Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft
File:                     pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft (raw, json)
Hash identifier:          sMgwA0NZ1k09l/4A0RJ/B06sI3L/LnBy1FoECV8A5AQ=
Subject key identifier:   E2:7A:BB:71:D4:0B:84:3B:CB:AC:0D:9C:46:96:7E:EA:FD:71:30:1F
Authority key identifier: A4:99:90:3D:AB:85:F6:A5:97:72:B3:ED:FD:4B:F0:E4:91:AF:57:C4
Certificate issuer:       /CN=a499903dab85f6a59772b3edfd4bf0e491af57c4
Certificate serial:       019D25831308D3009D64124336E380D62DAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft
Manifest number:          188B
Signing time:             Wed 25 Mar 2026 15:00:40 +0000
Manifest this update:     Wed 25 Mar 2026 15:00:40 +0000
Manifest next update:     Thu 26 Mar 2026 15:00:40 +0000
Files and hashes:         1: 6tyXfV2-VjQvcpv87Kt9vE6HFzw.roa (hash: A154uIVBWW18JX5P8xttoUSBJ4YcDPO4IGCdrwKK67Q=)
                          2: 7UycSOA2fNBupvFy-hFdJV1v7Io.roa (hash: 5kwOqNqNs3Py67MnZDjj6z2WyhVaijv3n26KPo38psM=)
                          3: EUznPNdi1RBuO_YCf9akt2u9WRY.roa (hash: LZ23fGDWAJm3pcS6NWs5vwLClCe20PqadqZJEm5+Myk=)
                          4: arHeDdPCjS_AVATAetTx45LL1Dk.roa (hash: wzrmHuwOdDJUETKg+nffMJxHljjlvyXkAo4P+Hrjp2w=)
                          5: gugoFb8q0SHtyIBkY0PLePdn0z4.roa (hash: PfJgvUjin+qon9RPc3E2cAaH5BLLpJd7HD9BJAEBX68=)
                          6: pJmQPauF9qWXcrPt_Uvw5JGvV8Q.crl (hash: VjwBuXP2i3HySyhLp1qPLn8xdp7H79gc01ks4ghhe0o=)
                          7: xoRDajz4eJy11O_J5fLAv4U4v9E.roa (hash: CkGw0sLJe5mjxRbSsZKMcGEgfVdDoPyOYU+L3J4izT4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:83:13:08:d3:00:9d:64:12:43:36:e3:80:d6:2d:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a499903dab85f6a59772b3edfd4bf0e491af57c4
        Validity
            Not Before: Mar 25 15:00:40 2026 GMT
            Not After : Mar 26 15:00:40 2026 GMT
        Subject: CN=e27abb71d40b843bcbac0d9c46967eeafd71301f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:02:b5:44:14:1b:63:23:97:88:be:a8:bc:66:
                    16:08:c2:85:cf:c1:70:ca:09:59:92:2b:e5:c1:4b:
                    d0:54:2f:05:53:40:92:b8:0f:49:55:55:59:e0:cb:
                    90:6e:98:eb:7e:8a:bc:7e:55:31:6d:36:80:6c:db:
                    32:27:77:e1:a9:33:f8:3c:da:a5:c1:53:fb:62:18:
                    ca:2c:bf:e1:7d:45:cc:78:55:1d:e2:72:14:00:15:
                    4a:5f:56:5f:54:85:09:5f:0c:d1:69:21:2f:b5:1f:
                    bc:af:3e:6a:47:53:af:f8:9b:bf:79:85:cc:e8:aa:
                    d3:e7:b3:4b:38:20:86:ed:31:32:f3:e0:0a:d7:95:
                    49:2e:80:8a:d3:93:4b:ef:e5:25:d1:26:45:90:f0:
                    33:a8:e7:a8:20:76:a3:1b:08:7c:a7:04:9c:fd:6e:
                    43:39:1c:10:b0:c2:2b:ae:45:ce:8a:af:ae:aa:7d:
                    17:19:f7:ad:e6:12:3e:57:0f:5c:70:20:1f:d0:6e:
                    5d:a1:9b:08:34:8a:06:56:ef:f5:35:d4:69:a9:33:
                    76:34:f6:1b:14:d9:46:60:15:60:5a:ef:33:4a:c6:
                    e0:29:a8:8b:bb:bc:07:80:e0:20:a9:17:da:9e:cd:
                    b7:8f:45:1d:6b:60:aa:d7:08:31:59:73:b9:39:7f:
                    6c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:7A:BB:71:D4:0B:84:3B:CB:AC:0D:9C:46:96:7E:EA:FD:71:30:1F
            X509v3 Authority Key Identifier:
                keyid:A4:99:90:3D:AB:85:F6:A5:97:72:B3:ED:FD:4B:F0:E4:91:AF:57:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:c9:f6:62:41:e8:f7:2c:de:4c:f3:ad:bf:93:08:84:f9:73:
         94:1b:c7:c3:e0:70:99:ab:d1:9d:5f:03:2d:85:a8:58:61:79:
         0a:33:03:2d:7c:b7:29:86:88:73:9f:01:dd:1d:6c:03:65:7d:
         ba:49:21:25:1e:71:b8:07:83:90:57:c0:2e:e7:02:b9:3f:1b:
         fb:cf:1e:20:72:22:68:7a:03:29:83:12:b2:86:a0:9e:79:33:
         b7:2e:aa:f9:50:64:22:e6:2f:fe:3b:f6:73:c1:c7:3c:a9:f3:
         5d:57:8a:ac:ee:f7:6c:1b:9b:67:a7:14:43:49:2c:24:c2:33:
         7f:71:88:32:de:59:53:02:61:dd:41:14:af:3f:4b:6a:62:58:
         2c:3d:bb:28:15:a9:27:a0:b1:ca:de:83:17:85:45:8b:ad:f8:
         1f:35:38:49:8a:05:14:b5:9c:46:bd:a0:d8:a3:c8:b3:58:6c:
         d3:0b:f2:d9:c2:08:1d:d2:64:00:d0:b2:0d:43:bc:ec:b6:25:
         89:85:fd:77:d9:8c:86:e3:67:2b:9e:a1:2f:31:ef:fc:c5:47:
         63:91:f3:ef:3a:a2:2d:c1:78:7e:79:cd:cd:5c:0b:ea:0a:6a:
         15:79:6f:dc:a0:d9:05:df:90:fc:ba:b0:9a:b1:dc:3b:a5:50:
         24:30:e8:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:22:11 2026 by rpki-client