Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/408667-0b39-4da0-9aa0-3cc11bc9d594/1/0AumM_HpgkB20WGpg9i46IEmOYI.mft
File:                     0AumM_HpgkB20WGpg9i46IEmOYI.mft (raw, json)
Hash identifier:          occ3y6G8ujh9/yVwcRyBimEl0qfeinFMfE1Oi13gzU0=
Subject key identifier:   47:D4:EB:77:07:3A:05:C4:B8:57:E8:B6:85:09:5F:BC:E7:2F:AB:86
Authority key identifier: D0:0B:A6:33:F1:E9:82:40:76:D1:61:A9:83:D8:B8:E8:81:26:39:82
Certificate issuer:       /CN=d00ba633f1e9824076d161a983d8b8e881263982
Certificate serial:       019D2928F1022503B953A753D2850B9574D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0AumM_HpgkB20WGpg9i46IEmOYI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/408667-0b39-4da0-9aa0-3cc11bc9d594/1/0AumM_HpgkB20WGpg9i46IEmOYI.mft
Manifest number:          188A
Signing time:             Thu 26 Mar 2026 08:00:42 +0000
Manifest this update:     Thu 26 Mar 2026 08:00:42 +0000
Manifest next update:     Fri 27 Mar 2026 08:00:42 +0000
Files and hashes:         1: 0AumM_HpgkB20WGpg9i46IEmOYI.crl (hash: 2Sm702gz5MzZQOfAxduCT+b3YVDpbIdwQCSwF0XKyMk=)
                          2: ISlu2yBKOiwYiK7qUKEsRGH2kzo.roa (hash: 4RnBkIb7B8coxfzF6I8zgcJVOP7X3HVqDAGpERLc3lw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/408667-0b39-4da0-9aa0-3cc11bc9d594/1/0AumM_HpgkB20WGpg9i46IEmOYI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/408667-0b39-4da0-9aa0-3cc11bc9d594/1/0AumM_HpgkB20WGpg9i46IEmOYI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0AumM_HpgkB20WGpg9i46IEmOYI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:28:f1:02:25:03:b9:53:a7:53:d2:85:0b:95:74:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d00ba633f1e9824076d161a983d8b8e881263982
        Validity
            Not Before: Mar 26 08:00:42 2026 GMT
            Not After : Mar 27 08:00:42 2026 GMT
        Subject: CN=47d4eb77073a05c4b857e8b685095fbce72fab86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:cf:2b:58:a8:ab:45:42:e6:c3:02:55:79:f8:
                    25:60:f6:e0:61:1d:31:97:0c:68:39:2e:67:30:08:
                    60:3b:09:56:e3:27:28:fc:e8:db:c6:84:3c:8e:d5:
                    e8:a9:dd:75:60:99:d9:45:cb:66:d1:d2:7b:ff:91:
                    4f:a0:d6:c4:ce:2c:99:e8:01:2c:a4:14:5c:51:15:
                    74:8c:65:91:97:a4:c8:16:f7:72:f9:e9:fd:f3:ec:
                    69:98:04:31:54:f5:14:0b:81:a1:f5:77:a8:6c:b5:
                    4a:b3:57:cf:64:4c:d9:ca:95:da:8d:cb:c3:4d:a2:
                    96:07:8c:7e:e7:29:2e:14:8f:1b:b6:97:e1:eb:98:
                    f6:c5:96:c4:ea:aa:ef:f3:66:28:fa:44:20:86:5f:
                    64:98:57:3e:ba:51:25:28:15:61:73:fa:d8:27:fc:
                    f8:fa:97:11:04:7e:71:3a:99:55:f0:40:23:de:02:
                    07:3c:36:cd:92:e9:e2:f3:05:b1:80:92:20:5a:54:
                    7c:d9:eb:48:73:f8:e1:3c:f0:ee:7a:0a:5e:f7:61:
                    a4:6b:ce:e2:da:84:c8:59:39:aa:93:19:f5:65:53:
                    33:7a:29:57:90:70:c2:12:d8:b3:2b:25:81:c0:dd:
                    eb:5c:15:a8:b5:20:0b:e6:29:19:b4:48:d4:b2:37:
                    08:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:D4:EB:77:07:3A:05:C4:B8:57:E8:B6:85:09:5F:BC:E7:2F:AB:86
            X509v3 Authority Key Identifier:
                keyid:D0:0B:A6:33:F1:E9:82:40:76:D1:61:A9:83:D8:B8:E8:81:26:39:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AumM_HpgkB20WGpg9i46IEmOYI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/408667-0b39-4da0-9aa0-3cc11bc9d594/1/0AumM_HpgkB20WGpg9i46IEmOYI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/408667-0b39-4da0-9aa0-3cc11bc9d594/1/0AumM_HpgkB20WGpg9i46IEmOYI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:ae:cb:2b:7e:4d:eb:37:e9:d6:ea:06:bd:12:f1:22:25:ab:
         66:3f:bd:93:5b:30:79:5b:df:5f:09:98:c6:24:4f:e2:c6:93:
         1e:5a:f8:39:97:65:cc:66:7e:27:9b:37:6d:3e:61:70:36:72:
         11:8d:87:af:2d:c9:be:4b:ef:77:91:16:e3:0b:e1:2a:f4:0c:
         23:f2:d2:e3:a5:67:26:47:3b:38:d2:4c:1e:9f:4c:dc:c0:03:
         73:c9:0d:31:cf:a8:a4:95:8a:bd:7b:64:12:e3:4d:0c:8f:d3:
         d4:68:10:cb:76:35:a4:ec:70:dc:86:b5:cd:59:c0:cf:30:97:
         41:f9:17:b5:28:1c:c6:39:65:8c:5b:c3:c6:b3:0b:8d:a0:42:
         95:2d:46:93:ff:44:1c:0f:05:e5:49:cd:f0:7a:c6:76:5c:51:
         4b:29:bd:25:42:1e:7f:69:f4:be:d0:53:83:66:84:5c:57:8d:
         57:0c:3f:53:96:a9:34:b8:79:ed:bc:19:b2:e7:13:48:41:8a:
         4d:7f:a5:99:c7:cc:f2:19:c0:16:e5:0e:43:f3:22:40:1d:5b:
         57:3c:e3:ee:d2:cc:04:b8:a1:70:a7:92:6c:73:5c:02:b5:d8:
         52:b2:c6:b5:39:91:73:06:b7:9d:10:c0:c6:42:e5:19:4f:17:
         5b:7b:a2:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:12:01 2026 by rpki-client