Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.mft
File:                     EHcd196iLjX9rxm1G4OfQ3IScLo.mft (raw, json)
Hash identifier:          NEkMupdlT5YqsM2awubbXGm1/rrZl1zMuZCRGhS8LsY=
Subject key identifier:   13:68:03:CF:62:C0:66:19:71:48:9F:00:7B:F5:56:04:15:D1:03:42
Authority key identifier: 10:77:1D:D7:DE:A2:2E:35:FD:AF:19:B5:1B:83:9F:43:72:12:70:BA
Certificate issuer:       /CN=10771dd7dea22e35fdaf19b51b839f43721270ba
Certificate serial:       019D2771C059D90FA5C9C54983B0947F4CFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EHcd196iLjX9rxm1G4OfQ3IScLo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.mft
Manifest number:          188A
Signing time:             Thu 26 Mar 2026 00:00:59 +0000
Manifest this update:     Thu 26 Mar 2026 00:00:59 +0000
Manifest next update:     Fri 27 Mar 2026 00:00:59 +0000
Files and hashes:         1: 8YZRbgY-jKvD5Qx_V3PZvEk7vWs.roa (hash: VWf+UTOiYBb3BuAyoYwwM3l/EA1c3gcBsPIpoLbePt4=)
                          2: EHcd196iLjX9rxm1G4OfQ3IScLo.crl (hash: XgGKLd3wi0eak6eRzNQ8TORFuiyBIdFP7p6P6mueQ1Q=)
                          3: H3xTPmvK9zSgTcG__u3TwIPowUk.roa (hash: LbE0stmwuty2WSYq6lcYUDzFt6TCqOOwuZiyFMFNrDY=)
                          4: LIjz0LVWHyiVRe41t0otex5cgKk.roa (hash: kK1oc6nFnO7s7B7iKpi9xLLSYXGDXAKQ7beSDUR4qc8=)
                          5: O6ZAZ4typgOI3suTxfN-rxJmiqo.roa (hash: vmBhZBWRzaR03mbT3PYidf4G6v/Azs/K8CL0/p3O6Bg=)
                          6: bEr1knk29A1thJBkv70_tj5F5_4.roa (hash: HBKJUp0spY1+ZHU4KZ7GZ9vGaUpCij2jKbgcOJbWUBI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EHcd196iLjX9rxm1G4OfQ3IScLo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:71:c0:59:d9:0f:a5:c9:c5:49:83:b0:94:7f:4c:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10771dd7dea22e35fdaf19b51b839f43721270ba
        Validity
            Not Before: Mar 26 00:00:59 2026 GMT
            Not After : Mar 27 00:00:59 2026 GMT
        Subject: CN=136803cf62c0661971489f007bf5560415d10342
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b9:c8:9b:b5:33:90:33:d2:e7:3a:5e:81:d3:
                    cd:bf:83:d7:96:eb:55:19:e6:02:d5:54:ad:51:34:
                    73:6f:24:64:78:7a:25:89:fd:32:78:70:68:5d:17:
                    70:3d:a8:da:e5:ea:7c:83:8a:cc:70:73:59:52:62:
                    b3:d1:9e:2e:5f:64:4a:37:9a:62:0e:da:1d:65:64:
                    78:78:c0:51:7d:da:50:54:5f:51:eb:09:ed:88:d6:
                    33:3a:76:38:02:aa:a9:62:39:00:02:50:c9:a5:68:
                    5c:14:e5:7f:57:65:b1:29:5e:bc:08:d7:12:50:69:
                    d9:f5:e4:f3:1c:20:30:b4:91:47:5a:82:d5:eb:55:
                    97:24:fa:34:d5:47:54:c9:89:e5:1c:49:fd:64:69:
                    a1:32:7d:e4:5c:30:f3:bc:ae:0f:c4:df:c2:b1:40:
                    92:2a:f2:e8:7b:a6:80:d0:21:68:06:49:4c:81:af:
                    b5:08:68:2e:3b:4f:2b:97:f0:7e:0b:af:7e:78:90:
                    02:c7:0f:2b:6a:2c:09:b7:a3:78:d0:a5:8d:5f:0b:
                    94:08:cc:54:2c:43:5d:88:d5:ed:1e:9b:19:0e:ab:
                    88:bd:d9:70:82:c3:73:ce:2f:2b:72:84:a3:5d:41:
                    8f:62:36:e2:a7:cf:6e:e9:df:25:85:32:12:6e:e6:
                    7e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:68:03:CF:62:C0:66:19:71:48:9F:00:7B:F5:56:04:15:D1:03:42
            X509v3 Authority Key Identifier:
                keyid:10:77:1D:D7:DE:A2:2E:35:FD:AF:19:B5:1B:83:9F:43:72:12:70:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHcd196iLjX9rxm1G4OfQ3IScLo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:4f:98:4b:37:c0:08:dc:63:4c:07:96:81:21:07:65:56:ee:
         a2:1c:e6:d9:ed:eb:88:76:3b:83:4c:98:af:36:c3:af:8b:e9:
         3b:33:5e:a5:46:ec:d3:9b:b2:1f:00:06:dd:af:1b:4b:1a:69:
         a2:10:bc:0f:2e:ad:0c:36:14:d6:10:8e:50:38:6a:1c:21:58:
         68:c4:2b:35:52:d8:ba:19:23:32:b8:ee:42:9b:18:77:e1:fe:
         e6:f9:d1:64:93:d3:cf:06:a8:a7:27:9c:70:d1:47:9b:ca:83:
         47:e9:d6:4c:6e:23:11:3f:74:b0:95:5f:4e:b0:2a:b9:e3:ce:
         6b:7f:22:e4:15:7d:13:15:e3:91:5e:a7:02:e8:12:4a:7e:9f:
         3a:4e:f4:5c:d6:c4:ea:0f:3e:08:99:4b:ac:77:85:e4:46:e6:
         c8:25:e1:2b:7b:2c:64:7d:f6:c5:0e:40:ad:da:23:ec:49:f3:
         8e:a8:7a:f8:39:5f:b6:c6:e5:ce:83:cb:b5:61:33:73:bd:2d:
         12:8a:f6:5a:61:ac:27:72:33:8d:fd:21:54:ee:2f:98:2d:68:
         18:ed:9e:4e:66:73:74:38:9d:e5:ec:70:15:12:83:5d:8a:82:
         e4:e5:37:45:7c:f4:8a:19:e0:b0:21:cc:9c:c8:f7:e7:66:27:
         ca:e1:1c:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:56:59 2026 by rpki-client