Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/44f5d2-b70e-4dae-82e3-1e4782be6445/1/227_c-__gSd8LV048ORtbRKnCNc.mft
File:                     227_c-__gSd8LV048ORtbRKnCNc.mft (raw, json)
Hash identifier:          uTQ1XfSzSJq8LN1VwEth0tEb59q/SQbCpOxsdcAe3Kc=
Subject key identifier:   53:ED:5A:2E:DC:D8:8A:CB:61:E6:D0:72:1A:A5:D1:B4:16:7D:88:55
Authority key identifier: DB:6E:FF:73:EF:FF:81:27:7C:2D:5D:38:F0:E4:6D:6D:12:A7:08:D7
Certificate issuer:       /CN=db6eff73efff81277c2d5d38f0e46d6d12a708d7
Certificate serial:       019D2CCEEE372CE3499266CD705947519E0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/227_c-__gSd8LV048ORtbRKnCNc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/44f5d2-b70e-4dae-82e3-1e4782be6445/1/227_c-__gSd8LV048ORtbRKnCNc.mft
Manifest number:          188A
Signing time:             Fri 27 Mar 2026 01:00:51 +0000
Manifest this update:     Fri 27 Mar 2026 01:00:51 +0000
Manifest next update:     Sat 28 Mar 2026 01:00:51 +0000
Files and hashes:         1: 227_c-__gSd8LV048ORtbRKnCNc.crl (hash: jrmoweY50evRkCGg2b21DHBUXwuWYORKStokvjMFMjM=)
                          2: xNT50RAyDxcML2FHARCowN-B2yY.roa (hash: uwYuoU/4PVFSmUYkXiyzHxMpNvfb8CgDItUlXunmtks=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/44f5d2-b70e-4dae-82e3-1e4782be6445/1/227_c-__gSd8LV048ORtbRKnCNc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/44f5d2-b70e-4dae-82e3-1e4782be6445/1/227_c-__gSd8LV048ORtbRKnCNc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/227_c-__gSd8LV048ORtbRKnCNc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:56:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2c:ce:ee:37:2c:e3:49:92:66:cd:70:59:47:51:9e:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db6eff73efff81277c2d5d38f0e46d6d12a708d7
        Validity
            Not Before: Mar 27 01:00:51 2026 GMT
            Not After : Mar 28 01:00:51 2026 GMT
        Subject: CN=53ed5a2edcd88acb61e6d0721aa5d1b4167d8855
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e1:73:b3:1b:c1:89:ba:2f:e6:22:63:d8:ba:
                    b6:97:0c:1c:28:56:3f:00:ed:fa:2e:c4:7d:58:74:
                    00:6c:31:1d:66:cb:75:56:dc:8a:6a:3a:13:e6:3b:
                    ea:b4:3a:e5:bd:f9:44:cf:c6:12:46:7b:3f:94:61:
                    9f:f5:8e:43:69:98:3d:7a:c2:ff:38:c0:7b:26:89:
                    72:b9:6e:a8:1b:a4:ae:2d:31:29:fc:ae:9a:c8:27:
                    b9:3e:3a:69:b9:c1:71:14:28:32:78:84:69:4b:af:
                    e6:58:62:af:de:ef:0b:bc:82:b6:fb:ce:8f:9f:38:
                    a0:59:99:92:00:a1:3a:4d:ad:7e:99:1a:10:c7:81:
                    5d:33:0f:d0:fe:a7:99:29:ef:89:74:21:4b:83:eb:
                    5b:47:c9:e9:01:af:e9:56:27:92:ad:ab:f8:93:c0:
                    d1:42:79:60:60:9a:ac:29:23:89:a6:9a:3a:4b:d6:
                    4a:39:7f:e5:2f:c9:43:f6:9a:c2:30:fa:0f:b2:0e:
                    16:be:8f:4f:5a:3c:7b:a6:5d:0f:10:64:c6:35:5b:
                    5a:d2:bd:b8:3d:fa:c3:3e:84:47:cb:50:c6:af:a1:
                    03:f0:fc:56:c8:16:37:22:59:af:0f:8e:bf:e7:57:
                    74:d7:20:7d:9d:82:8b:eb:00:7e:cc:78:79:0b:57:
                    2d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:ED:5A:2E:DC:D8:8A:CB:61:E6:D0:72:1A:A5:D1:B4:16:7D:88:55
            X509v3 Authority Key Identifier:
                keyid:DB:6E:FF:73:EF:FF:81:27:7C:2D:5D:38:F0:E4:6D:6D:12:A7:08:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/227_c-__gSd8LV048ORtbRKnCNc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/44f5d2-b70e-4dae-82e3-1e4782be6445/1/227_c-__gSd8LV048ORtbRKnCNc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/44f5d2-b70e-4dae-82e3-1e4782be6445/1/227_c-__gSd8LV048ORtbRKnCNc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:6e:03:b8:d5:21:e1:46:6f:02:00:c8:5f:98:40:43:96:47:
         b8:fd:95:4a:91:ab:09:1f:94:e9:be:97:f1:f4:b3:40:75:f7:
         67:53:72:1a:1d:35:77:ba:71:ae:4d:ab:56:c4:db:f4:ac:77:
         e7:38:b8:f0:e9:60:ba:02:7f:3d:bc:45:d2:5c:87:75:20:9a:
         13:ba:0c:3c:8e:0d:1e:c8:a1:65:21:8b:2e:ab:fb:f7:e4:c0:
         74:1e:47:95:8d:f2:ac:83:3f:b6:d3:cb:5d:f2:3f:37:3e:20:
         e5:33:ef:c5:88:83:6c:0d:d2:a0:4e:10:38:ab:9b:a9:1a:6a:
         6e:69:48:36:fe:b0:c4:7b:60:b7:1c:3d:13:0a:da:0a:5e:7d:
         29:5e:f6:ed:e7:e1:a0:8d:62:b6:b3:ad:27:01:04:fd:9d:26:
         32:01:7f:6c:23:39:a4:5c:b4:73:6d:a4:24:75:1a:ad:c3:5e:
         3f:49:45:0e:e1:ba:d9:f7:fb:49:70:cd:bc:a4:aa:62:d8:99:
         93:4c:eb:e1:e3:bf:1b:41:4c:c0:fe:3f:88:84:dd:6a:59:b7:
         f7:7d:4d:0e:90:f1:be:ab:50:7c:fa:0e:2a:f2:4f:f0:dc:d8:
         cb:e3:30:39:6a:ef:cf:bc:1d:39:ae:cd:f9:aa:e0:f4:b8:2d:
         99:a6:41:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 04:45:53 2026 by rpki-client