo.crl (hash: ToR7jPKbNvDTe5BXQYdT+EG8dUgzPcK3fmC25JqFi5s=)
                          2: 13qi8AI2-EVNpOSQSS-2sC_j3KU.roa (hash: Ao/N1CH5IyqTs+C/2xXMQjWZkUvQDWoCz0AZMzqUUQQ=)
                          3: C0D3XPGkyCuPOGv9YW3WaQ81a9g.roa (hash: g8qNTYkk+kkeSWc3XwhwJA4ghsKgURElfaxWHrKjSQA=)
                          4: jv_YABzSModWtlchMh_9InM60gw.roa (hash: 4R+lUnXKrDrYcGJOHmhH6oyg2E2dK50I55PSI9u6SrE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/c36f83-8b35-4d05-a334-f98c483015d7/1/0wGZH8ND81jA8u665Vzy2jRSHHo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/c36f83-8b35-4d05-a334-f98c483015d7/1/0wGZH8ND81jA8u665Vzy2jRSHHo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0wGZH8ND81jA8u665Vzy2jRSHHo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:a9:87:2c:d0:6a:17:ce:35:85:3e:19:d4:d9:43:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d301991fc343f358c0f2eebae55cf2da34521c7a
        Validity
            Not Before: Mar 26 15:00:46 2026 GMT
            Not After : Mar 27 15:00:46 2026 GMT
        Subject: CN=03b0b4fbdb9e9f2b3296a3bac795a6ed453063fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:6a:de:ee:4b:ff:9d:4d:6b:52:6d:89:07:3f:
                    3a:f4:f5:0f:a8:47:0f:12:7b:5e:8d:60:99:ed:5e:
                    53:bd:1f:a0:14:46:b4:58:87:cd:7e:11:95:0f:6c:
                    ff:70:93:aa:fa:74:b0:53:12:18:e2:3c:58:cd:fb:
                    b0:f5:0a:75:ce:46:45:95:5b:bc:d9:36:e7:01:6b:
                    64:9c:32:fd:33:1c:d4:94:42:89:ab:01:34:41:08:
                    97:56:14:44:c6:7f:c4:42:21:23:ca:35:60:d2:20:
                    69:96:83:f0:bc:a8:34:7b:cb:2f:f6:17:79:b0:2e:
                    38:ee:73:6c:7c:a7:40:16:03:65:3b:00:46:83:65:
                    23:24:cc:d8:44:c5:4e:34:d3:fd:69:0a:e1:f3:89:
                    a0:24:92:86:60:a3:d2:24:2e:23:ff:8c:92:95:1e:
                    51:7c:cd:08:a2:e9:51:ca:41:a7:fc:a8:b9:5b:28:
                    d8:c2:7c:c9:6e:d0:0c:bc:34:fc:ae:0e:d7:27:2e:
                    d5:02:18:c6:d1:c7:16:9e:5d:31:e8:8d:53:cf:ac:
                    e1:2a:d4:1d:42:94:d1:7e:bd:87:8a:d0:eb:4b:23:
                    89:da:b4:da:b1:d2:31:55:d8:5c:e3:2c:d1:7a:44:
                    0b:dc:ac:5a:cb:38:d1:40:db:82:c2:7f:1b:dc:5c:
                    ad:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:B0:B4:FB:DB:9E:9F:2B:32:96:A3:BA:C7:95:A6:ED:45:30:63:FC
            X509v3 Authority Key Identifier:
                keyid:D3:01:99:1F:C3:43:F3:58:C0:F2:EE:BA:E5:5C:F2:DA:34:52:1C:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0wGZH8ND81jA8u665Vzy2jRSHHo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c36f83-8b35-4d05-a334-f98c483015d7/1/0wGZH8ND81jA8u665Vzy2jRSHHo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c36f83-8b35-4d05-a334-f98c483015d7/1/0wGZH8ND81jA8u665Vzy2jRSHHo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:5c:37:56:ca:77:5d:51:83:ab:f9:49:b0:96:72:32:06:78:
         7a:4a:10:c6:0c:43:33:e7:84:98:fc:6e:58:0b:5c:d4:99:5c:
         49:1f:e9:0b:71:25:76:3a:99:ea:06:f3:96:f2:43:92:7f:1f:
         99:34:d2:0d:65:17:01:ab:a6:41:1a:46:7a:da:4b:ac:2e:4a:
         f8:a6:91:65:1e:2c:b7:bf:f7:ea:60:f9:55:98:7f:d3:3d:de:
         3f:d7:89:00:fa:d5:28:7f:af:65:e2:bc:f0:13:00:d6:2a:28:
         1a:87:85:da:7c:f6:55:12:0f:de:6f:91:73:36:d4:5c:80:83:
         54:0f:d4:5c:95:2a:08:d7:7c:44:d9:f5:0e:3b:f6:d3:e8:33:
         cc:08:ef:2f:4f:35:eb:63:c8:93:fc:d0:4c:4b:af:1e:9f:8f:
         ac:36:62:5f:4e:ee:6b:92:4b:c3:2c:ad:4c:c7:74:5d:da:49:
         0c:35:57:ef:22:c9:50:2d:fd:c8:7e:f5:21:ef:0e:93:f8:11:
         34:94:77:04:10:e4:d4:cb:7f:66:31:4f:d5:72:8c:ef:f8:a4:
         ac:75:b5:f2:df:5a:0b:72:b6:39:a0:f8:61:b5:95:52:b0:1d:
         ae:ed:17:3b:6e:08:45:96:9b:4b:a1:f9:43:89:9e:1d:f8:05:
         f7:40:4c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:57:47 2026 by rpki-client