Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.mft
File:                     1dWXuXOtoQUvZbPqHeHkguI_PSo.mft (raw, json)
Hash identifier:          v3gv7RabqhLkRchDVauYegXxc1SN5PFwSPg81ZcByno=
Subject key identifier:   F0:1C:55:84:5A:CD:32:52:30:D9:13:27:33:8F:DE:52:7E:CA:2C:E7
Authority key identifier: D5:D5:97:B9:73:AD:A1:05:2F:65:B3:EA:1D:E1:E4:82:E2:3F:3D:2A
Certificate issuer:       /CN=d5d597b973ada1052f65b3ea1de1e482e23f3d2a
Certificate serial:       019D33E4128E3CC8C127EEBEB27F10671F9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1dWXuXOtoQUvZbPqHeHkguI_PSo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.mft
Manifest number:          188B
Signing time:             Sat 28 Mar 2026 10:01:17 +0000
Manifest this update:     Sat 28 Mar 2026 10:01:17 +0000
Manifest next update:     Sun 29 Mar 2026 10:01:17 +0000
Files and hashes:         1: 1dWXuXOtoQUvZbPqHeHkguI_PSo.crl (hash: GMM5hfm74CjyXvgTHk/0KNJNaGSKNusDOyqBnElQCNY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1dWXuXOtoQUvZbPqHeHkguI_PSo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Mar 2026 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:33:e4:12:8e:3c:c8:c1:27:ee:be:b2:7f:10:67:1f:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5d597b973ada1052f65b3ea1de1e482e23f3d2a
        Validity
            Not Before: Mar 28 10:01:17 2026 GMT
            Not After : Mar 29 10:01:17 2026 GMT
        Subject: CN=f01c55845acd325230d91327338fde527eca2ce7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c3:5c:81:9e:07:42:39:88:b1:06:56:21:73:
                    2d:ad:ee:03:fe:e1:f2:c1:bc:cc:36:cb:c0:9d:67:
                    5f:67:b2:e5:aa:d8:55:0e:ef:76:12:08:ee:09:d0:
                    1c:e2:b4:ab:ee:13:a7:5e:ba:0d:70:c5:93:4e:88:
                    e1:35:11:6b:d4:94:84:af:83:eb:68:75:2f:00:47:
                    ad:9f:12:05:ff:20:0c:07:51:23:5b:f0:a5:5d:05:
                    95:0a:c2:75:31:d1:b1:67:f6:a9:00:0d:06:88:7e:
                    9a:96:13:9b:fa:39:e7:6c:c9:7a:37:9e:61:de:e8:
                    c3:73:00:a5:7c:03:55:04:91:2f:37:0d:eb:44:d5:
                    4e:36:47:a5:b0:20:19:8e:62:12:71:ee:ca:05:09:
                    22:4d:6b:18:96:ec:f0:75:9e:e5:13:b2:b2:56:6d:
                    66:72:1d:9b:c2:d9:49:8f:41:e0:ef:17:b1:5d:80:
                    e1:ba:21:89:14:c4:5b:77:af:14:bd:cd:3e:a1:cd:
                    21:36:48:ea:73:24:92:3c:27:d8:8c:6e:43:80:ef:
                    0d:27:4e:48:d6:f9:bf:5e:41:63:b5:de:3e:01:83:
                    4b:eb:08:48:e6:47:af:9a:17:6c:6a:0b:3c:d6:22:
                    61:65:a3:38:db:1a:4b:92:09:dc:a5:2e:ba:73:50:
                    cd:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:1C:55:84:5A:CD:32:52:30:D9:13:27:33:8F:DE:52:7E:CA:2C:E7
            X509v3 Authority Key Identifier:
                keyid:D5:D5:97:B9:73:AD:A1:05:2F:65:B3:EA:1D:E1:E4:82:E2:3F:3D:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dWXuXOtoQUvZbPqHeHkguI_PSo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:b0:7e:b8:23:80:5d:ae:c7:99:6c:32:54:21:2a:6f:28:6b:
         fa:48:9c:1d:9e:78:6b:b1:4d:0b:59:df:d1:35:a7:01:7c:a4:
         91:94:4e:43:96:db:99:f0:e3:d1:d4:c9:e3:c9:0a:2e:4a:bc:
         dc:45:40:b3:21:f9:2f:a5:4d:cf:cc:f8:2d:88:7d:b4:1e:a4:
         7e:a1:59:dc:da:6c:e9:fa:e6:e1:81:27:b6:e8:ac:fa:61:15:
         4c:72:74:a6:b0:a3:64:5b:c9:5e:3e:7f:c0:eb:7c:48:97:79:
         d0:0b:23:34:63:33:50:c2:7e:f2:95:c3:26:af:8a:e1:e4:73:
         43:6a:3b:27:36:3d:f8:3f:21:42:9b:d1:62:aa:d2:8c:d9:09:
         da:ad:ba:ec:07:cf:35:cc:07:1f:f4:67:78:1d:79:9d:47:7b:
         a9:f4:91:7c:73:e5:20:ad:69:fa:d7:be:a8:42:97:8d:05:1d:
         8e:06:8b:9b:fb:d0:40:b3:a4:da:25:91:f9:b7:6a:39:43:09:
         d7:2c:8e:e0:8f:8a:43:02:18:b9:6c:75:0e:f3:3f:be:c6:19:
         38:66:a6:dc:c1:d9:f9:4f:8f:d4:87:0c:23:6e:4f:26:d0:04:
         2d:88:8a:df:ae:95:20:d9:94:c6:d5:11:a0:9c:29:9e:26:20:
         a3:35:52:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 15:56:22 2026 by rpki-client