Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.mft
File:                     2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.mft (raw, json)
Hash identifier:          RKRUPrPhDeL18oikMYkE0klhvvhASkOunqWR96DHKdw=
Subject key identifier:   C0:5A:27:5E:97:AE:39:17:DA:C8:34:BB:06:4F:1A:28:9B:7A:45:59
Authority key identifier: D8:FC:6E:45:18:1D:83:9F:D1:0E:4A:90:27:62:F2:6C:9A:64:67:96
Certificate issuer:       /CN=d8fc6e45181d839fd10e4a902762f26c9a646796
Certificate serial:       019D2A04A009B623186BC367ADF30FED5851
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.mft
Manifest number:          188A
Signing time:             Thu 26 Mar 2026 12:00:39 +0000
Manifest this update:     Thu 26 Mar 2026 12:00:39 +0000
Manifest next update:     Fri 27 Mar 2026 12:00:39 +0000
Files and hashes:         1: 1-X9f31YmOI6sGDiMsygwz3v06EQ.roa (hash: lBKrn9OkfPE6uE/SW8MJqqSzuyUTtFebuy/HpzOS5Gw=)
                          2: 2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.crl (hash: TUtniAbwYjYk2BVamTYznvtxWCoVOjg3gaslusB9dEM=)
                          3: FQiwWBBeK_EJ4ljVhzzdU_kvYhE.roa (hash: HY7azWr+1lDIeYP4uBd4A0p2MAT8AwHdslPwrQq6vgY=)
                          4: SBQ_xqUrpNzgYwAsOKFWEfBcWKU.roa (hash: r7gescwog8g3OhaT+uiQpA9jU7IQngckD+CGfZrI6kY=)
                          5: dr0WTbKAOdZCmM023BVBdPDWRk8.roa (hash: QpYxSWr/vVLdYe2PKpH5AUkh/HBsOurm0FmWy5lE2hA=)
                          6: sKoA1J6rxnysEZ_v3zwMo7Z67TY.roa (hash: mG9f/0+7q2d/QWjgfY6kLzwp92/dXDDFf1IO0cmQvoE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 12:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:04:a0:09:b6:23:18:6b:c3:67:ad:f3:0f:ed:58:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8fc6e45181d839fd10e4a902762f26c9a646796
        Validity
            Not Before: Mar 26 12:00:39 2026 GMT
            Not After : Mar 27 12:00:39 2026 GMT
        Subject: CN=c05a275e97ae3917dac834bb064f1a289b7a4559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:02:40:8c:10:7c:8d:e9:2c:4a:b2:e2:1e:31:
                    3b:74:25:3a:22:eb:b0:fe:79:24:20:d4:d3:6f:25:
                    69:4e:4a:5e:d9:63:92:4d:ec:38:b1:fe:74:83:cf:
                    04:08:21:d6:50:ef:d8:21:1d:16:18:86:dc:09:05:
                    c1:66:f8:79:3b:a8:4b:94:1f:9b:e0:6e:fd:d6:34:
                    5a:2b:3b:94:10:51:f9:2e:2a:c8:7a:b8:32:f6:93:
                    d0:bd:98:67:20:3e:b1:07:69:47:5a:0d:07:4e:ea:
                    ad:e1:89:7e:fb:b5:b8:53:3f:ef:e8:9f:76:2b:31:
                    a0:fe:11:39:08:68:4e:c3:b0:15:bf:7d:e7:9c:27:
                    0e:09:13:ab:c8:c4:1c:e9:67:ec:c2:7d:f6:21:7a:
                    63:71:68:0f:cd:2c:15:38:f1:02:87:45:78:c6:9f:
                    37:bf:1e:f5:08:e2:39:ad:c4:95:33:69:70:72:b2:
                    04:61:ad:fd:47:02:bc:4a:72:81:d7:37:45:d8:e3:
                    a4:e1:f8:c4:1f:87:67:25:a4:f5:af:a8:0d:86:60:
                    88:b0:3e:ca:c9:4b:cb:37:82:77:c2:10:f1:07:e7:
                    dc:20:59:c7:08:a4:d8:c2:da:c0:b2:68:d1:56:ca:
                    7f:5c:f7:b5:25:dc:de:7f:82:8f:a0:38:2a:8b:10:
                    e0:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:5A:27:5E:97:AE:39:17:DA:C8:34:BB:06:4F:1A:28:9B:7A:45:59
            X509v3 Authority Key Identifier:
                keyid:D8:FC:6E:45:18:1D:83:9F:D1:0E:4A:90:27:62:F2:6C:9A:64:67:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:53:57:c6:29:54:13:db:02:4d:82:3a:bd:88:7e:2b:19:3a:
         55:2d:61:bf:95:4f:3c:af:e5:90:f8:d1:d4:c5:86:e7:f2:6e:
         e2:9d:b5:ee:5f:34:56:fa:d4:0e:48:79:32:c1:4b:e8:aa:4a:
         89:9d:de:6b:80:50:31:02:df:75:bf:a6:00:96:0a:28:9a:25:
         88:96:cd:ca:85:30:e4:f8:d9:f5:17:42:a5:22:4a:47:f8:e7:
         1c:2d:1d:5c:15:4b:6c:2f:4e:ef:89:8d:87:8a:f9:6a:5c:70:
         94:e4:1c:29:7c:41:12:79:c3:d2:53:9d:60:ab:fb:bc:1a:7a:
         8e:ab:87:2f:9a:62:0a:2c:62:1e:43:38:bf:88:35:0e:2e:20:
         82:2e:2a:f1:60:11:35:64:08:ad:98:da:5a:f0:13:ed:ac:71:
         2a:24:6d:94:71:1a:4f:68:24:0b:8a:d6:1e:5e:97:ff:9c:98:
         b6:4f:f5:fc:21:0c:18:b5:dc:a6:b2:fb:88:58:5c:71:6a:1e:
         ff:1e:33:48:24:ea:3b:7c:c3:d9:4f:4d:a0:bc:ad:88:11:6c:
         21:ff:54:00:89:c1:06:ee:83:bc:c6:f6:2a:4f:11:5b:64:cf:
         81:12:8f:16:a2:fc:b8:9b:ed:6a:79:33:44:29:9b:e4:92:14:
         08:3d:81:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:21:41 2026 by rpki-client