Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.mft
File:                     r-xPShbMUb1RYhARU5zrV0rBXQI.mft (raw, json)
Hash identifier:          +LYtM77z7tqXDVpCRvu+mBtizk4KJ20Ku5+um73ZNVo=
Subject key identifier:   8A:2F:74:9A:E6:17:00:BE:CD:9B:42:5C:F6:F0:9A:57:09:AC:D9:1C
Authority key identifier: AF:EC:4F:4A:16:CC:51:BD:51:62:10:11:53:9C:EB:57:4A:C1:5D:02
Certificate issuer:       /CN=afec4f4a16cc51bd51621011539ceb574ac15d02
Certificate serial:       019D26282E4F685D766D23E989921F933AB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r-xPShbMUb1RYhARU5zrV0rBXQI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.mft
Manifest number:          188C
Signing time:             Wed 25 Mar 2026 18:01:00 +0000
Manifest this update:     Wed 25 Mar 2026 18:01:00 +0000
Manifest next update:     Thu 26 Mar 2026 18:01:00 +0000
Files and hashes:         1: PoqWbVHh-FUr2dkHNr-gmxi2c-8.roa (hash: YLgUsuGSocGrObs4G25+Ghw9LtEJ63hht/5KGdZnHW0=)
                          2: eFHhAwYmu7k_SZF7KBYCjSI_VRQ.roa (hash: YSq+JM4wY/n6/47XuDVTyxTLFJSe/fMpCxRnSCbLex0=)
                          3: pjM3LX3IWBwhVZCLWvigLJvSQJQ.roa (hash: 3UYX3NqDLCGEU8dgjIHi5102NNO+66HkfR/cZxzpA3A=)
                          4: r-xPShbMUb1RYhARU5zrV0rBXQI.crl (hash: odV64oKu1farem9G4dRAiKynXrVmPjryvNfBopaW5CA=)
                          5: t5ZpdQdakz93WmXWJ_al0M0qYog.roa (hash: ZYC1omK7NgO2nQPCpRlt52kAchXz0Fe3jlMw43xrEYU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r-xPShbMUb1RYhARU5zrV0rBXQI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:28:2e:4f:68:5d:76:6d:23:e9:89:92:1f:93:3a:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afec4f4a16cc51bd51621011539ceb574ac15d02
        Validity
            Not Before: Mar 25 18:01:00 2026 GMT
            Not After : Mar 26 18:01:00 2026 GMT
        Subject: CN=8a2f749ae61700becd9b425cf6f09a5709acd91c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:86:cf:52:10:3d:de:dd:2b:8c:e9:12:c7:32:
                    51:b0:a7:c8:c5:cb:4b:6a:79:72:c0:6e:e8:c3:e5:
                    d6:ec:f5:a6:f8:5c:7b:73:82:27:38:2b:45:fd:b0:
                    b8:95:fe:1a:43:fd:d2:4e:75:00:e3:9e:3d:be:4e:
                    e7:b6:db:f8:8d:ce:4e:52:10:1c:0c:bd:f7:3e:bd:
                    04:9c:73:8b:6d:3a:f2:8a:ba:a9:eb:bc:0b:81:7f:
                    fd:65:40:db:c6:65:bb:e8:0d:2d:1e:da:95:88:4e:
                    3c:46:09:ca:da:27:53:71:b7:8d:a0:e8:14:eb:0e:
                    57:5d:6a:74:66:36:3e:13:ef:8e:72:37:e5:ba:43:
                    77:59:68:bd:b7:67:55:9e:2b:24:db:f9:c0:ac:25:
                    6f:6f:18:89:3e:10:3c:5a:ff:3d:8b:05:a9:c3:33:
                    ec:16:e4:fb:19:3e:05:34:ee:9d:ea:32:1a:a5:9c:
                    fe:dd:6f:3f:3a:4e:89:ba:86:a2:50:f8:f3:10:4b:
                    53:7a:95:95:63:24:bf:ee:13:44:c4:e1:65:1d:c8:
                    81:83:db:48:47:45:8b:1a:ff:49:f9:49:8d:93:df:
                    07:24:e4:86:49:ca:f7:04:66:a4:1a:d4:6a:bb:ee:
                    51:5a:03:5b:03:ad:9a:5a:5f:eb:a2:dd:4b:7d:f4:
                    23:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:2F:74:9A:E6:17:00:BE:CD:9B:42:5C:F6:F0:9A:57:09:AC:D9:1C
            X509v3 Authority Key Identifier:
                keyid:AF:EC:4F:4A:16:CC:51:BD:51:62:10:11:53:9C:EB:57:4A:C1:5D:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-xPShbMUb1RYhARU5zrV0rBXQI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:36:34:9e:17:3f:0e:42:c5:52:72:3f:36:ac:67:3e:00:37:
         f5:b9:d2:0e:d8:e8:85:06:d0:f6:0b:8a:63:90:b5:8e:7e:8a:
         ff:f8:c5:6b:e8:52:1e:9f:31:df:31:43:e1:92:68:59:47:88:
         1f:de:85:62:6d:97:b9:94:b8:2f:3e:4a:35:19:45:a5:b7:9c:
         25:0d:ae:66:fc:c9:c0:47:ef:6c:60:0b:02:40:d7:7c:2d:42:
         d2:16:3f:a4:8f:a2:9a:8e:91:2d:ef:12:ed:66:36:1f:2b:e1:
         e6:d7:89:fe:4d:d4:df:a2:37:46:76:fa:9e:cd:05:72:a6:c1:
         5a:1a:e9:ed:7a:95:35:b7:9a:f5:74:f1:58:04:97:de:cc:f3:
         0c:47:37:7d:de:fa:68:19:38:0e:86:54:04:73:3f:98:50:dc:
         db:d5:6f:5b:d0:00:2d:12:68:23:44:e3:4f:5e:6b:62:f0:e8:
         32:c9:e3:4a:22:12:6e:ec:b7:69:1d:58:b0:4c:4b:7d:06:96:
         d3:29:26:3d:3a:35:75:8d:f4:89:17:54:f1:61:d9:de:0d:9a:
         4d:75:3f:3b:8b:85:f3:1d:84:4e:f6:9e:5b:e0:3e:0e:b7:a1:
         37:52:f7:2a:9b:ba:22:10:7a:73:26:ff:08:da:0e:fa:70:83:
         bf:dd:88:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:27 2026 by rpki-client