Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.mft
File:                     itN6mTOwUsLxLvG48U108F_dthE.mft (raw, json)
Hash identifier:          JIwFokydjJtD8or3k/B0CtuxHs7fajay39sWN0xb54E=
Subject key identifier:   F0:F8:42:78:D0:6B:F5:E5:17:45:7C:4C:A3:24:03:B1:35:14:C1:63
Authority key identifier: 8A:D3:7A:99:33:B0:52:C2:F1:2E:F1:B8:F1:4D:74:F0:5F:DD:B6:11
Certificate issuer:       /CN=8ad37a9933b052c2f12ef1b8f14d74f05fddb611
Certificate serial:       019D2B4E9C09FCAA78EB9BF8BBC84FC4E9F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/itN6mTOwUsLxLvG48U108F_dthE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.mft
Manifest number:          188D
Signing time:             Thu 26 Mar 2026 18:01:05 +0000
Manifest this update:     Thu 26 Mar 2026 18:01:05 +0000
Manifest next update:     Fri 27 Mar 2026 18:01:05 +0000
Files and hashes:         1: itN6mTOwUsLxLvG48U108F_dthE.crl (hash: gRHHObZeQ3gis8zsGc7Nixnty0c+qCy8aGqP0N4tnU0=)
                          2: j5SNiWDExW4Fzdr91OyzIh3q2cA.roa (hash: f3l9/B3pjG4wxZ77vCWHe+oV14ybxAso+7Z2L/8x8tk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/itN6mTOwUsLxLvG48U108F_dthE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:32:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2b:4e:9c:09:fc:aa:78:eb:9b:f8:bb:c8:4f:c4:e9:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ad37a9933b052c2f12ef1b8f14d74f05fddb611
        Validity
            Not Before: Mar 26 18:01:05 2026 GMT
            Not After : Mar 27 18:01:05 2026 GMT
        Subject: CN=f0f84278d06bf5e517457c4ca32403b13514c163
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:87:f1:d3:4c:60:43:39:5d:f3:b5:73:0b:aa:
                    02:43:98:6b:7d:d2:3b:f7:5f:b8:22:47:df:51:6f:
                    8d:09:c4:79:75:6a:f1:59:41:95:47:64:61:89:08:
                    91:4b:fa:5c:58:86:24:f7:a1:41:a3:35:a3:5f:89:
                    29:e3:06:76:6d:eb:53:dc:8e:be:16:15:d2:a5:17:
                    32:62:49:67:64:5a:61:c8:51:5d:d1:1c:91:25:5a:
                    18:47:8f:23:f4:9c:0f:dd:74:b4:71:41:73:c3:55:
                    14:8f:1d:de:44:10:7a:93:3b:cd:92:4d:0f:19:25:
                    43:bc:ce:d3:e0:b6:c5:3a:44:63:c9:b9:d2:c5:a9:
                    3c:ca:06:45:3d:36:45:d5:3a:59:c9:dd:4e:5c:dd:
                    e8:3e:ca:25:b8:19:8e:2b:5e:01:98:15:d7:89:45:
                    c7:16:38:df:77:60:06:97:eb:e9:94:68:04:1c:c7:
                    18:61:43:43:f6:13:a2:44:7e:af:4e:43:8a:92:9e:
                    47:c7:92:55:c0:e4:33:07:0a:94:a2:65:f4:46:09:
                    0c:19:bc:17:73:9e:37:e0:d8:f3:b1:d7:70:58:97:
                    30:1f:2d:c8:f4:88:e1:5a:8f:32:bd:92:38:c4:5c:
                    dd:dc:57:61:0d:47:45:10:13:52:88:8f:a4:45:76:
                    a1:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:F8:42:78:D0:6B:F5:E5:17:45:7C:4C:A3:24:03:B1:35:14:C1:63
            X509v3 Authority Key Identifier:
                keyid:8A:D3:7A:99:33:B0:52:C2:F1:2E:F1:B8:F1:4D:74:F0:5F:DD:B6:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itN6mTOwUsLxLvG48U108F_dthE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:15:0a:d5:ee:73:1d:67:72:bc:23:28:18:d2:6a:5e:c4:19:
         9b:84:e1:30:86:0a:17:3b:07:d0:ca:8f:39:7b:e9:5d:af:0e:
         93:9d:5e:7c:db:3b:db:da:78:11:9f:66:46:40:79:2d:87:4f:
         89:5f:e8:75:83:e9:5c:86:73:5f:d1:3e:3d:f9:5e:f2:fc:ea:
         96:e5:d8:c8:98:19:64:6d:73:74:1c:4a:60:34:31:a7:ef:ab:
         4c:e2:72:e5:34:c4:51:b0:1f:a2:b4:a2:1b:31:7c:c8:06:f3:
         2f:e6:d4:26:c8:c7:b7:3b:16:8f:ce:1f:28:1a:ff:67:51:67:
         19:54:14:f2:e3:95:af:86:b5:33:5d:fc:17:c0:2f:7a:a5:b8:
         83:5c:e0:1f:f5:50:47:06:14:a7:13:f9:7c:40:52:37:62:a9:
         81:ab:78:f6:68:66:77:cb:02:0f:b2:6f:d8:1a:89:e9:9d:c9:
         c8:51:3b:16:57:94:73:e5:4e:9a:76:dd:29:11:69:c3:78:71:
         0e:97:5e:53:53:35:6a:86:80:a6:04:8f:8e:fd:29:03:37:9b:
         c2:35:17:b7:6a:2e:e7:3f:c1:8d:99:5a:59:7f:f3:45:56:d4:
         d5:4a:2c:dd:32:93:c3:eb:f5:97:1b:30:f5:80:9a:ef:71:8f:
         e8:37:27:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:15:29 2026 by rpki-client