Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/AyhzUYaXwj6cPjemRrrRISNa10Q.mft
File:                     AyhzUYaXwj6cPjemRrrRISNa10Q.mft (raw, json)
Hash identifier:          LAVC+gmSJeqmTe6l0XxIhTgICkXzFyYR5Dik0edZm6k=
Subject key identifier:   80:57:01:DE:4B:A9:FD:D3:DE:E2:0B:D0:D9:32:96:77:4E:00:D3:CF
Authority key identifier: 03:28:73:51:86:97:C2:3E:9C:3E:37:A6:46:BA:D1:21:23:5A:D7:44
Certificate issuer:       /CN=032873518697c23e9c3e37a646bad121235ad744
Certificate serial:       019D288460DFB4A9B34C6F7FD95DF0246AF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AyhzUYaXwj6cPjemRrrRISNa10Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/AyhzUYaXwj6cPjemRrrRISNa10Q.mft
Manifest number:          188A
Signing time:             Thu 26 Mar 2026 05:00:57 +0000
Manifest this update:     Thu 26 Mar 2026 05:00:57 +0000
Manifest next update:     Fri 27 Mar 2026 05:00:57 +0000
Files and hashes:         1: AyhzUYaXwj6cPjemRrrRISNa10Q.crl (hash: 8xsYn6LEEBpHfGvuEH7au/EloE9vcThO73btnMDqvFo=)
                          2: NUMsW2fdf3SjrYGEQTRkZNhTS7A.roa (hash: NIqv3PrQsgpG1/zoYtC/m+nGNGEajaJy1aijMy9aHTo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/AyhzUYaXwj6cPjemRrrRISNa10Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/AyhzUYaXwj6cPjemRrrRISNa10Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AyhzUYaXwj6cPjemRrrRISNa10Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:84:60:df:b4:a9:b3:4c:6f:7f:d9:5d:f0:24:6a:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=032873518697c23e9c3e37a646bad121235ad744
        Validity
            Not Before: Mar 26 05:00:57 2026 GMT
            Not After : Mar 27 05:00:57 2026 GMT
        Subject: CN=805701de4ba9fdd3dee20bd0d93296774e00d3cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b2:ab:64:89:e8:e0:af:9e:0a:c3:ac:28:ee:
                    49:7e:f9:38:fd:9b:bb:1b:07:53:bf:ed:78:c5:85:
                    d8:13:2c:30:7f:43:b3:26:40:49:b7:d6:46:3f:e0:
                    54:3b:cb:42:c9:5d:7d:c8:7d:46:2e:d3:33:a6:e6:
                    52:9f:1b:09:13:68:de:a5:7e:01:bd:fa:54:28:1f:
                    bd:70:73:cf:33:84:93:51:e5:19:4f:41:ca:07:3d:
                    f1:bd:59:ae:9a:05:fa:c0:21:de:ae:45:e5:cc:33:
                    27:8b:10:cd:8f:8f:4a:c6:96:45:a5:6f:bb:ed:72:
                    77:51:a7:90:cb:cd:3b:6b:cf:c1:99:5a:23:70:4a:
                    a5:83:34:a1:c9:7b:21:43:7c:c4:8d:d6:f5:49:25:
                    ee:34:b2:ad:08:ce:e0:4a:6b:eb:09:84:29:9b:d4:
                    70:15:f2:bf:ae:96:47:d2:3e:f3:2b:df:54:84:ca:
                    77:f5:02:89:0f:b7:08:bb:e8:57:22:76:e0:b9:21:
                    61:8a:7a:b1:ff:ac:40:4e:78:20:b0:a7:0e:a5:4b:
                    f4:e9:ba:be:ab:c7:cc:46:0f:5e:90:e8:53:ce:34:
                    e4:51:97:e8:fc:75:56:92:da:05:e1:31:df:48:d2:
                    e8:01:8c:9c:02:bc:28:87:33:44:58:2e:c4:44:ac:
                    b2:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:57:01:DE:4B:A9:FD:D3:DE:E2:0B:D0:D9:32:96:77:4E:00:D3:CF
            X509v3 Authority Key Identifier:
                keyid:03:28:73:51:86:97:C2:3E:9C:3E:37:A6:46:BA:D1:21:23:5A:D7:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyhzUYaXwj6cPjemRrrRISNa10Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/AyhzUYaXwj6cPjemRrrRISNa10Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/AyhzUYaXwj6cPjemRrrRISNa10Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:d7:12:50:7e:83:f5:1e:fd:0b:1a:c9:6c:80:45:5c:18:a7:
         54:ec:bc:fb:7e:b3:3c:8f:db:d4:30:bb:68:11:32:1b:19:47:
         55:11:2b:90:40:24:9c:7c:05:94:fa:b9:af:4c:03:4f:23:ae:
         0c:c7:c6:f8:5e:0c:00:97:8f:d7:28:f6:eb:0c:40:d1:4d:ca:
         95:45:c5:80:bc:74:19:e1:b9:38:95:ea:81:0e:8d:01:85:c1:
         35:2d:47:a7:21:da:fc:64:0c:f0:ce:e3:cf:a4:5d:7d:c9:0f:
         70:4f:8a:e2:39:60:9b:79:a3:72:d6:bf:bf:0c:bc:35:41:85:
         7b:71:8d:51:f7:a1:c3:d0:13:d8:8e:b7:f7:7a:8b:05:39:57:
         2a:1a:95:0c:61:94:d9:e8:d5:fd:ae:df:17:69:63:d4:bb:74:
         8f:ad:c9:9f:a3:16:7b:a1:eb:f1:e4:81:d2:ae:18:21:20:01:
         4c:0e:03:ac:b6:79:59:9e:6b:33:2d:2b:35:fe:6d:b0:b0:e7:
         43:76:54:37:78:e0:3d:56:54:b5:fb:1b:3b:e5:2e:2f:bd:60:
         86:ce:dd:64:f1:32:83:e5:78:09:04:5a:09:95:54:d7:d8:b1:
         d3:84:30:2f:73:3d:3d:91:6d:38:18:ca:1b:85:54:99:0b:65:
         1b:c8:bd:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:56:19 2026 by rpki-client