Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/cdf2d7-b11e-47b2-9fc9-79091c78ab48/1/fiwMzx_7_NuLYdc4IBMBuHkRhOg.mft
File:                     fiwMzx_7_NuLYdc4IBMBuHkRhOg.mft (raw, json)
Hash identifier:          PtLEQJZZRM/c2s7HGKLG7hWFGPXGmX5EpMxREu0e7yw=
Subject key identifier:   98:6D:67:12:7F:40:F9:BF:05:71:DC:3D:9C:AB:A1:6D:62:1B:D9:A4
Authority key identifier: 7E:2C:0C:CF:1F:FB:FC:DB:8B:61:D7:38:20:13:01:B8:79:11:84:E8
Certificate issuer:       /CN=7e2c0ccf1ffbfcdb8b61d738201301b8791184e8
Certificate serial:       019D28BBC234EE7D594D2060F4CA8BE92AF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fiwMzx_7_NuLYdc4IBMBuHkRhOg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/cdf2d7-b11e-47b2-9fc9-79091c78ab48/1/fiwMzx_7_NuLYdc4IBMBuHkRhOg.mft
Manifest number:          188D
Signing time:             Thu 26 Mar 2026 06:01:26 +0000
Manifest this update:     Thu 26 Mar 2026 06:01:26 +0000
Manifest next update:     Fri 27 Mar 2026 06:01:26 +0000
Files and hashes:         1: SyvcLoMJBVEB7iZEVVSI4w09qMY.roa (hash: vWcRiRobzdcq81mizM+XDiAWe0DXo/9Gwg2vzwm2T0w=)
                          2: fiwMzx_7_NuLYdc4IBMBuHkRhOg.crl (hash: uAgUStH31PIS/916QVfKR6on4XClO8uAfCuRCIbWYXM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/cdf2d7-b11e-47b2-9fc9-79091c78ab48/1/fiwMzx_7_NuLYdc4IBMBuHkRhOg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/cdf2d7-b11e-47b2-9fc9-79091c78ab48/1/fiwMzx_7_NuLYdc4IBMBuHkRhOg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fiwMzx_7_NuLYdc4IBMBuHkRhOg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 06:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:bb:c2:34:ee:7d:59:4d:20:60:f4:ca:8b:e9:2a:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e2c0ccf1ffbfcdb8b61d738201301b8791184e8
        Validity
            Not Before: Mar 26 06:01:26 2026 GMT
            Not After : Mar 27 06:01:26 2026 GMT
        Subject: CN=986d67127f40f9bf0571dc3d9caba16d621bd9a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:89:4c:8d:b6:b9:92:35:f5:0f:29:e8:72:85:
                    0d:7d:58:e4:08:13:4a:c8:50:95:08:66:f7:29:25:
                    e7:5c:99:68:5b:48:96:75:2a:a1:e2:16:58:fb:8c:
                    46:5f:1b:a2:68:82:be:b6:5b:90:c1:25:35:5d:da:
                    ac:5c:87:39:66:99:25:a5:51:f0:30:c6:ce:1d:89:
                    65:bf:8f:b5:6d:5e:62:c2:a7:0b:63:83:62:a5:b0:
                    21:56:ae:5f:27:8a:50:af:44:fb:02:23:c1:02:d4:
                    4f:19:c3:b7:bd:0d:56:6e:0f:27:f6:fa:33:03:e1:
                    54:2e:58:ab:26:a5:41:d6:44:91:22:fa:fa:62:08:
                    a8:86:e0:8f:dd:ed:4f:8c:48:ec:73:58:c4:74:4d:
                    0c:d3:b0:f6:87:ec:63:40:72:02:ff:32:e3:46:cf:
                    d7:32:01:51:6e:f8:04:ea:fb:a5:7a:f6:1d:02:c8:
                    39:11:4c:5f:94:e4:ab:f7:cb:dd:1b:a9:54:8b:e8:
                    2e:ad:7f:03:d9:4c:54:8c:95:7b:bf:80:d4:cb:71:
                    6b:ad:5f:ed:f0:ee:66:3d:fe:e0:a5:0e:bd:3e:a9:
                    fd:41:10:27:d2:67:3e:b9:98:f6:20:d3:c6:8a:0e:
                    61:71:89:ca:39:33:83:e3:ca:7f:de:3e:37:65:ce:
                    8b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:6D:67:12:7F:40:F9:BF:05:71:DC:3D:9C:AB:A1:6D:62:1B:D9:A4
            X509v3 Authority Key Identifier:
                keyid:7E:2C:0C:CF:1F:FB:FC:DB:8B:61:D7:38:20:13:01:B8:79:11:84:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiwMzx_7_NuLYdc4IBMBuHkRhOg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/cdf2d7-b11e-47b2-9fc9-79091c78ab48/1/fiwMzx_7_NuLYdc4IBMBuHkRhOg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/cdf2d7-b11e-47b2-9fc9-79091c78ab48/1/fiwMzx_7_NuLYdc4IBMBuHkRhOg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:65:26:17:58:57:08:31:fc:65:fb:7b:bf:d5:90:bf:50:4c:
         a1:f0:43:fb:e8:48:23:ba:01:dc:32:a8:b7:f1:1d:87:8c:b5:
         80:b1:13:13:04:5d:e5:6a:cf:a1:61:c8:e4:15:c3:0a:ac:df:
         a0:86:1e:3e:c7:8a:76:63:0b:7c:5b:2d:86:0f:79:6f:65:0b:
         83:06:25:da:27:97:6e:fb:39:77:2e:8f:45:93:4b:65:b4:89:
         21:b0:16:66:d8:88:77:20:0e:b4:3f:e5:6f:33:77:81:2a:08:
         df:72:a7:fd:fb:5f:54:a5:7c:a0:a0:08:ab:86:29:40:e1:42:
         0b:88:66:87:22:b2:8e:fe:94:51:5f:32:a9:da:e8:ac:43:99:
         b1:2f:a7:5b:7d:5f:08:c0:8f:f8:28:39:22:80:d2:25:cd:e2:
         9a:c8:90:63:85:9c:ca:90:b0:c1:8a:64:75:3d:d5:ee:ca:c2:
         1a:5b:d8:8c:0a:99:ff:bc:4f:88:84:ae:6e:59:45:44:a2:fb:
         96:6b:5d:9d:76:01:0e:51:78:0d:6c:60:0c:f5:0b:bd:e6:f8:
         d4:9e:06:89:ca:15:15:dd:d8:71:93:42:13:7f:26:50:62:fc:
         8b:84:4b:2c:f0:8c:78:f2:24:d8:b7:7d:ea:99:a0:a6:4b:2a:
         c4:ba:2a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:48:37 2026 by rpki-client