Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5a2919-6d5f-475b-ab0a-dc6315e7ed8b/1/NyU16sFYwCZyeiXh6-Rtilyc-78.mft
File:                     NyU16sFYwCZyeiXh6-Rtilyc-78.mft (raw, json)
Hash identifier:          LxEXcNDHoybliwWLq0N45maXGY8YOf4CkMtPBhxKaYw=
Subject key identifier:   7B:E4:A6:0A:5A:C3:5F:CF:03:FC:58:39:78:D0:BE:C8:3A:12:C0:7F
Authority key identifier: 37:25:35:EA:C1:58:C0:26:72:7A:25:E1:EB:E4:6D:8A:5C:9C:FB:BF
Certificate issuer:       /CN=372535eac158c026727a25e1ebe46d8a5c9cfbbf
Certificate serial:       019D2D73FB529CBB35638BE9D1D3DA68EF75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NyU16sFYwCZyeiXh6-Rtilyc-78.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/5a2919-6d5f-475b-ab0a-dc6315e7ed8b/1/NyU16sFYwCZyeiXh6-Rtilyc-78.mft
Manifest number:          188B
Signing time:             Fri 27 Mar 2026 04:01:08 +0000
Manifest this update:     Fri 27 Mar 2026 04:01:08 +0000
Manifest next update:     Sat 28 Mar 2026 04:01:08 +0000
Files and hashes:         1: NyU16sFYwCZyeiXh6-Rtilyc-78.crl (hash: gZD54Xrp5b38oU8iGVZwgw3r5eXKcoxURF+5ZRMn7Jw=)
                          2: bJkqSEyBk_C06J1GLb3ybMWIphE.roa (hash: gpTzVN8vQmg0d/Krpn/tav8Ck304WJ5i9XjSQqIb4QQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/5a2919-6d5f-475b-ab0a-dc6315e7ed8b/1/NyU16sFYwCZyeiXh6-Rtilyc-78.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/5a2919-6d5f-475b-ab0a-dc6315e7ed8b/1/NyU16sFYwCZyeiXh6-Rtilyc-78.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NyU16sFYwCZyeiXh6-Rtilyc-78.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2d:73:fb:52:9c:bb:35:63:8b:e9:d1:d3:da:68:ef:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=372535eac158c026727a25e1ebe46d8a5c9cfbbf
        Validity
            Not Before: Mar 27 04:01:08 2026 GMT
            Not After : Mar 28 04:01:08 2026 GMT
        Subject: CN=7be4a60a5ac35fcf03fc583978d0bec83a12c07f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b5:b2:3f:d1:e7:3b:3f:10:db:5b:81:72:27:
                    69:95:1a:d0:5c:dc:55:db:59:c9:07:00:bc:5a:c5:
                    04:05:d3:2d:98:e9:70:e8:b6:e1:ed:c2:84:96:e1:
                    91:b6:80:e9:7c:de:93:14:62:9c:70:cc:ec:e7:64:
                    c6:c5:b2:ca:26:0e:15:90:fc:bb:2a:48:f5:72:96:
                    59:43:b8:c1:93:dd:1c:ec:2e:e2:f5:3b:28:fd:1e:
                    1b:f3:d4:ef:24:52:3b:ae:db:5f:d0:e6:0c:ff:b7:
                    40:51:24:ae:e5:90:b5:4d:6a:6d:64:6d:c8:9b:33:
                    49:10:cf:e2:b0:a7:14:e9:7b:f2:4b:13:4e:ea:36:
                    bd:51:3f:fc:10:ac:de:cc:0d:5b:7a:c7:82:5f:bc:
                    a0:e2:3c:c0:46:69:8e:f5:f3:f8:e7:eb:15:af:e4:
                    df:e9:e9:b4:55:6d:b1:22:22:03:9d:5c:da:ae:0e:
                    a5:f1:ea:67:c1:01:1d:0e:15:97:ca:76:19:32:4d:
                    d7:9b:b3:04:55:10:06:20:98:78:dd:79:6b:bd:f7:
                    19:05:49:fe:9c:0b:88:9d:b5:f4:1a:4b:1b:36:0c:
                    f6:86:44:ae:3e:06:db:b2:bd:fc:b3:95:d3:a3:e2:
                    2b:27:09:c4:99:32:43:a9:d0:b5:bc:0c:2c:e9:e9:
                    88:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:E4:A6:0A:5A:C3:5F:CF:03:FC:58:39:78:D0:BE:C8:3A:12:C0:7F
            X509v3 Authority Key Identifier:
                keyid:37:25:35:EA:C1:58:C0:26:72:7A:25:E1:EB:E4:6D:8A:5C:9C:FB:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyU16sFYwCZyeiXh6-Rtilyc-78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5a2919-6d5f-475b-ab0a-dc6315e7ed8b/1/NyU16sFYwCZyeiXh6-Rtilyc-78.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5a2919-6d5f-475b-ab0a-dc6315e7ed8b/1/NyU16sFYwCZyeiXh6-Rtilyc-78.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:f6:ff:ca:b6:c6:1f:25:62:32:e1:96:9c:ed:8e:cb:ab:08:
         56:82:d3:bd:1a:f1:71:21:3c:80:75:02:c5:ba:50:e7:47:80:
         97:69:83:08:f7:a4:84:ff:1d:8d:aa:51:68:83:fe:f0:59:cd:
         53:6c:b6:4d:5d:3d:40:ac:88:0f:19:bb:72:52:c0:fc:51:74:
         90:78:35:a8:15:de:5a:ac:66:f5:5e:f7:47:14:5e:4e:10:bb:
         ab:24:31:db:4f:b5:a1:e5:be:4e:ed:54:33:c8:e8:e9:53:38:
         b1:88:25:a3:06:e9:85:74:76:b0:ce:f6:7e:88:e6:c1:95:87:
         83:79:a1:fa:20:4c:dc:60:be:dd:29:b7:f2:5a:df:1e:f8:01:
         1a:97:62:58:60:4d:6c:dc:bf:8b:83:d6:20:72:6d:69:4b:bf:
         dc:b6:19:af:59:c9:66:bc:3e:64:2e:74:47:32:c8:fb:63:43:
         b9:aa:54:57:82:48:ea:01:18:c9:95:29:d3:7f:74:57:46:09:
         70:1d:d9:96:11:3a:ce:df:92:c5:c9:44:4e:11:0a:65:03:02:
         3d:1e:f8:12:7d:ac:e1:0d:13:b6:4d:34:74:8e:da:4d:fe:7e:
         68:d7:13:3f:ec:49:d6:b4:96:1f:cd:08:46:8a:96:0e:fe:4a:
         a3:73:ae:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 08:16:21 2026 by rpki-client