Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.mft
File:                     1-9g-_dmZb4x15_QRTkZuv4NpaOo.mft (raw, json)
Hash identifier:          wbxfyi5JNzkcV46KUu1fkRN4XWQRNnDtSMAiv2VuZvg=
Subject key identifier:   F9:77:0E:15:94:7A:0B:BA:B8:76:F6:58:6D:E9:77:35:5A:70:47:B0
Authority key identifier: FB:D8:3E:FD:D9:99:6F:8C:75:E7:F4:11:4E:46:6E:BF:83:69:68:EA
Certificate issuer:       /CN=fbd83efdd9996f8c75e7f4114e466ebf836968ea
Certificate serial:       019D28F23E5C74711749F4DB6AE0ED3DF4CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-9g-_dmZb4x15_QRTkZuv4NpaOo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.mft
Manifest number:          188C
Signing time:             Thu 26 Mar 2026 07:00:57 +0000
Manifest this update:     Thu 26 Mar 2026 07:00:57 +0000
Manifest next update:     Fri 27 Mar 2026 07:00:57 +0000
Files and hashes:         1: 1-9g-_dmZb4x15_QRTkZuv4NpaOo.crl (hash: OYacujiow26hQMcb5ZxpHU3hVNtZrL4VpBOZo/w+lZI=)
                          2: MYsq3VI7S6Tys8tH6kZ55isv4aM.roa (hash: nLJu9Ca3UL28v4nK9lRnWd7XxYbaE6zulNTp5ZAXAYk=)
                          3: q_ccM_3Nsf3YIqRvSxwp7j28WKA.roa (hash: bQAdrUPOpax3Tea6DtDpoS5dYyAQRIvDyf7eum/Y1dM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-9g-_dmZb4x15_QRTkZuv4NpaOo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 07:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:f2:3e:5c:74:71:17:49:f4:db:6a:e0:ed:3d:f4:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbd83efdd9996f8c75e7f4114e466ebf836968ea
        Validity
            Not Before: Mar 26 07:00:57 2026 GMT
            Not After : Mar 27 07:00:57 2026 GMT
        Subject: CN=f9770e15947a0bbab876f6586de977355a7047b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f2:97:f8:06:fc:06:05:da:62:b8:49:1e:7e:
                    b4:6d:16:bc:24:fb:9d:48:23:8c:1d:3c:f9:46:d0:
                    09:3f:ec:d0:f0:0c:c1:18:6a:39:2b:a0:31:b1:3c:
                    ae:d7:a8:51:96:f4:c2:40:25:d5:a4:89:59:35:20:
                    06:ad:b7:85:cf:c6:5e:26:08:9f:ea:e8:b4:31:10:
                    a2:3a:5a:c7:54:86:2d:4a:6a:ff:b1:ca:65:a3:28:
                    44:bb:d9:1f:c7:7f:92:e7:84:cc:bc:8e:8a:de:98:
                    4f:7e:ab:f7:cc:4f:8e:bc:97:11:07:6f:21:51:e6:
                    57:fd:be:7b:bc:fe:8b:16:75:bd:42:26:e6:41:a3:
                    e8:8a:6a:29:74:8d:af:0d:ed:59:e3:19:64:0f:3f:
                    31:4c:72:a2:d9:11:91:88:ca:32:15:ee:33:0b:e1:
                    3b:41:3b:27:87:81:08:c8:d3:2f:bf:a0:4c:af:9f:
                    9f:00:37:30:1a:c1:71:59:17:bd:d1:5b:36:fd:5b:
                    32:2f:46:5f:63:e6:a0:04:b4:cd:a6:89:44:ad:51:
                    79:b1:30:d1:e4:1b:33:95:af:71:9e:ea:fe:79:e5:
                    63:51:75:7c:ff:ec:d8:26:b4:87:4d:b9:24:7c:0f:
                    86:d2:50:b4:e7:1d:4d:8b:a6:ee:25:8f:25:5a:8b:
                    35:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:77:0E:15:94:7A:0B:BA:B8:76:F6:58:6D:E9:77:35:5A:70:47:B0
            X509v3 Authority Key Identifier:
                keyid:FB:D8:3E:FD:D9:99:6F:8C:75:E7:F4:11:4E:46:6E:BF:83:69:68:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9g-_dmZb4x15_QRTkZuv4NpaOo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:ce:d1:e4:8b:0b:57:b9:52:82:78:38:50:88:65:8c:8a:be:
         ce:21:33:72:b3:32:33:31:d5:c3:e3:fc:a8:44:73:43:37:a5:
         f2:c6:48:0f:04:a5:fd:41:85:b7:08:ce:9e:15:28:c8:07:a8:
         08:a2:b9:6f:5f:b4:d7:cc:cf:e2:de:89:76:a9:bc:f9:49:8f:
         09:9d:85:8f:d7:e9:db:61:06:84:3e:d5:48:d6:e8:cd:f2:b7:
         12:f7:b2:60:10:0f:5e:64:a4:bc:b8:91:a4:ce:c6:30:3e:a6:
         38:bc:a2:7c:d8:6f:e3:b0:f7:e6:d7:49:1c:05:e8:9d:9f:53:
         b7:97:59:bc:4d:f0:d2:fe:c6:36:da:8a:96:d1:2e:18:3a:36:
         5d:df:f3:47:af:22:e2:13:62:7c:10:7a:e2:a5:b1:b3:89:7d:
         b9:77:3a:66:43:2f:61:9c:00:2d:b4:fb:17:5e:84:b5:8f:5b:
         f7:c6:7c:1b:32:d8:d5:bb:9a:57:42:ba:be:6f:e2:fc:37:20:
         31:10:65:37:9c:32:04:23:30:11:ad:f9:95:e1:cf:a9:dc:31:
         d2:ac:6d:43:44:57:bd:72:bc:d8:27:85:08:95:b7:2b:99:04:
         87:4e:40:79:de:f4:a1:85:2f:ee:d7:56:7c:11:ca:49:39:48:
         a1:30:15:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:02:06 2026 by rpki-client