Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.mft
File:                     l0Zhyxw45jvXi9aysdaGhqVBW_U.mft (raw, json)
Hash identifier:          4uVw5Ix7ZiFq0DTKeqqVO2YV5r+npkRocmFrnYdd3zE=
Subject key identifier:   C8:81:B6:DB:E7:C4:F8:BC:2A:D5:D9:8D:B5:47:72:D2:3C:7F:FF:C9
Authority key identifier: 97:46:61:CB:1C:38:E6:3B:D7:8B:D6:B2:B1:D6:86:86:A5:41:5B:F5
Certificate issuer:       /CN=974661cb1c38e63bd78bd6b2b1d68686a5415bf5
Certificate serial:       019D24DF3952C9813D8F8E104C73F093F43F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l0Zhyxw45jvXi9aysdaGhqVBW_U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.mft
Manifest number:          188F
Signing time:             Wed 25 Mar 2026 12:01:42 +0000
Manifest this update:     Wed 25 Mar 2026 12:01:42 +0000
Manifest next update:     Thu 26 Mar 2026 12:01:42 +0000
Files and hashes:         1: 3JvVaHFxMvE7oKb_Rk5KcxOo0QM.roa (hash: ni3uO/fhFfgK3uTopvt+sNnEoUiIwxpRI4kiwz3P0Q4=)
                          2: C9Y58BKwkaw0ZHTl_j0txcpI-HU.asa (hash: 6ft+Zt4xMqD8pufWleBqsqUW7RgXeGTKhk+GP4M0q7Q=)
                          3: b4x9At5aHU384b0djamWkOwy0Gk.roa (hash: kQ+bOS8CQlnm4PmXuVXiGK4SgaDFMpdC3HI9bBKlvtQ=)
                          4: l0Zhyxw45jvXi9aysdaGhqVBW_U.crl (hash: v4g4iCX8S2ANyD/QUI4qq6d1sOGm5Avwx+jZnfIaKqQ=)
                          5: mYpQfCwGUFa_N3gCiTs-pRnvFpc.roa (hash: gQqVTcaiR3QtkZ8CYSUcJShg6d7Q858NjMwMx9HDxMo=)
                          6: vEZLnR5almH1CGYItYBwVOGJqYY.asa (hash: Q9dmdkbTJa12zCUuc9rAzbHv2trspyTh+XDW4FOxvK4=)
                          7: yu-i2x-62u9GgIqkbHtrB0flg3s.roa (hash: DBRnQF75P0UT8wiwqTpnRrbuWAWKmmICP891u/zUXI4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l0Zhyxw45jvXi9aysdaGhqVBW_U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 12:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:24:df:39:52:c9:81:3d:8f:8e:10:4c:73:f0:93:f4:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=974661cb1c38e63bd78bd6b2b1d68686a5415bf5
        Validity
            Not Before: Mar 25 12:01:42 2026 GMT
            Not After : Mar 26 12:01:42 2026 GMT
        Subject: CN=c881b6dbe7c4f8bc2ad5d98db54772d23c7fffc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f1:43:08:69:3a:cf:fe:ca:4f:63:4d:d0:56:
                    b6:1c:55:ad:bc:90:68:de:73:dd:73:1c:4a:36:23:
                    cf:b9:dc:48:fe:b3:4d:0b:93:d6:d1:5d:62:23:01:
                    a7:c0:63:80:52:d1:ac:51:1c:0f:ad:5a:28:f3:26:
                    a2:50:7a:14:f8:79:cc:24:9a:1e:26:38:cd:00:70:
                    3b:70:c7:75:0e:cf:2c:0b:97:55:ec:43:91:26:da:
                    1e:8a:f8:11:8b:7c:3e:8b:09:c3:51:2b:2c:f1:68:
                    fb:aa:08:00:f0:93:bd:cc:c8:46:b0:8b:a2:f8:79:
                    4d:5a:cf:2c:e1:da:bd:63:78:dd:ef:c5:94:16:7f:
                    8c:47:99:e5:e1:52:a1:3f:11:6d:98:90:fe:67:b7:
                    80:2d:62:06:97:39:ee:a0:e4:2c:73:b5:be:ac:30:
                    37:c1:60:d7:cc:0b:ae:3c:30:5e:a1:15:53:1c:c3:
                    4b:64:4e:0d:88:67:85:7b:d2:93:11:68:fb:74:d0:
                    a2:04:7c:d9:89:cf:4d:0c:33:75:5f:3d:1d:0a:d6:
                    45:b7:33:b5:9d:54:af:c8:16:b4:d8:e6:25:dc:19:
                    50:24:2b:eb:a8:b4:4a:9b:14:2c:fc:8a:80:6a:30:
                    f9:0f:a9:6c:cf:2f:c1:69:25:66:56:96:78:f1:fc:
                    c8:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:81:B6:DB:E7:C4:F8:BC:2A:D5:D9:8D:B5:47:72:D2:3C:7F:FF:C9
            X509v3 Authority Key Identifier:
                keyid:97:46:61:CB:1C:38:E6:3B:D7:8B:D6:B2:B1:D6:86:86:A5:41:5B:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0Zhyxw45jvXi9aysdaGhqVBW_U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:a9:46:16:2c:67:87:c6:91:0c:60:73:79:23:d4:60:84:07:
         01:a0:39:03:76:4e:3f:88:63:27:bd:20:0a:f9:55:ef:42:9b:
         96:99:97:79:1e:62:a0:d2:8c:66:73:8d:9d:bc:c4:74:8d:2d:
         2d:58:c4:26:7b:e6:63:0a:15:17:23:7c:22:43:d7:a0:e2:a6:
         b9:65:33:c6:48:ac:a6:cc:41:b0:62:d5:e7:3e:29:34:6d:4f:
         89:fc:ed:af:14:1f:d1:12:61:52:e5:22:cf:88:01:99:cf:c4:
         be:3c:01:43:95:19:a6:45:71:b4:01:05:39:d0:2b:f9:42:53:
         5f:86:e7:86:3f:da:82:9c:88:32:d6:50:d9:f4:b3:47:38:1a:
         89:a7:5c:38:11:fc:e3:01:d8:81:98:fe:83:d8:7b:5e:d4:6c:
         d4:b3:e6:a6:59:ad:2e:c4:3c:8f:0c:d0:ce:33:d1:dd:bf:cc:
         99:5b:ee:f4:0e:2b:bd:38:15:65:06:f4:f0:b6:e5:ec:d5:6d:
         56:37:4c:20:41:fd:c3:e0:00:69:34:67:1e:14:52:5e:75:ba:
         38:37:2a:fc:84:b5:d4:26:8b:7d:ad:10:7f:e7:9c:66:7a:3a:
         43:ce:c7:eb:70:2f:9b:7f:0d:85:5a:1c:ec:7a:04:35:15:50:
         5b:e2:9d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:21:57 2026 by rpki-client