Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/481408-b215-4d1a-b330-115aac92e9bf/1/RwwsmDticWkhhXHGuClHru6l984.mft
File:                     RwwsmDticWkhhXHGuClHru6l984.mft (raw, json)
Hash identifier:          kHqv+e2tvahlwOwfjTZK34/asx+zI6TAH/naZ0gY06E=
Subject key identifier:   99:81:24:65:ED:54:3B:56:F1:7C:E5:EF:A0:0F:4D:3F:C5:67:B8:BD
Authority key identifier: 47:0C:2C:98:3B:62:71:69:21:85:71:C6:B8:29:47:AE:EE:A5:F7:CE
Certificate issuer:       /CN=470c2c983b627169218571c6b82947aeeea5f7ce
Certificate serial:       019D29CDEE38FC6AF1F3D1DEFB9FA8F707A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RwwsmDticWkhhXHGuClHru6l984.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/481408-b215-4d1a-b330-115aac92e9bf/1/RwwsmDticWkhhXHGuClHru6l984.mft
Manifest number:          188C
Signing time:             Thu 26 Mar 2026 11:00:54 +0000
Manifest this update:     Thu 26 Mar 2026 11:00:54 +0000
Manifest next update:     Fri 27 Mar 2026 11:00:54 +0000
Files and hashes:         1: RwwsmDticWkhhXHGuClHru6l984.crl (hash: B9f/1YuI52fv0PcbpEMBAe62oFSNXNW9BafKSlgax7w=)
                          2: cgpS6bexT0Usb-mxM5p40zTbByk.roa (hash: FwUyErHN7yMeD8Trs4nWcj+6ZTBD3QkRxNZbPOMD/PU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/481408-b215-4d1a-b330-115aac92e9bf/1/RwwsmDticWkhhXHGuClHru6l984.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/481408-b215-4d1a-b330-115aac92e9bf/1/RwwsmDticWkhhXHGuClHru6l984.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RwwsmDticWkhhXHGuClHru6l984.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:cd:ee:38:fc:6a:f1:f3:d1:de:fb:9f:a8:f7:07:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=470c2c983b627169218571c6b82947aeeea5f7ce
        Validity
            Not Before: Mar 26 11:00:54 2026 GMT
            Not After : Mar 27 11:00:54 2026 GMT
        Subject: CN=99812465ed543b56f17ce5efa00f4d3fc567b8bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:4d:cc:21:65:e8:91:99:8a:fd:d8:66:77:dc:
                    e5:2c:de:2b:5e:5e:7d:0b:ab:56:40:35:fc:04:62:
                    d1:2f:36:5d:0e:e6:62:a8:af:e8:20:fe:46:5a:6f:
                    79:32:e9:e6:1e:59:54:2f:f1:92:01:92:61:bc:62:
                    0b:89:3c:50:40:6b:8f:95:ad:51:e4:ae:8f:d1:ca:
                    93:54:5d:c8:3f:a3:31:02:86:97:99:d5:67:06:24:
                    10:6e:25:2e:70:9d:80:34:69:6d:be:3c:dd:90:9e:
                    e5:71:45:a0:64:b4:75:65:56:87:b7:b2:7b:4d:7f:
                    26:91:a1:b9:0d:87:20:b4:27:76:25:df:b1:05:8e:
                    ea:39:38:d3:9b:6a:d0:19:33:ad:31:01:7c:0c:cd:
                    e3:f1:af:db:9e:8d:c7:77:75:0a:ed:a8:28:2c:b6:
                    3c:f5:de:52:3a:ee:3e:81:e2:78:c7:f1:90:72:2f:
                    8f:76:15:af:59:ba:88:c6:05:d1:60:fb:02:2f:79:
                    81:83:8f:a1:63:a6:69:35:83:1b:52:fd:1f:88:d3:
                    bf:3b:c2:01:ab:05:0a:88:51:b4:03:77:e9:7a:a3:
                    03:59:48:ff:5d:14:91:17:16:3c:bb:84:b0:37:dd:
                    fa:77:4a:da:b1:87:fd:31:02:b9:25:ca:81:b7:ec:
                    bc:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:81:24:65:ED:54:3B:56:F1:7C:E5:EF:A0:0F:4D:3F:C5:67:B8:BD
            X509v3 Authority Key Identifier:
                keyid:47:0C:2C:98:3B:62:71:69:21:85:71:C6:B8:29:47:AE:EE:A5:F7:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RwwsmDticWkhhXHGuClHru6l984.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/481408-b215-4d1a-b330-115aac92e9bf/1/RwwsmDticWkhhXHGuClHru6l984.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/481408-b215-4d1a-b330-115aac92e9bf/1/RwwsmDticWkhhXHGuClHru6l984.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:32:cb:35:07:57:2f:57:7a:7c:8e:e2:72:fa:93:6f:ab:93:
         6c:03:54:dc:6b:a1:c5:bd:2f:90:c6:26:8c:ae:8e:06:eb:d8:
         96:71:e1:67:51:99:8c:8f:95:de:bb:b3:0e:d8:48:9c:86:47:
         73:dc:c1:4c:39:92:b9:77:7e:3a:41:11:98:f7:fd:95:bc:d1:
         00:e0:c5:06:09:61:56:98:c6:68:28:96:b4:ec:51:c5:fc:91:
         61:2a:42:d4:c2:bd:55:ec:36:82:3d:22:1f:84:72:68:72:18:
         18:f8:3f:35:78:72:6f:16:c6:b6:d3:01:95:8f:27:6f:d3:f1:
         d9:b9:3e:56:41:cd:cd:16:fa:bf:c1:24:cf:ba:2a:0d:39:54:
         91:66:73:b0:40:62:69:67:28:1f:27:96:82:fa:e1:8a:f1:f1:
         32:58:28:98:6b:33:64:21:d0:cf:b6:6b:bc:8a:c9:3b:bc:13:
         9c:ca:af:e3:46:09:1e:e5:ff:78:9c:3d:8d:df:18:86:7f:43:
         90:da:95:d5:50:f0:a9:66:2f:d2:7a:e5:92:31:c1:3e:2e:30:
         2a:21:80:9a:4a:bf:b7:47:be:cf:37:86:a0:2a:94:85:4e:cb:
         a7:05:f4:4b:ba:52:3c:be:5a:fd:7e:e3:ef:c9:82:d7:9a:93:
         4f:e8:7a:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:01:12 2026 by rpki-client