Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/dVNbreN6PW_DgEQqKF4Ve5hMqR0.mft
File:                     dVNbreN6PW_DgEQqKF4Ve5hMqR0.mft (raw, json)
Hash identifier:          9mEYOUsYJUnMT1n/6ekoYun5vBzfaLLuUPr0RvnM6Uc=
Subject key identifier:   6B:28:18:04:12:BE:A6:32:D4:23:55:A9:D3:37:AE:6F:EB:B6:4D:BA
Authority key identifier: 75:53:5B:AD:E3:7A:3D:6F:C3:80:44:2A:28:5E:15:7B:98:4C:A9:1D
Certificate issuer:       /CN=75535bade37a3d6fc380442a285e157b984ca91d
Certificate serial:       019D2B4E3BDB0402F0B2DFFB23C4C16ECFE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dVNbreN6PW_DgEQqKF4Ve5hMqR0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/dVNbreN6PW_DgEQqKF4Ve5hMqR0.mft
Manifest number:          188B
Signing time:             Thu 26 Mar 2026 18:00:40 +0000
Manifest this update:     Thu 26 Mar 2026 18:00:40 +0000
Manifest next update:     Fri 27 Mar 2026 18:00:40 +0000
Files and hashes:         1: OyLfbjr156VI2R6lu1s2sko4xuQ.roa (hash: wsr92dwS2psbt7DS2shBW+KX6UaQH5WPGbSf3r4UrZg=)
                          2: dVNbreN6PW_DgEQqKF4Ve5hMqR0.crl (hash: L4GbsQfdFECoK85brB+82XPC/S2biNF7i51h4eBJjPI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/dVNbreN6PW_DgEQqKF4Ve5hMqR0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/dVNbreN6PW_DgEQqKF4Ve5hMqR0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dVNbreN6PW_DgEQqKF4Ve5hMqR0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:32:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2b:4e:3b:db:04:02:f0:b2:df:fb:23:c4:c1:6e:cf:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75535bade37a3d6fc380442a285e157b984ca91d
        Validity
            Not Before: Mar 26 18:00:40 2026 GMT
            Not After : Mar 27 18:00:40 2026 GMT
        Subject: CN=6b28180412bea632d42355a9d337ae6febb64dba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:73:80:41:2c:6b:cc:4f:45:74:0a:e5:e0:9c:
                    21:bf:43:76:9e:a6:41:cc:8f:a2:fb:2a:90:c0:cf:
                    e2:b9:25:34:e2:52:0a:b3:72:ee:dc:e0:c3:87:5d:
                    f8:e1:62:0d:68:0e:0a:fb:ac:d6:a2:70:ee:47:7b:
                    de:5c:26:1d:a4:c4:32:23:8f:ae:ff:01:e9:ae:e2:
                    42:e2:4f:65:81:12:63:73:18:15:58:ce:79:45:d5:
                    6b:ea:08:87:18:50:fc:f8:c6:a0:c7:fa:4f:d4:9e:
                    9b:07:47:17:7c:04:8f:b8:cc:47:35:35:d3:db:b9:
                    09:e0:8a:6c:97:b6:c8:c4:48:ea:e9:ff:83:ce:da:
                    6e:e8:e1:2c:92:64:a8:6c:05:67:fb:f1:82:d0:03:
                    ad:1f:d1:6c:1a:04:ce:fc:16:28:7d:a7:0a:34:89:
                    39:0a:22:48:3a:1c:36:05:34:cc:dd:66:1e:98:65:
                    87:24:aa:6b:64:c3:9f:41:5d:80:9c:ef:06:32:bd:
                    39:73:98:68:cc:2a:be:e8:84:66:f7:2d:90:26:c8:
                    f8:e7:f0:fa:9a:f2:5d:e2:f3:b5:fc:a4:45:ee:7c:
                    72:22:ab:97:21:ef:6a:99:3f:42:46:65:8f:68:c2:
                    91:dc:0a:7c:03:0b:33:01:6d:1c:17:46:11:52:bb:
                    0a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:28:18:04:12:BE:A6:32:D4:23:55:A9:D3:37:AE:6F:EB:B6:4D:BA
            X509v3 Authority Key Identifier:
                keyid:75:53:5B:AD:E3:7A:3D:6F:C3:80:44:2A:28:5E:15:7B:98:4C:A9:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVNbreN6PW_DgEQqKF4Ve5hMqR0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/dVNbreN6PW_DgEQqKF4Ve5hMqR0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/dVNbreN6PW_DgEQqKF4Ve5hMqR0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:6c:b2:62:f3:54:9b:6f:8f:a4:5e:4c:b5:ae:5e:ab:d4:dd:
         95:90:97:3c:b3:f3:ec:2e:ee:0a:74:5d:d7:7a:6e:8d:fb:e9:
         1a:37:a0:7b:3b:69:27:2f:e8:16:3a:91:dd:b6:9e:2c:5d:be:
         25:37:62:a2:5b:98:4f:e6:bf:a5:da:f9:7b:da:7b:06:07:4e:
         94:17:b7:1f:c8:21:df:7a:d7:5d:df:c6:46:db:c3:65:7a:66:
         79:fa:ab:19:d9:2e:34:0d:7d:1f:f3:e0:cc:af:e9:d8:1c:4d:
         c1:7e:f1:ec:42:ec:01:3c:dc:11:41:38:c6:a4:8d:11:c5:4c:
         2d:bb:85:00:58:45:74:ac:d7:ed:d4:89:e9:59:de:ea:84:e8:
         17:53:c4:b1:6f:66:fa:36:f2:9a:fc:32:94:c4:0b:8f:a2:98:
         ab:83:cb:83:90:2d:71:71:17:94:d8:a7:99:07:22:f8:19:ea:
         66:54:92:71:86:8b:25:29:82:42:bd:e1:52:f2:4c:1c:de:c1:
         4c:5d:b5:ba:0b:3a:2c:12:ac:1e:60:3e:09:61:d3:e5:4c:70:
         04:d6:8f:e2:c7:27:84:b9:0e:e4:18:20:db:58:fb:40:04:fa:
         0d:ba:4d:9f:8e:e6:8e:16:3a:ea:e4:36:dc:ba:2f:92:8d:50:
         df:12:58:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:35:33 2026 by rpki-client