Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/96oDm4hrImV4vbakJ4G_WQRLsTg.mft
File:                     96oDm4hrImV4vbakJ4G_WQRLsTg.mft (raw, json)
Hash identifier:          HJBhvFYsbTW0E2Ynt0h+cgDEeK0YL0RGN9tG9tV7bKk=
Subject key identifier:   A7:B7:FF:4E:1D:BE:E9:29:84:D5:A8:2F:F3:1A:B7:E7:B5:17:2D:7D
Authority key identifier: F7:AA:03:9B:88:6B:22:65:78:BD:B6:A4:27:81:BF:59:04:4B:B1:38
Certificate issuer:       /CN=f7aa039b886b226578bdb6a42781bf59044bb138
Certificate serial:       019D2703B7A5FC72074B9A407EA12082CEF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/96oDm4hrImV4vbakJ4G_WQRLsTg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/96oDm4hrImV4vbakJ4G_WQRLsTg.mft
Manifest number:          188C
Signing time:             Wed 25 Mar 2026 22:00:48 +0000
Manifest this update:     Wed 25 Mar 2026 22:00:48 +0000
Manifest next update:     Thu 26 Mar 2026 22:00:48 +0000
Files and hashes:         1: 96oDm4hrImV4vbakJ4G_WQRLsTg.crl (hash: hasHqF9AwkASJ8w2Ncw9fdm31Y465goqR2kCYf2azIM=)
                          2: AdZDptogFPfZkzR5C2w7ewUy5fM.roa (hash: eY6m5Pfp09t+29CrdJcppfTJAkMyMsubBMzfDZuh9Pg=)
                          3: Mhow_zubVnvAcwQbBcXt37SkVbo.roa (hash: 6hC28liE87/PAEstEfDeR9v3wr68y7o5n3aUzo7i9jo=)
                          4: lyKU2cRz1rwVy67EiMdpJEVU-uw.roa (hash: MyEdGCpP2vsnLyoMOlKjt9pc63D/h3XJBUfmhnb515g=)
                          5: qS5aITzh8bm2lSNZ9w-1v_OwEkM.roa (hash: nyRJgnJF5E43/9qDPBbeFHXa4kSfjJ0ENxyk0mTysYQ=)
                          6: uBEokvW7aAgryoMWD6Cv0elcFmo.roa (hash: H/a3hMppgWLont3KdCAnRpO2zISV9Otu71OhQuyZUU4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/96oDm4hrImV4vbakJ4G_WQRLsTg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/96oDm4hrImV4vbakJ4G_WQRLsTg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/96oDm4hrImV4vbakJ4G_WQRLsTg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:03:b7:a5:fc:72:07:4b:9a:40:7e:a1:20:82:ce:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7aa039b886b226578bdb6a42781bf59044bb138
        Validity
            Not Before: Mar 25 22:00:48 2026 GMT
            Not After : Mar 26 22:00:48 2026 GMT
        Subject: CN=a7b7ff4e1dbee92984d5a82ff31ab7e7b5172d7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:7b:9e:b4:ef:ed:9f:df:ba:24:dd:09:a0:24:
                    5a:5f:45:72:2f:ea:cc:f9:b1:92:91:9d:49:92:6c:
                    0c:4c:c5:aa:f9:57:60:6c:1c:60:10:10:29:43:c1:
                    30:6c:d0:07:51:19:89:4b:00:f5:c5:16:7d:e1:e5:
                    36:a0:0e:cd:20:94:6c:ef:ca:4e:9f:32:d3:84:f9:
                    9d:05:37:cb:f8:40:90:48:4b:57:67:5f:3e:24:cc:
                    00:2c:df:06:0f:09:a6:5b:7d:5b:44:dd:25:a8:69:
                    79:aa:08:d6:1b:b2:25:2e:71:13:76:49:91:b3:2f:
                    31:33:f4:dd:b3:a8:5c:eb:88:4b:2d:22:9e:a5:7d:
                    be:a2:f0:5b:d3:76:dc:9a:20:6b:89:31:2e:80:cd:
                    ad:a9:89:28:5d:ae:55:78:65:10:2b:d9:15:a6:37:
                    22:e8:49:83:1b:71:c7:4d:e2:52:f7:53:64:92:b7:
                    94:4a:45:9b:a9:42:3d:01:95:29:e1:ab:78:55:4a:
                    5a:04:ad:2a:fc:c2:42:07:5e:e9:a1:89:3c:b8:70:
                    80:d5:b2:09:dc:b9:1a:3a:84:b2:44:71:67:8e:f4:
                    1d:6a:29:c6:fe:14:8d:d5:1d:88:b4:0d:99:6c:0d:
                    3e:17:9d:5e:9e:85:62:9a:48:09:a2:02:f3:79:0a:
                    ce:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:B7:FF:4E:1D:BE:E9:29:84:D5:A8:2F:F3:1A:B7:E7:B5:17:2D:7D
            X509v3 Authority Key Identifier:
                keyid:F7:AA:03:9B:88:6B:22:65:78:BD:B6:A4:27:81:BF:59:04:4B:B1:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96oDm4hrImV4vbakJ4G_WQRLsTg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/96oDm4hrImV4vbakJ4G_WQRLsTg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/96oDm4hrImV4vbakJ4G_WQRLsTg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:78:00:f7:0c:25:72:ea:0b:2d:a2:6b:69:db:9a:bc:aa:ba:
         32:1b:02:71:9b:7d:ef:14:4d:3e:ba:dc:05:47:5b:bd:97:dc:
         aa:fd:78:93:29:d3:bc:d7:81:51:90:f5:4e:6d:60:00:8b:76:
         19:a2:e3:6c:68:f8:0a:fa:1b:15:fd:25:6f:ef:f1:0d:24:b9:
         8c:db:d9:0c:9e:c2:e9:35:8d:bf:af:85:e9:be:81:5d:cf:34:
         e3:e9:47:fd:13:e3:ea:13:33:67:05:27:af:b6:68:01:50:ec:
         2a:fb:82:a9:bb:98:3c:a5:96:54:cf:9b:6a:04:32:b7:a8:b6:
         9b:98:cb:da:0e:28:fe:24:97:6e:ac:49:6d:d9:79:a2:9b:f1:
         8c:fd:40:cb:2f:37:2d:c3:41:1e:4f:27:15:58:33:06:64:07:
         ee:fa:e3:fe:4c:8c:9b:ca:ec:fa:50:0f:3a:24:13:be:31:f4:
         30:79:6c:d9:2f:84:a2:dd:53:26:03:c6:79:d8:58:cb:3b:22:
         75:2f:54:e9:2c:d0:a3:79:a4:51:ca:5a:d0:a3:54:8e:b6:a1:
         c8:98:50:35:7c:13:26:8e:bd:25:1e:5a:b5:16:da:07:fb:06:
         18:e7:ae:42:bf:21:74:17:4e:76:27:9a:68:e7:7a:96:6f:fe:
         c4:b9:4f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:03 2026 by rpki-client