Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/1d8e80-33a8-4d55-a3d6-5ecdef2fb68d/1/j7wQY6bvtF4nsRHpIHgnyfcyUCs.mft
File:                     j7wQY6bvtF4nsRHpIHgnyfcyUCs.mft (raw, json)
Hash identifier:          7Jp4/7LaWAh0FjkyvlOkHlbjrgquTmw0HgV1TOsQCcU=
Subject key identifier:   29:51:29:5F:AE:EB:F9:FA:06:75:BE:03:A0:C2:B2:B6:CB:AE:40:92
Authority key identifier: 8F:BC:10:63:A6:EF:B4:5E:27:B1:11:E9:20:78:27:C9:F7:32:50:2B
Certificate issuer:       /CN=8fbc1063a6efb45e27b111e9207827c9f732502b
Certificate serial:       019D2816452DF61B7FB5C32316293AF57535
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j7wQY6bvtF4nsRHpIHgnyfcyUCs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/1d8e80-33a8-4d55-a3d6-5ecdef2fb68d/1/j7wQY6bvtF4nsRHpIHgnyfcyUCs.mft
Manifest number:          188B
Signing time:             Thu 26 Mar 2026 03:00:41 +0000
Manifest this update:     Thu 26 Mar 2026 03:00:41 +0000
Manifest next update:     Fri 27 Mar 2026 03:00:41 +0000
Files and hashes:         1: 4o-NW_B5FSFDZ4gKE1tWJ-v7s-g.roa (hash: ouFB/UvxDiRbon15aN+SKttXHEnMEz2wiPSDtRRfD6o=)
                          2: j7wQY6bvtF4nsRHpIHgnyfcyUCs.crl (hash: cCHU9wgvjp9gc4Y7ms5bp+L/gRngg1s0JJKvbAumuik=)
                          3: wjsn8lOpp8oeNhpUiOsLcjurXS8.roa (hash: 2AyVEMZD7UamtPsXAJHxsf1yEBYRHdOFji/mDlkgdjI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/1d8e80-33a8-4d55-a3d6-5ecdef2fb68d/1/j7wQY6bvtF4nsRHpIHgnyfcyUCs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/1d8e80-33a8-4d55-a3d6-5ecdef2fb68d/1/j7wQY6bvtF4nsRHpIHgnyfcyUCs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j7wQY6bvtF4nsRHpIHgnyfcyUCs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:16:45:2d:f6:1b:7f:b5:c3:23:16:29:3a:f5:75:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fbc1063a6efb45e27b111e9207827c9f732502b
        Validity
            Not Before: Mar 26 03:00:41 2026 GMT
            Not After : Mar 27 03:00:41 2026 GMT
        Subject: CN=2951295faeebf9fa0675be03a0c2b2b6cbae4092
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:e6:d8:dd:83:ac:36:0f:ef:0e:66:e4:67:99:
                    2d:60:40:9c:ce:30:4f:dc:3c:3f:04:cf:2f:d3:c3:
                    ea:9d:3c:9a:6c:8e:ba:0e:47:31:71:cc:96:0a:3a:
                    2d:06:73:46:47:62:cc:9b:17:42:81:72:2f:cc:ef:
                    fc:c5:49:a6:f2:dd:e4:91:91:41:92:ac:be:19:1e:
                    7b:34:10:e2:5a:bf:87:9c:18:6b:3b:02:06:f6:80:
                    97:a6:1e:67:db:60:a3:e9:5b:b5:cd:52:db:9e:29:
                    45:9b:49:dc:d0:b6:53:4a:a0:7a:bf:d4:50:27:90:
                    36:b1:cd:d3:59:86:3c:16:bb:cd:57:ef:1c:fd:fe:
                    4a:ee:d5:85:56:bd:82:37:22:1e:ab:e2:91:a9:ba:
                    98:e1:dc:a3:ec:e5:eb:23:7f:49:8b:6c:1a:31:28:
                    4b:ea:0d:48:33:c3:41:fd:08:38:d2:f2:70:c7:db:
                    74:2b:49:6d:6c:69:fe:74:9f:a7:45:58:97:10:a9:
                    f5:db:5b:a1:46:ab:2d:9d:cc:96:79:ff:a5:8b:47:
                    70:79:b8:19:53:99:02:f3:fe:00:c0:ea:7a:d0:63:
                    17:fa:30:43:ba:f9:c0:f6:88:bd:4e:29:ae:f2:5f:
                    fc:42:f2:09:19:1b:8a:c8:f1:af:26:c3:2b:63:b4:
                    fd:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:51:29:5F:AE:EB:F9:FA:06:75:BE:03:A0:C2:B2:B6:CB:AE:40:92
            X509v3 Authority Key Identifier:
                keyid:8F:BC:10:63:A6:EF:B4:5E:27:B1:11:E9:20:78:27:C9:F7:32:50:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7wQY6bvtF4nsRHpIHgnyfcyUCs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/1d8e80-33a8-4d55-a3d6-5ecdef2fb68d/1/j7wQY6bvtF4nsRHpIHgnyfcyUCs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/1d8e80-33a8-4d55-a3d6-5ecdef2fb68d/1/j7wQY6bvtF4nsRHpIHgnyfcyUCs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:5d:0a:b6:eb:a2:8d:bc:51:04:53:a2:b3:c2:a6:11:df:49:
         a7:f0:91:f4:1e:ba:a2:fc:5f:20:b9:de:e0:95:af:58:c7:ed:
         db:30:e4:d3:68:e1:b2:75:cb:21:06:07:62:ec:b2:7c:e0:89:
         92:6b:1d:e7:a3:a4:f2:ca:a4:9b:98:b1:4b:24:4f:6e:55:18:
         9d:e3:cd:aa:7a:5c:20:78:20:fb:31:ff:54:6d:81:71:b7:43:
         1a:4b:98:d9:7d:82:d3:52:b7:96:b9:8c:f5:fb:01:b8:c6:e9:
         41:e8:4f:b3:54:58:94:97:66:8e:ce:c1:31:be:19:a3:c1:31:
         7e:a1:89:60:34:f5:2f:b4:98:d4:56:77:8d:83:47:ed:40:3d:
         bb:31:c8:e5:ef:a9:1c:61:61:d8:41:7c:47:20:63:43:e0:62:
         d8:42:03:6a:2f:f1:85:8a:c3:73:0c:1a:e5:fe:35:02:fc:8f:
         e5:e1:1c:5d:99:69:c8:01:38:41:b2:04:55:71:85:94:c8:2f:
         30:df:ba:c0:ee:63:45:4b:33:57:f3:f7:71:71:a8:0d:9b:51:
         cc:d7:8e:b9:d8:13:a5:56:9b:6a:3b:6e:b6:7a:a1:83:fa:cf:
         df:8b:c3:3a:9e:9a:7d:e7:3d:f5:ff:30:97:09:a7:d7:87:52:
         ed:29:86:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:14:10 2026 by rpki-client