Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.mft
File:                     GimypF3gE2_qu_rkuqcBcqqGYZs.mft (raw, json)
Hash identifier:          ZyMbz7x7dUr6DBVM5QPWJ4wO6I3XH/BWB6+co7IsTxo=
Subject key identifier:   66:4B:DC:18:E0:48:4F:A7:B3:26:DD:5B:5D:C2:39:68:A1:7A:04:AB
Authority key identifier: 1A:29:B2:A4:5D:E0:13:6F:EA:BB:FA:E4:BA:A7:01:72:AA:86:61:9B
Certificate issuer:       /CN=1a29b2a45de0136feabbfae4baa70172aa86619b
Certificate serial:       019D2A047B46917E56DF5B7FCB3E0F8E924C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GimypF3gE2_qu_rkuqcBcqqGYZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.mft
Manifest number:          188B
Signing time:             Thu 26 Mar 2026 12:00:29 +0000
Manifest this update:     Thu 26 Mar 2026 12:00:29 +0000
Manifest next update:     Fri 27 Mar 2026 12:00:29 +0000
Files and hashes:         1: GimypF3gE2_qu_rkuqcBcqqGYZs.crl (hash: intYTMfAoPDAfnK3iLhrVKzjnN5hpqKFOOZxrAwIeI0=)
                          2: _LIMNGBB_bM1l_RNh7Jn1ke8Z1Q.roa (hash: Y1Vdc4Bk2253+dyiXjTYX2rbKWMSURyUVb6exyc6X4k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GimypF3gE2_qu_rkuqcBcqqGYZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:04:7b:46:91:7e:56:df:5b:7f:cb:3e:0f:8e:92:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a29b2a45de0136feabbfae4baa70172aa86619b
        Validity
            Not Before: Mar 26 12:00:29 2026 GMT
            Not After : Mar 27 12:00:29 2026 GMT
        Subject: CN=664bdc18e0484fa7b326dd5b5dc23968a17a04ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:54:a4:0a:41:f2:2f:b0:fe:10:62:ad:59:78:
                    64:32:c9:e2:ce:aa:4f:15:a8:3f:51:89:19:4d:ba:
                    26:71:29:9c:6c:9e:4e:a4:13:e3:b7:5d:c6:18:c6:
                    88:40:3b:9c:33:52:ca:17:0a:28:64:df:32:85:26:
                    87:58:87:18:b0:88:17:f2:d7:6b:96:30:94:07:87:
                    a3:a2:1c:61:77:6a:61:b6:19:73:3c:52:07:c2:5f:
                    cb:35:fe:8c:95:d5:58:94:c9:06:82:0d:61:0d:69:
                    ca:73:0c:a3:fb:1e:06:5d:7a:59:2e:f4:24:6c:63:
                    da:4f:16:41:42:2b:cb:13:69:9d:5c:1b:a0:26:f5:
                    71:1b:b0:6f:9c:a1:5e:8d:56:39:e6:81:27:02:8d:
                    0d:b3:6a:8c:d6:5d:8a:a3:2e:07:01:d6:92:13:2d:
                    07:b6:02:8a:fe:fd:58:e4:af:aa:11:ff:52:bc:a8:
                    74:23:87:74:aa:9a:d8:88:17:c4:49:ef:22:d6:c8:
                    2d:05:29:d0:f7:63:0d:0c:45:5c:6b:ff:50:43:0d:
                    7c:81:09:69:09:be:9c:6a:f4:4d:09:34:e2:73:4b:
                    2a:eb:4c:93:63:41:63:56:66:42:1d:f7:7f:a2:47:
                    c4:21:9d:ac:1f:fb:2c:b1:58:56:00:97:25:e0:15:
                    d7:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:4B:DC:18:E0:48:4F:A7:B3:26:DD:5B:5D:C2:39:68:A1:7A:04:AB
            X509v3 Authority Key Identifier:
                keyid:1A:29:B2:A4:5D:E0:13:6F:EA:BB:FA:E4:BA:A7:01:72:AA:86:61:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GimypF3gE2_qu_rkuqcBcqqGYZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:13:dd:ed:7b:87:51:b0:08:68:58:ab:68:02:50:a9:49:0a:
         12:37:2c:7f:2e:4f:0f:34:54:62:db:74:6a:d5:5f:20:a3:b7:
         9d:c1:18:c4:43:4f:64:aa:fe:ee:52:e6:84:8e:05:68:4d:6f:
         24:6f:00:fd:70:33:b6:00:7a:e4:75:db:2a:52:2e:98:90:60:
         3f:f5:2f:82:a5:e5:e2:56:d9:39:0a:e7:8b:4e:d6:32:aa:7f:
         55:fc:1c:57:cd:c5:38:22:ee:9b:21:2d:c3:88:05:30:ca:e8:
         22:3e:43:e2:2b:31:bf:e5:4c:01:4a:63:19:bd:81:a1:42:b5:
         5f:37:a9:84:45:d0:88:8d:5e:0b:38:59:40:27:30:eb:45:6f:
         69:aa:0d:10:2e:96:ba:1a:41:31:b4:52:f1:b0:b2:53:a0:6f:
         7c:68:02:e5:78:80:63:57:a6:b9:a0:04:3f:77:e3:b7:19:2b:
         f7:70:72:ac:25:92:c0:ef:ba:93:3c:c7:62:84:9b:95:c7:54:
         dc:2e:4e:34:76:31:da:a6:1f:dd:8c:16:03:33:de:f3:4a:a8:
         af:95:50:fb:da:4e:be:35:14:0d:2d:28:ef:71:a8:c4:47:66:
         88:39:46:07:2e:87:98:37:31:3e:d3:37:ab:b3:f7:62:c1:2a:
         a7:63:49:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:28:08 2026 by rpki-client