Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/df05e1-6862-4ed4-876d-150b5db4f56b/1/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.mft
File:                     9vGMAkBXQsJTd9aWzSpp3Ml0v_g.mft (raw, json)
Hash identifier:          /cwzTm9LDo2zhix/0tIJeqxZqT1P4Wm4ur8VxwQXUjw=
Subject key identifier:   E1:B5:CC:72:2A:98:40:29:13:91:64:AE:76:8A:FE:71:17:ED:20:92
Authority key identifier: F6:F1:8C:02:40:57:42:C2:53:77:D6:96:CD:2A:69:DC:C9:74:BF:F8
Certificate issuer:       /CN=f6f18c02405742c25377d696cd2a69dcc974bff8
Certificate serial:       019D2996E51A6DE76D11AE5DC0CDF70C8A8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/df05e1-6862-4ed4-876d-150b5db4f56b/1/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.mft
Manifest number:          188B
Signing time:             Thu 26 Mar 2026 10:00:47 +0000
Manifest this update:     Thu 26 Mar 2026 10:00:47 +0000
Manifest next update:     Fri 27 Mar 2026 10:00:47 +0000
Files and hashes:         1: 9vGMAkBXQsJTd9aWzSpp3Ml0v_g.crl (hash: SLME4nDG90vCVFYfBS/QXNToYPuhNVk9Ip4bPTcWadA=)
                          2: WR2mMv7qmUceN0Mkq4FVsAqss34.roa (hash: BI2UfIzSLpmq5ZqkIGDg6SgwwPzP/38b7CPwIY4B+T4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/df05e1-6862-4ed4-876d-150b5db4f56b/1/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/df05e1-6862-4ed4-876d-150b5db4f56b/1/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:96:e5:1a:6d:e7:6d:11:ae:5d:c0:cd:f7:0c:8a:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6f18c02405742c25377d696cd2a69dcc974bff8
        Validity
            Not Before: Mar 26 10:00:47 2026 GMT
            Not After : Mar 27 10:00:47 2026 GMT
        Subject: CN=e1b5cc722a984029139164ae768afe7117ed2092
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:22:09:45:f4:6f:fd:aa:c1:0e:58:9e:a0:ff:
                    aa:9b:8d:64:31:3d:fb:a7:ec:05:7a:76:80:84:bc:
                    e9:ab:c6:8f:ea:94:5c:3f:4e:de:87:c1:f2:b6:89:
                    12:0c:e2:e1:96:62:5b:47:3f:c5:30:43:dc:ff:b1:
                    cb:73:44:4b:2a:6c:10:a8:30:84:b8:ec:6b:b9:6c:
                    3e:7d:2f:26:06:07:3f:2e:72:45:fb:e9:85:04:77:
                    1c:09:d8:fe:ea:cb:0b:9a:d3:dc:a2:b4:15:8b:d2:
                    a6:31:d1:c1:0b:8b:00:03:8e:a6:dd:1a:55:71:d0:
                    dc:5a:e0:b2:77:9d:4c:9b:62:8c:d4:65:61:de:4a:
                    08:59:97:a3:b5:de:34:1c:75:19:c9:15:14:b0:75:
                    fb:5f:4c:b5:18:9d:3e:c5:81:01:75:90:67:9a:f0:
                    87:97:2e:d3:c9:8a:14:5c:6d:40:80:3e:57:f2:82:
                    2b:16:c7:14:96:24:35:27:ca:28:54:16:de:fa:b3:
                    19:e0:04:48:8c:c9:46:ef:88:e4:c7:da:14:5a:4b:
                    b3:26:9f:bc:42:47:de:60:31:16:c2:52:c4:1e:88:
                    ba:d0:70:c8:11:76:cb:2d:4e:6b:7d:39:e1:59:23:
                    66:2c:4c:bd:10:3b:70:cd:8b:db:97:fc:a2:9d:99:
                    43:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:B5:CC:72:2A:98:40:29:13:91:64:AE:76:8A:FE:71:17:ED:20:92
            X509v3 Authority Key Identifier:
                keyid:F6:F1:8C:02:40:57:42:C2:53:77:D6:96:CD:2A:69:DC:C9:74:BF:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/df05e1-6862-4ed4-876d-150b5db4f56b/1/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/df05e1-6862-4ed4-876d-150b5db4f56b/1/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:32:78:27:6b:fa:4f:70:4c:bf:c3:61:ed:ca:c2:6a:74:b3:
         2c:f2:c3:d5:15:98:72:fb:7a:98:40:15:64:e8:ff:6e:94:ed:
         e1:bd:ee:4a:46:07:5c:fc:10:06:ab:3a:dc:09:b5:37:7a:43:
         7b:e6:bc:10:4e:94:76:cc:1f:23:f9:3f:6c:b4:e7:dd:c1:de:
         31:21:02:9e:10:92:13:08:71:9c:11:ec:f5:18:4d:38:0e:7d:
         44:6e:3e:ec:0d:00:04:42:d8:5b:68:c9:27:b2:b0:fa:8f:b0:
         19:cb:c3:a6:9c:02:a7:16:78:9c:56:d2:a9:8d:bc:8b:b0:81:
         d3:52:e3:4e:70:99:ad:71:87:96:92:b8:52:ba:69:3e:67:eb:
         08:ad:ce:82:bf:d9:c7:09:c7:3b:48:b0:f0:c5:2b:48:7b:42:
         07:96:55:4d:1a:f7:99:80:d2:5a:a9:79:04:41:df:f4:d4:70:
         b5:aa:0f:42:95:7e:56:70:58:96:98:0d:50:42:1b:7a:72:02:
         f2:5a:b3:49:16:1a:12:ed:65:eb:c5:ab:79:9b:d8:d7:6b:71:
         2d:54:7e:fd:73:12:bc:d9:e5:21:7a:4a:d1:88:95:ba:47:01:
         0b:ab:37:74:06:5f:41:c1:14:93:7d:6a:b3:d4:f1:70:b8:3f:
         2c:d7:76:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:54:16 2026 by rpki-client