Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/8d9ac1-d35d-4e32-b83f-c10cc953bd1b/1/kW-Aw18gLrAnZkGb-30oISX_4Vg.mft
File:                     kW-Aw18gLrAnZkGb-30oISX_4Vg.mft (raw, json)
Hash identifier:          RzSJlrYH+d76cc38RqJVeOwlZ/xgYqtnzMvdHD/IMVo=
Subject key identifier:   64:1E:23:F7:4F:B9:D6:79:68:3C:22:B8:AF:B8:78:AA:D9:98:38:A1
Authority key identifier: 91:6F:80:C3:5F:20:2E:B0:27:66:41:9B:FB:7D:28:21:25:FF:E1:58
Certificate issuer:       /CN=916f80c35f202eb02766419bfb7d282125ffe158
Certificate serial:       019D273AD9DDF9CB3911EF19CC3C358E6F27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kW-Aw18gLrAnZkGb-30oISX_4Vg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/8d9ac1-d35d-4e32-b83f-c10cc953bd1b/1/kW-Aw18gLrAnZkGb-30oISX_4Vg.mft
Manifest number:          188C
Signing time:             Wed 25 Mar 2026 23:01:01 +0000
Manifest this update:     Wed 25 Mar 2026 23:01:01 +0000
Manifest next update:     Thu 26 Mar 2026 23:01:01 +0000
Files and hashes:         1: FtTJzPkf-_88xIHu--X3c9IY9io.roa (hash: +RLOecQj9Ebpgf8gHXNoECBgbn6HhMEJfLnzjcBP8tQ=)
                          2: kW-Aw18gLrAnZkGb-30oISX_4Vg.crl (hash: JGPy06FiPFsVBY+WYpi2MnNp6+hw/158D9cwM5b5nHI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/8d9ac1-d35d-4e32-b83f-c10cc953bd1b/1/kW-Aw18gLrAnZkGb-30oISX_4Vg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/8d9ac1-d35d-4e32-b83f-c10cc953bd1b/1/kW-Aw18gLrAnZkGb-30oISX_4Vg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kW-Aw18gLrAnZkGb-30oISX_4Vg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 23:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:3a:d9:dd:f9:cb:39:11:ef:19:cc:3c:35:8e:6f:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=916f80c35f202eb02766419bfb7d282125ffe158
        Validity
            Not Before: Mar 25 23:01:01 2026 GMT
            Not After : Mar 26 23:01:01 2026 GMT
        Subject: CN=641e23f74fb9d679683c22b8afb878aad99838a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ad:0b:ed:3b:dd:94:7b:d4:31:7b:c0:b8:48:
                    2f:8d:5b:09:bc:d0:40:da:38:34:7c:b2:d7:d7:ad:
                    82:cf:bf:c1:63:1d:54:e7:77:0b:4f:15:e2:07:82:
                    28:e7:8d:7c:0b:df:0b:62:0e:2c:74:b0:5f:5a:5c:
                    e4:f0:3a:57:0f:12:eb:fb:d0:8e:77:9c:ed:1f:e9:
                    69:5e:6a:2b:53:f6:5b:96:fa:a3:09:1f:e9:bc:91:
                    79:6c:e3:14:a2:ec:67:ed:0f:c2:d1:37:85:3a:11:
                    08:32:bf:8e:59:65:6b:cc:8a:c7:20:6d:a4:80:c4:
                    2b:0c:b8:ef:ec:a4:b8:74:80:26:38:53:d7:d8:be:
                    1a:b0:a7:5b:74:a1:98:f0:2d:21:b0:f7:5c:62:98:
                    fe:ea:e3:f5:08:d9:75:76:20:45:51:54:49:9d:18:
                    84:db:92:52:27:bc:b7:b5:07:97:25:99:95:df:0f:
                    04:c3:45:da:52:30:e1:42:8a:cf:c4:c0:f0:ef:61:
                    e8:c9:e0:ac:c1:00:a6:3e:48:26:7f:d1:9f:38:32:
                    46:a3:97:0c:6e:e9:75:44:39:fa:25:4c:60:11:e8:
                    bf:15:73:35:8a:f6:e4:8a:d0:ac:27:ed:a5:88:ec:
                    80:cc:45:ee:d0:3a:ae:c6:8e:71:93:d2:d0:d2:a4:
                    21:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:1E:23:F7:4F:B9:D6:79:68:3C:22:B8:AF:B8:78:AA:D9:98:38:A1
            X509v3 Authority Key Identifier:
                keyid:91:6F:80:C3:5F:20:2E:B0:27:66:41:9B:FB:7D:28:21:25:FF:E1:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kW-Aw18gLrAnZkGb-30oISX_4Vg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8d9ac1-d35d-4e32-b83f-c10cc953bd1b/1/kW-Aw18gLrAnZkGb-30oISX_4Vg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8d9ac1-d35d-4e32-b83f-c10cc953bd1b/1/kW-Aw18gLrAnZkGb-30oISX_4Vg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:4b:11:d8:6a:2f:b2:80:97:cb:ec:2b:59:e0:93:bb:00:70:
         79:98:bd:66:e1:f1:1e:4a:4e:4b:6c:2e:6b:13:24:0e:b4:71:
         04:97:ef:3c:53:a8:10:b2:1a:99:db:8c:11:c7:62:b2:56:70:
         e7:5d:55:66:5c:ac:31:70:a8:5c:d9:8f:d8:6e:65:54:0d:84:
         3a:4a:6f:11:39:3d:dd:4c:49:26:bf:0c:3e:64:70:04:47:67:
         1b:b0:6f:53:52:01:f6:48:c5:6c:0d:1b:04:56:1a:7e:f0:17:
         f4:9e:5b:a2:4c:4e:65:53:d8:c7:5d:84:03:68:42:69:06:d0:
         8f:af:46:bc:27:63:44:9f:3c:ef:d3:73:c5:34:ff:16:f8:e6:
         99:38:45:c1:d2:27:55:00:11:15:e8:47:1e:b9:18:0d:ed:ff:
         56:fd:74:a8:3d:11:9d:38:94:0d:35:56:9d:23:a4:54:e2:92:
         78:a5:29:21:86:d7:ca:f4:b1:36:0b:b6:0b:20:d6:cc:62:eb:
         98:2a:c9:b6:c4:79:f0:5c:f8:d7:8d:db:ee:24:91:17:75:38:
         24:bc:98:59:42:a2:39:af:a5:e8:65:d2:32:37:6a:5a:d5:75:
         c4:1a:7c:d5:f7:9e:da:a8:e3:77:86:ae:60:5c:d8:af:e1:1e:
         0a:bb:10:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:29:11 2026 by rpki-client