Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/936806-bb6d-45f3-8837-c50734d020f0/1/aqb54-JiKngVolnljVUkOcJVoxs.mft
File:                     aqb54-JiKngVolnljVUkOcJVoxs.mft (raw, json)
Hash identifier:          Ac96Qdu+QEV2hHYet5c8mRPS2rA04ifWHlUo/n+r+1Y=
Subject key identifier:   F9:A1:8F:6C:B9:FF:03:04:0F:A2:83:9A:78:F4:33:28:28:C9:63:3E
Authority key identifier: 6A:A6:F9:E3:E2:62:2A:78:15:A2:59:E5:8D:55:24:39:C2:55:A3:1B
Certificate issuer:       /CN=6aa6f9e3e2622a7815a259e58d552439c255a31b
Certificate serial:       019D292941D916458513A1DAC0CF59C6DFC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aqb54-JiKngVolnljVUkOcJVoxs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/936806-bb6d-45f3-8837-c50734d020f0/1/aqb54-JiKngVolnljVUkOcJVoxs.mft
Manifest number:          188C
Signing time:             Thu 26 Mar 2026 08:01:02 +0000
Manifest this update:     Thu 26 Mar 2026 08:01:02 +0000
Manifest next update:     Fri 27 Mar 2026 08:01:02 +0000
Files and hashes:         1: CN6EXSiFw5QSIshsUFF4IHVqqoo.roa (hash: hpI75KnlbJC0wwYzc+gWN1gE3ImkLqA31jIBmq06I9w=)
                          2: IKsaSv5WbGQp-IZQdBzI2DlILNc.roa (hash: gbpIt6mebnTkZL27KKmJpAj3jmjIS87m4pvl+MU+r/0=)
                          3: aqb54-JiKngVolnljVUkOcJVoxs.crl (hash: ks/6PfkgogPydzp6y7HEB1rlXDW3C3OBVAOMxP24fOI=)
                          4: tI5rZ2OkW-tqnmPYZ_XEde1g-_c.roa (hash: wfc7uwTsNdE3QVJnENIdl7HtSGoVTLNa8OFvwh5hQ/o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/936806-bb6d-45f3-8837-c50734d020f0/1/aqb54-JiKngVolnljVUkOcJVoxs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/936806-bb6d-45f3-8837-c50734d020f0/1/aqb54-JiKngVolnljVUkOcJVoxs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aqb54-JiKngVolnljVUkOcJVoxs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 08:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:29:41:d9:16:45:85:13:a1:da:c0:cf:59:c6:df:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6aa6f9e3e2622a7815a259e58d552439c255a31b
        Validity
            Not Before: Mar 26 08:01:02 2026 GMT
            Not After : Mar 27 08:01:02 2026 GMT
        Subject: CN=f9a18f6cb9ff03040fa2839a78f4332828c9633e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:02:ba:3f:65:e0:35:d3:73:a5:ff:36:f4:98:
                    a4:a2:1c:45:59:20:db:f7:5e:72:b9:da:0d:a0:46:
                    f9:6f:8f:75:0b:18:67:15:02:ba:aa:1e:39:a4:b1:
                    1f:17:52:35:8b:ca:62:16:06:dc:fb:90:d5:9d:b3:
                    2b:e4:c5:a2:bd:8d:7e:ee:da:50:e7:73:07:2d:8d:
                    f3:86:ed:32:cf:07:0c:c5:0c:e9:15:f3:42:c0:6d:
                    80:fc:e0:5b:bb:41:72:67:56:45:05:39:e4:c9:5c:
                    7b:89:4b:f0:fe:85:90:a2:14:d5:6f:93:02:17:a0:
                    33:4f:90:fd:d7:88:94:78:03:9c:c9:eb:88:77:86:
                    92:de:8a:ac:0e:a1:58:d7:ba:ac:db:e8:8b:3c:c7:
                    7e:7f:0b:1d:9d:ac:61:f9:3b:d3:e3:6a:a9:a3:25:
                    bf:c7:6b:58:82:5f:eb:fb:22:f5:7b:b0:b6:42:f5:
                    d7:d7:0e:bc:53:a2:0c:36:00:e2:b0:28:5f:61:b6:
                    82:59:01:e7:bc:32:5f:8c:2c:e1:7e:0c:e9:cf:4a:
                    a9:60:63:a3:0d:1c:41:05:d4:ec:2a:f0:cf:61:66:
                    a3:c5:a8:e0:22:35:8a:65:60:1b:50:d3:24:4a:95:
                    ee:a6:68:80:86:a4:2f:50:1e:fa:b5:7c:a2:ff:3b:
                    05:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:A1:8F:6C:B9:FF:03:04:0F:A2:83:9A:78:F4:33:28:28:C9:63:3E
            X509v3 Authority Key Identifier:
                keyid:6A:A6:F9:E3:E2:62:2A:78:15:A2:59:E5:8D:55:24:39:C2:55:A3:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aqb54-JiKngVolnljVUkOcJVoxs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/936806-bb6d-45f3-8837-c50734d020f0/1/aqb54-JiKngVolnljVUkOcJVoxs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/936806-bb6d-45f3-8837-c50734d020f0/1/aqb54-JiKngVolnljVUkOcJVoxs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:60:9e:8a:a8:b3:69:30:77:d9:ab:8c:9c:47:d0:81:07:b5:
         58:6e:37:23:33:ad:3b:e3:32:f4:d2:05:9c:2a:bc:9b:10:22:
         65:e2:08:c0:6b:c3:87:88:a3:c6:ed:03:d6:9a:b8:7a:70:bb:
         5e:1a:64:b8:f4:c8:9c:a5:62:51:31:6f:33:c3:18:36:b9:6b:
         07:4e:22:7e:0b:38:11:27:a5:3a:87:2b:f4:a9:38:af:bb:08:
         a6:44:93:1f:0e:1d:50:32:be:11:2e:6d:f1:b3:8b:20:5a:b7:
         ab:69:c6:a5:ee:4a:97:cb:8b:7e:15:3e:d8:0b:cc:24:60:78:
         38:53:d8:ab:6a:e7:8b:39:62:b1:e0:81:2d:cb:20:15:b5:df:
         1f:91:b0:53:16:3c:35:e0:13:f5:36:b1:82:2f:ce:d8:27:27:
         c0:a5:13:7d:0a:f5:70:96:b6:50:82:f1:e6:33:e5:3d:c4:f3:
         65:d0:5b:47:ad:ca:fd:c1:64:65:a7:77:3f:ff:68:b1:ba:a6:
         82:01:12:78:b9:a1:75:fc:76:c7:2a:3e:78:60:8f:27:9d:35:
         cc:87:e8:bc:46:41:f0:5b:ed:ae:42:f9:47:88:2b:5a:3b:41:
         27:32:c8:70:d6:ff:7b:cc:4e:3f:31:b5:cc:ca:c6:36:61:1a:
         6b:1f:16:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:37:31 2026 by rpki-client