Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft
File:                     J98EKCQnP8_z8JPQ-bHexpYLrmo.mft (raw, json)
Hash identifier:          wR7PWUVZ0o4ZhmBB3fap1EYsTKvFj1e4MU1d7zvH1Qs=
Subject key identifier:   28:BC:79:77:1E:72:93:19:B6:FD:54:63:43:B2:7C:47:2F:A3:78:75
Authority key identifier: 27:DF:04:28:24:27:3F:CF:F3:F0:93:D0:F9:B1:DE:C6:96:0B:AE:6A
Certificate issuer:       /CN=27df042824273fcff3f093d0f9b1dec6960bae6a
Certificate serial:       019D24A758324D0193E210B98C8029460335
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J98EKCQnP8_z8JPQ-bHexpYLrmo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft
Manifest number:          188C
Signing time:             Wed 25 Mar 2026 11:00:39 +0000
Manifest this update:     Wed 25 Mar 2026 11:00:39 +0000
Manifest next update:     Thu 26 Mar 2026 11:00:39 +0000
Files and hashes:         1: 5duSWp-R4sHUDIWHsiSMyzmiMjM.asa (hash: I9FW+aLJqiDmPx2UKLG7SXwoCqVIWzrTVyHoM25/ExQ=)
                          2: EaAMsvwoHBe4yq1jbHkVSMOCcms.roa (hash: tCewwDnNFA4yqzd0eb5IKas5uAfl5Rr1tmwDJ4VUURI=)
                          3: IvpEH6hd1qJi0dDCHitCwtgqWwA.asa (hash: pdg3WShcX162alecCVt/x5tpVyFcxh+QQl8q0PDMBOo=)
                          4: J98EKCQnP8_z8JPQ-bHexpYLrmo.crl (hash: qgq2eKAw//lJpVBC37KANTn2RMfxgKxjOq2J3KhGDas=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J98EKCQnP8_z8JPQ-bHexpYLrmo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 11:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:24:a7:58:32:4d:01:93:e2:10:b9:8c:80:29:46:03:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27df042824273fcff3f093d0f9b1dec6960bae6a
        Validity
            Not Before: Mar 25 11:00:39 2026 GMT
            Not After : Mar 26 11:00:39 2026 GMT
        Subject: CN=28bc79771e729319b6fd546343b27c472fa37875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:76:f3:4e:5d:4f:ba:26:3c:57:c4:83:17:62:
                    17:de:e9:23:d2:24:94:c8:05:f2:72:8d:95:27:9e:
                    65:85:3c:35:78:b7:fe:c1:ed:e1:40:b2:04:10:16:
                    40:59:84:7b:28:cf:88:38:9c:46:aa:78:2a:83:ac:
                    82:42:60:e1:e4:9b:5b:e7:80:e0:92:58:37:76:67:
                    8e:8d:cc:13:7c:30:86:50:3e:f3:6d:16:e3:d6:7d:
                    3d:fa:81:b9:98:05:0e:be:85:64:06:07:a6:ce:b8:
                    f1:9f:62:56:2c:b3:dc:85:ce:84:23:a7:b8:a6:9a:
                    57:d5:f2:11:52:39:44:8d:8e:30:55:2c:69:03:c4:
                    e2:d6:44:e0:a5:8a:d6:3f:dc:a5:de:62:56:ef:9a:
                    95:26:c4:ef:4d:cd:d0:95:d5:38:49:8d:49:ff:75:
                    59:b1:52:c2:2a:aa:03:7f:83:39:d9:6e:eb:65:e1:
                    ce:58:df:de:92:8c:84:fb:0b:82:f2:f0:78:b1:fb:
                    5a:f0:69:c4:b6:5c:cd:0b:17:e1:f5:a2:c6:53:09:
                    d7:5f:c2:8e:5c:4f:97:f6:8e:2d:3b:08:b8:74:cd:
                    10:9a:33:c2:f2:4c:55:1e:fc:31:2e:d3:1f:3d:39:
                    7d:92:20:9f:84:69:88:33:94:cf:2c:17:d2:3b:77:
                    df:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:BC:79:77:1E:72:93:19:B6:FD:54:63:43:B2:7C:47:2F:A3:78:75
            X509v3 Authority Key Identifier:
                keyid:27:DF:04:28:24:27:3F:CF:F3:F0:93:D0:F9:B1:DE:C6:96:0B:AE:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J98EKCQnP8_z8JPQ-bHexpYLrmo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:5c:1e:9f:f3:c7:58:6c:62:1b:30:c4:5d:c5:14:96:31:c1:
         2a:2e:55:9f:58:80:7e:ac:e4:aa:1f:be:b0:db:0f:84:18:88:
         9a:0b:a4:bd:a6:70:e3:03:f3:37:6c:98:a4:09:c9:02:9d:22:
         2b:4e:ab:0f:df:6e:9e:16:cc:46:0e:39:5e:df:fe:1d:df:97:
         cc:e9:87:b1:85:6d:06:01:3c:6d:21:1e:2d:50:5c:f6:71:5c:
         b2:63:ee:54:37:60:58:51:c3:b7:f4:b8:bc:6d:25:43:38:6c:
         ae:b0:8f:15:1e:1e:20:17:36:11:f3:45:46:28:b1:48:23:62:
         17:10:ef:e9:13:49:d2:b3:01:a6:8d:95:66:21:17:a7:28:cc:
         69:a9:f7:a6:be:fe:4e:80:75:a6:b1:a2:3e:e5:53:34:13:ee:
         5b:ab:8d:23:b4:87:9e:c4:4f:2f:44:0f:0b:92:da:d8:ec:4e:
         60:a4:32:b9:1f:37:98:02:38:80:22:66:89:9e:54:94:60:f1:
         fe:fe:60:84:86:2b:5e:70:e4:43:75:24:3d:80:51:d0:30:5a:
         34:72:a8:29:8f:b1:3d:ca:49:f9:63:7f:51:cf:3a:fe:ce:5c:
         71:f1:0a:42:51:ac:55:23:66:7e:70:75:08:8b:a7:06:26:12:
         91:40:6a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:22:00 2026 by rpki-client