Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.mft
File:                     dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.mft (raw, json)
Hash identifier:          PSohF38DbMYphWDDz/9fJm2uKunj9zXRdPi2iouvIqI=
Subject key identifier:   20:41:29:57:D0:D8:59:D8:9E:78:08:E8:56:8E:7E:51:DB:BF:D0:B8
Authority key identifier: 76:54:B0:CC:2C:3F:6B:75:7F:F5:2C:BA:16:5D:9F:FA:88:CE:D3:0F
Certificate issuer:       /CN=7654b0cc2c3f6b757ff52cba165d9ffa88ced30f
Certificate serial:       019D284E5324340E910132939C751F298B97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.mft
Manifest number:          188B
Signing time:             Thu 26 Mar 2026 04:01:54 +0000
Manifest this update:     Thu 26 Mar 2026 04:01:54 +0000
Manifest next update:     Fri 27 Mar 2026 04:01:54 +0000
Files and hashes:         1: dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.crl (hash: ZQwOBVY+85vkFds3Of7PxbD/uqnzhnXc0XlgfEt6o/8=)
                          2: tSEZjU-vS57hTqP83y9FF4MrWAs.roa (hash: ozjgCaqpcyjXz1n6hccmETcyoNzECahsGI6im8BxTac=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4e:53:24:34:0e:91:01:32:93:9c:75:1f:29:8b:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7654b0cc2c3f6b757ff52cba165d9ffa88ced30f
        Validity
            Not Before: Mar 26 04:01:54 2026 GMT
            Not After : Mar 27 04:01:54 2026 GMT
        Subject: CN=20412957d0d859d89e7808e8568e7e51dbbfd0b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:7e:97:c5:78:a4:6d:b8:1b:aa:a5:c8:4f:23:
                    b3:08:35:08:05:c8:07:ad:80:6a:73:96:1b:e3:d5:
                    ae:10:03:dc:65:7d:13:5b:54:3e:f2:0f:47:01:e6:
                    54:d6:0c:ac:4b:40:f0:8f:2b:33:61:8c:6d:20:92:
                    e3:13:ff:bf:c9:e6:39:90:f6:df:79:82:aa:87:8b:
                    b7:bb:88:4d:7b:82:36:70:0e:d1:9c:3f:0f:a5:b5:
                    06:1b:20:43:e8:11:8a:0d:0f:1c:cc:d5:b7:d4:af:
                    42:f7:a4:f4:c1:79:de:e2:2e:6b:cb:d5:cc:7a:7f:
                    1a:fd:c1:b2:6f:69:0f:5b:c6:fc:a2:26:3d:3c:a0:
                    5d:63:10:08:87:93:c9:4a:15:72:bc:46:38:6f:9c:
                    c6:f9:f1:42:ef:86:f2:b5:0a:88:70:f5:37:c4:14:
                    15:a0:b4:b3:e2:fe:a6:e5:af:7a:c7:04:20:37:c4:
                    c9:de:b7:ca:20:57:fb:01:4f:01:c2:78:da:c5:62:
                    43:c8:6c:8f:07:9f:5b:c3:9d:38:7d:ab:6f:7c:ad:
                    7f:03:31:99:59:a3:85:1c:3b:cd:a1:92:64:b4:57:
                    eb:4d:66:36:2e:e9:dd:ab:41:96:2b:4c:6d:7e:d2:
                    9d:cf:06:89:6b:13:7b:36:e4:35:a6:0c:c1:9b:b7:
                    7d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:41:29:57:D0:D8:59:D8:9E:78:08:E8:56:8E:7E:51:DB:BF:D0:B8
            X509v3 Authority Key Identifier:
                keyid:76:54:B0:CC:2C:3F:6B:75:7F:F5:2C:BA:16:5D:9F:FA:88:CE:D3:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:01:55:18:83:fc:55:37:4d:f5:94:92:94:ce:0c:a5:f4:58:
         bc:0e:71:02:d3:4f:1b:9b:29:e6:cb:d1:5f:a9:e7:33:47:1e:
         0a:29:a1:a5:8a:5c:b7:d5:4a:bf:c4:69:e1:b4:db:35:4b:db:
         5b:80:6d:2a:72:32:de:c5:3c:7f:dc:ee:cf:9b:25:fb:0a:c8:
         e0:06:c1:a4:a2:84:41:cb:b8:eb:ec:b5:49:bc:49:e2:ac:2a:
         6d:23:2e:e9:d3:9a:68:95:28:85:1d:d9:c8:23:66:b9:c2:ea:
         57:e3:0c:a9:9f:22:bd:12:09:e0:d3:73:34:5c:fb:7b:86:15:
         de:af:3d:28:1b:c2:a5:f3:d9:67:07:08:f3:86:7b:04:f6:88:
         c3:85:42:98:7c:ca:de:61:9d:d1:ab:a0:58:ac:24:90:56:b6:
         ae:3d:4b:97:6d:90:2c:23:da:5a:61:ac:b5:6e:32:0b:a0:1e:
         98:38:41:00:66:9d:1c:ff:d2:7f:62:16:58:ba:b4:93:96:3a:
         b8:35:9e:c3:b3:a0:8b:a4:05:20:92:0f:47:bf:0b:e1:88:80:
         fe:4e:a4:38:be:23:e0:db:02:d0:63:c8:ce:fd:b7:fe:e2:f8:
         55:41:9d:16:72:8e:a9:2c:fa:21:86:e0:0d:22:c5:0a:60:ed:
         6c:84:76:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:53:26 2026 by rpki-client