Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/caa2b6-87e8-4e24-a446-775888a87194/1/MUTmCeNhkT48Owp410hqpFtWJAE.mft
File:                     MUTmCeNhkT48Owp410hqpFtWJAE.mft (raw, json)
Hash identifier:          mJ4dTtsiTHT7bMtIt8KiUZbY/1R72Xcub1COTwAv0rc=
Subject key identifier:   FC:2D:8F:F4:F4:4E:A1:E6:3C:AE:EB:3A:F4:26:5E:8C:57:68:38:5C
Authority key identifier: 31:44:E6:09:E3:61:91:3E:3C:3B:0A:78:D7:48:6A:A4:5B:56:24:01
Certificate issuer:       /CN=3144e609e361913e3c3b0a78d7486aa45b562401
Certificate serial:       019D26CCF5D0D138C030330B7C2BD083F987
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MUTmCeNhkT48Owp410hqpFtWJAE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/caa2b6-87e8-4e24-a446-775888a87194/1/MUTmCeNhkT48Owp410hqpFtWJAE.mft
Manifest number:          188B
Signing time:             Wed 25 Mar 2026 21:00:59 +0000
Manifest this update:     Wed 25 Mar 2026 21:00:59 +0000
Manifest next update:     Thu 26 Mar 2026 21:00:59 +0000
Files and hashes:         1: 0Zg1a68UKbWsfvNx4_nOvwQjlHE.roa (hash: xnnBnLC8oEfPm/E3FQ16BwfRntk327nMGFYeLCzND7Q=)
                          2: MUTmCeNhkT48Owp410hqpFtWJAE.crl (hash: NikQ0+JmKT8AphfX9FmHdMNlzwh0HfLmqiG7/vz/aP4=)
                          3: W5Xdoga3NFWo-Xc3XHPMUJuNEIg.roa (hash: DTjDuxaokaB0r1dJ8TGvv232F7fD0NtJNnhl3B2Xe5M=)
                          4: WM_CkksfpxlOvbVfJ29q-PM94R0.roa (hash: ieRO0VQfX3WMm1FhYHOk166k7TlopH7iRCo/7Z4383I=)
                          5: Wz032Yr9kwGtmGuvyC0zl5b3Wmg.roa (hash: jV+3sVp3mLbJQdrmFOu9CWbBqs0T7JVmuS6G2Tcf2s8=)
                          6: aixU7aQWTrYUDZ_F5DQxr3cy9Xg.roa (hash: MJOY7R7UjuAWICgAMNQpzd46IDtpI4a+2RiBB2nc6WA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/caa2b6-87e8-4e24-a446-775888a87194/1/MUTmCeNhkT48Owp410hqpFtWJAE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/caa2b6-87e8-4e24-a446-775888a87194/1/MUTmCeNhkT48Owp410hqpFtWJAE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MUTmCeNhkT48Owp410hqpFtWJAE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 21:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:cc:f5:d0:d1:38:c0:30:33:0b:7c:2b:d0:83:f9:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3144e609e361913e3c3b0a78d7486aa45b562401
        Validity
            Not Before: Mar 25 21:00:59 2026 GMT
            Not After : Mar 26 21:00:59 2026 GMT
        Subject: CN=fc2d8ff4f44ea1e63caeeb3af4265e8c5768385c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:6b:50:b0:16:5a:20:34:0d:0a:11:14:7e:1a:
                    06:65:54:01:b3:c8:ac:99:9e:96:db:52:a7:88:50:
                    1c:60:ef:c0:42:e6:5d:8e:1a:2d:26:46:22:47:7e:
                    15:e2:ee:cc:23:71:c8:eb:25:53:6b:a1:b7:59:e1:
                    fd:f1:e1:36:af:8b:bf:8c:f9:c2:eb:4d:fb:a3:66:
                    49:fa:a8:b0:58:a1:21:1a:b6:97:c7:7b:0f:f8:b2:
                    6a:c6:a9:08:e6:d5:0e:10:2b:86:7d:38:19:ec:e1:
                    1a:e2:65:68:d5:73:4b:c8:5f:67:89:a9:1a:e3:2d:
                    07:1c:27:24:d1:b4:ca:72:e8:57:4a:d2:f7:22:23:
                    ad:b8:1c:99:cd:15:d9:1c:ca:09:66:1f:e5:07:64:
                    a3:fd:f4:28:4a:1b:f7:4a:48:26:a9:1a:75:a2:ad:
                    66:94:ba:5e:57:c4:7e:a2:6b:a7:f8:f6:7a:5f:af:
                    d0:09:ef:cd:36:1b:74:a5:6b:73:60:9a:00:4d:ef:
                    1d:11:25:58:d4:1f:90:fe:c8:33:31:1c:c3:1e:ca:
                    86:e9:35:fe:33:88:a7:e2:be:f0:62:13:49:9b:eb:
                    84:8a:32:97:bb:cb:db:2b:99:b5:48:4d:0e:cd:e2:
                    ad:67:b3:49:8f:9a:57:2f:8e:58:02:f2:9b:a9:9a:
                    5a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:2D:8F:F4:F4:4E:A1:E6:3C:AE:EB:3A:F4:26:5E:8C:57:68:38:5C
            X509v3 Authority Key Identifier:
                keyid:31:44:E6:09:E3:61:91:3E:3C:3B:0A:78:D7:48:6A:A4:5B:56:24:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MUTmCeNhkT48Owp410hqpFtWJAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/caa2b6-87e8-4e24-a446-775888a87194/1/MUTmCeNhkT48Owp410hqpFtWJAE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/caa2b6-87e8-4e24-a446-775888a87194/1/MUTmCeNhkT48Owp410hqpFtWJAE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:c0:eb:04:3f:be:22:40:88:c8:38:a6:d1:b1:5b:5e:5b:b9:
         9a:c6:8e:dc:09:5a:ac:e9:12:19:8c:d5:4d:9c:ab:60:72:bc:
         35:39:cd:4f:ee:53:b7:31:15:7d:0c:95:bd:03:9c:05:fb:46:
         2a:c3:05:82:48:ea:4a:7f:56:e3:7d:20:2c:3b:ad:8a:89:d3:
         4f:6d:86:bb:c3:cb:f3:28:00:c5:de:08:19:35:cf:33:a3:ff:
         87:cc:3b:b5:51:f0:da:a6:56:86:4a:d0:64:8d:97:5c:eb:50:
         83:46:3a:db:16:90:47:bf:bd:8e:c1:8f:10:04:6e:94:fa:70:
         ef:55:39:3c:35:0b:51:7c:65:4b:44:2a:58:b2:2b:dc:70:ea:
         ed:04:56:21:c2:04:52:e0:ab:d5:fc:ba:b0:a7:57:db:fe:17:
         60:14:a5:d3:62:32:27:d4:f1:56:f8:ba:fa:4a:fc:99:a2:54:
         c8:60:26:e5:f9:69:27:66:7b:44:c7:0a:aa:71:0b:03:87:e6:
         86:e5:6c:a0:cc:cd:47:10:12:23:cd:d7:6b:eb:8f:f1:8a:a4:
         15:07:24:91:ac:22:35:d3:94:ea:11:e7:35:cc:2d:76:5d:d0:
         d4:26:0f:56:e8:7f:8c:ef:28:d8:4c:bc:9c:f0:b8:6d:f0:e5:
         2a:ed:29:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:35:20 2026 by rpki-client