Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/Mw_pcbPjaxapK-hfWZhb5FlouGQ.mft
File:                     Mw_pcbPjaxapK-hfWZhb5FlouGQ.mft (raw, json)
Hash identifier:          Ev8uRwYtPE2qmjwZfESN0vxI2sm3EqYbk6WBh6dk8CQ=
Subject key identifier:   BD:33:99:33:72:32:5E:C6:39:D6:BE:F8:51:2F:92:DF:DD:FB:89:79
Authority key identifier: 33:0F:E9:71:B3:E3:6B:16:A9:2B:E8:5F:59:98:5B:E4:59:68:B8:64
Certificate issuer:       /CN=330fe971b3e36b16a92be85f59985be45968b864
Certificate serial:       019D25F1844C45029D52F3F9CA313D7A6481
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mw_pcbPjaxapK-hfWZhb5FlouGQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/Mw_pcbPjaxapK-hfWZhb5FlouGQ.mft
Manifest number:          188A
Signing time:             Wed 25 Mar 2026 17:01:18 +0000
Manifest this update:     Wed 25 Mar 2026 17:01:18 +0000
Manifest next update:     Thu 26 Mar 2026 17:01:18 +0000
Files and hashes:         1: 2kuIvYz0mPqtJbUQJNVx-lVPBIo.roa (hash: D0Xs0iUp+l8fS7+Aa1NtF7EeVcXmxlsHcjYkQRjFig4=)
                          2: Mw_pcbPjaxapK-hfWZhb5FlouGQ.crl (hash: IxkScuEc54xWVVTZmePexXjdFQi/b6PmJsykO/kB08o=)
                          3: Ngjr9wy51fkUA4X9nTsL9YfXGKU.roa (hash: i6JMeG81mq8rZ+g7yyAse10k7eBfXR8WF993t9kcOjk=)
                          4: QtLpBA7up6Tv9_I21sDAde754gI.roa (hash: t/ghCJZNi0bitU5ymorA/SjBNvMEAy+ASq85mxfJPfM=)
                          5: cOIA2l5yQWyobF09hWUJkOBpDho.roa (hash: 8kdvtWkN2BQUfcekDIq5DMRgrEAmtfmnnsAU8vpbwwI=)
                          6: dCl0q4_GuogKF8XrFPMUNq696G8.roa (hash: hFHFWlVTeWBAVwx1gQtse8jDVZwunN7tx8D56G5e0Is=)
                          7: dzm1IbOHTtA3LQLpIHITZqiyxqQ.roa (hash: oVHFyPiVx5TouD9L897NVPsoqhLfukE2LUK9htc3qYY=)
                          8: yISpbsKHVNYR2VhOiL05QDs4Xik.roa (hash: 0ZssM8aTan4+nLMRdeDi3TYrIbskGxrV96V07ZBRqhU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/Mw_pcbPjaxapK-hfWZhb5FlouGQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/Mw_pcbPjaxapK-hfWZhb5FlouGQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mw_pcbPjaxapK-hfWZhb5FlouGQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 17:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:f1:84:4c:45:02:9d:52:f3:f9:ca:31:3d:7a:64:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=330fe971b3e36b16a92be85f59985be45968b864
        Validity
            Not Before: Mar 25 17:01:18 2026 GMT
            Not After : Mar 26 17:01:18 2026 GMT
        Subject: CN=bd33993372325ec639d6bef8512f92dfddfb8979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:9b:b3:dc:9a:4d:7b:bf:1f:fb:4b:7a:ef:47:
                    d5:11:8d:b1:93:48:d5:81:7a:a5:3f:a5:b7:ea:44:
                    a3:8d:d5:f7:25:15:1c:5d:8b:77:eb:89:4c:8e:1f:
                    8f:07:93:6a:c9:ed:a9:04:29:27:7b:8c:9d:79:d1:
                    ae:da:ea:42:27:a8:05:a0:3e:fb:99:85:df:de:cd:
                    e8:fb:16:06:0b:cb:72:e7:25:ad:c0:42:42:95:89:
                    ec:7a:85:0c:97:dc:a0:41:d8:ac:1f:ae:2b:b0:b8:
                    ab:c0:c6:0f:93:f2:77:9e:71:9c:19:5a:da:9b:eb:
                    be:50:99:c1:cb:10:9f:9d:5d:53:05:02:c3:d8:ed:
                    8e:06:c2:f6:59:26:49:36:5f:22:e6:d7:48:9b:54:
                    ee:8b:61:26:89:31:f6:f3:bc:da:d0:81:a5:88:e1:
                    9f:d3:7a:3d:a0:5c:ce:2c:00:00:ae:b6:26:57:5b:
                    63:62:d8:e1:50:f3:f7:71:e4:cb:6b:fd:9a:b0:3b:
                    b4:97:6e:8a:aa:16:bf:e4:9c:48:ea:f8:0e:4f:c1:
                    c5:4a:fd:db:a1:6a:2c:59:0d:aa:ff:ea:ed:5e:96:
                    a7:42:87:c0:25:84:7a:fd:0b:53:a3:db:3c:a4:88:
                    23:41:c6:2b:2e:c2:c2:a8:f7:b5:88:fc:69:e7:b0:
                    d6:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:33:99:33:72:32:5E:C6:39:D6:BE:F8:51:2F:92:DF:DD:FB:89:79
            X509v3 Authority Key Identifier:
                keyid:33:0F:E9:71:B3:E3:6B:16:A9:2B:E8:5F:59:98:5B:E4:59:68:B8:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mw_pcbPjaxapK-hfWZhb5FlouGQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/Mw_pcbPjaxapK-hfWZhb5FlouGQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/Mw_pcbPjaxapK-hfWZhb5FlouGQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:c4:62:bc:62:24:79:f4:21:ba:d7:93:d0:12:ba:a4:92:e5:
         21:8c:f2:eb:5e:47:43:89:28:63:3f:94:95:2e:e8:49:7f:b6:
         fe:56:45:6f:60:bf:be:e9:e2:2c:a4:a8:46:f8:85:d2:5c:5e:
         1f:4b:3a:7d:6a:8d:9e:55:25:f8:0a:fa:5a:88:98:dd:ad:43:
         b6:ba:d9:53:13:95:e6:23:5e:48:85:cc:67:24:f3:15:ca:f9:
         d6:cc:f1:d5:f4:62:d5:da:b5:31:b5:3b:7c:91:5c:b5:02:81:
         5f:64:9b:9c:53:27:5e:8d:78:ea:ce:b0:69:9a:8a:21:4b:54:
         50:f5:28:78:03:c7:e2:be:8d:5b:5c:c6:a1:a2:66:70:db:21:
         ba:2e:ce:ed:6b:9f:3b:cf:e1:31:96:f0:7a:23:e4:ca:bf:23:
         12:c1:63:6a:eb:8d:e6:33:c3:fb:a9:b8:a9:15:5a:e9:40:87:
         24:ff:8b:35:db:eb:68:63:fb:ce:ac:0e:9a:4e:77:c2:ea:2d:
         19:cc:0d:94:88:40:b0:ad:26:d1:ae:f7:7e:95:3d:15:5b:d9:
         6e:d7:7e:dd:e7:e9:df:33:bd:04:be:91:a7:91:60:60:39:42:
         b3:e6:0b:c2:77:39:ca:b7:e6:05:e1:82:c4:15:00:5a:b1:93:
         80:2f:6d:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:09:57 2026 by rpki-client