Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.mft
File:                     iH6BuoQ0RZjGFGKDOq3zIE6uCHw.mft (raw, json)
Hash identifier:          nzsTZ7f5UlB7fE4QnQ2+LubGcXOWxBIaJxpjeFnuzqY=
Subject key identifier:   96:F6:B0:41:D6:F9:EF:49:FB:CB:BA:B0:12:02:E7:3A:EA:20:E2:8E
Authority key identifier: 88:7E:81:BA:84:34:45:98:C6:14:62:83:3A:AD:F3:20:4E:AE:08:7C
Certificate issuer:       /CN=887e81ba84344598c61462833aadf3204eae087c
Certificate serial:       019D2772E0FAE227E99B6FE001DE32189039
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.mft
Manifest number:          188D
Signing time:             Thu 26 Mar 2026 00:02:13 +0000
Manifest this update:     Thu 26 Mar 2026 00:02:13 +0000
Manifest next update:     Fri 27 Mar 2026 00:02:13 +0000
Files and hashes:         1: 1-31Qdpidhxq3xowdRMl7OHQzMLs.roa (hash: oI7KFd2CFmvACdhWk+lCI6kk2+KzSDbEVQ5Q/GClnlA=)
                          2: WrX7SpElIvxm2JSwON41PMyuiBw.roa (hash: veKhilt8GIBABvA7UBWxe+++Nd8y9DAgj8iYUCvKPKw=)
                          3: cdbequdWz-xAkJleNGiLDk_Jz3M.roa (hash: HI+pTuLCHVDyiJQKC1oiE5CPWcrcJlPJsbkgYVNmobE=)
                          4: iH6BuoQ0RZjGFGKDOq3zIE6uCHw.crl (hash: deyqAECqotbjQsD4MCI7V9nvTgK7iI1hFuMKoOIoztc=)
                          5: skOBNp-MqDUEJE5rJDVczMRWsSQ.roa (hash: ptsmt66Y1LL2J3u0hqrRJ5WLcMHSX/QUwEl4kYw0eCM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:72:e0:fa:e2:27:e9:9b:6f:e0:01:de:32:18:90:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=887e81ba84344598c61462833aadf3204eae087c
        Validity
            Not Before: Mar 26 00:02:13 2026 GMT
            Not After : Mar 27 00:02:13 2026 GMT
        Subject: CN=96f6b041d6f9ef49fbcbbab01202e73aea20e28e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ec:72:1d:53:48:be:d9:8a:69:93:2f:30:a3:
                    1c:10:06:34:3f:8a:73:73:a2:0d:60:a2:be:d5:d1:
                    63:94:b4:fb:dd:ad:15:cf:a6:96:72:ab:cf:71:ce:
                    e3:53:3d:df:29:31:5f:aa:e5:93:f7:37:c5:06:ec:
                    d2:fd:1e:aa:eb:d4:22:6d:f5:a1:6c:6d:eb:69:92:
                    0a:0c:b4:d1:25:9d:24:60:c5:cb:6c:84:8f:63:9d:
                    de:99:19:82:44:b8:0b:64:f6:ba:f7:df:b7:25:71:
                    4d:9a:60:f2:70:92:9e:ec:9e:34:22:79:33:3a:6c:
                    97:49:db:39:f5:a9:00:61:58:62:bb:7b:70:16:ba:
                    56:75:4c:e8:be:a1:73:66:c4:91:bb:ef:45:00:60:
                    82:10:1c:70:05:d5:e7:f3:77:72:a6:44:61:f1:2c:
                    9d:31:f1:37:c8:82:0a:44:f3:74:c7:f1:b5:a7:fd:
                    f8:53:04:33:2a:2c:16:8d:9c:2d:a6:b5:07:a4:42:
                    a5:7c:83:b4:37:1d:a4:1c:c8:bd:3f:8c:cf:53:89:
                    c5:c5:b7:aa:60:52:6c:85:ef:ba:d4:9b:d8:56:1a:
                    56:9e:04:af:e9:d8:c1:d7:61:e6:e8:82:6d:62:fd:
                    3c:32:f2:26:29:33:5a:98:06:86:4c:7f:3f:cb:df:
                    1c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:F6:B0:41:D6:F9:EF:49:FB:CB:BA:B0:12:02:E7:3A:EA:20:E2:8E
            X509v3 Authority Key Identifier:
                keyid:88:7E:81:BA:84:34:45:98:C6:14:62:83:3A:AD:F3:20:4E:AE:08:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:40:3f:7f:ab:ae:7b:fb:a5:b8:1e:91:17:64:73:c6:94:cb:
         83:61:83:91:63:28:a6:95:2b:6d:26:86:b9:16:b2:96:ad:87:
         9b:97:bc:0f:bd:9d:0c:1c:8e:18:cf:50:2d:89:22:be:fa:1b:
         67:85:08:8d:df:64:8a:2a:51:b0:d7:72:5e:ef:6c:45:54:3e:
         11:81:b3:1a:1f:a8:26:73:2c:c7:b8:e3:90:58:d4:d3:25:55:
         ce:8f:52:48:3b:10:a0:5d:2e:c0:ab:2e:0e:62:d7:8f:3a:f7:
         23:1a:a1:fd:10:34:06:69:ed:40:7a:1f:6b:03:be:2a:ec:f4:
         73:6b:db:89:31:4c:b5:b1:1e:38:4b:d4:6c:85:65:95:cc:0f:
         08:2d:e3:b3:e9:78:29:b5:6e:b4:60:bd:1b:f3:fc:7a:5c:0e:
         af:1c:eb:11:12:bb:90:4d:8c:90:aa:14:f1:a2:72:02:be:53:
         99:aa:24:2c:03:55:02:f6:ce:e0:f8:c4:3c:55:ed:a7:39:99:
         f6:3a:d3:c9:e0:de:79:2a:e0:bb:db:7c:6c:5b:97:0f:13:bf:
         5f:41:62:34:34:f4:b1:72:8f:80:1f:06:8c:6a:99:e9:16:6f:
         74:7e:87:40:75:31:75:ba:f6:bf:90:00:5d:96:b4:1e:8a:9f:
         71:44:fd:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:43 2026 by rpki-client