Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/181ad6-4764-4881-8962-0aff69faf68a/1/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.mft
File:                     D2Vwk_MmVHvyWpmFyBzxQDFAo6g.mft (raw, json)
Hash identifier:          Fpp5tzgztQZ64Bz/G3s7Ljz0ccUtwgsZc51FGunEMOE=
Subject key identifier:   E4:9B:DC:D9:91:AD:92:2A:70:75:49:9E:C4:13:1C:3F:0D:52:3B:1B
Authority key identifier: 0F:65:70:93:F3:26:54:7B:F2:5A:99:85:C8:1C:F1:40:31:40:A3:A8
Certificate issuer:       /CN=0f657093f326547bf25a9985c81cf1403140a3a8
Certificate serial:       019D25F1C90186A5885674767C4BA62A57C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/181ad6-4764-4881-8962-0aff69faf68a/1/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.mft
Manifest number:          188A
Signing time:             Wed 25 Mar 2026 17:01:35 +0000
Manifest this update:     Wed 25 Mar 2026 17:01:35 +0000
Manifest next update:     Thu 26 Mar 2026 17:01:35 +0000
Files and hashes:         1: D2Vwk_MmVHvyWpmFyBzxQDFAo6g.crl (hash: SR3h9KIa1xZ+3wqeke8n8iTysAHnLnh7x6cGf4DftwY=)
                          2: zWv6lPCafLJnQppl_Q2Krp9R-ts.roa (hash: PnRp68chs8F3bed1Cp1lvtVxJK9TEVJMwXnA7+PU/D0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/181ad6-4764-4881-8962-0aff69faf68a/1/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/181ad6-4764-4881-8962-0aff69faf68a/1/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:f1:c9:01:86:a5:88:56:74:76:7c:4b:a6:2a:57:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f657093f326547bf25a9985c81cf1403140a3a8
        Validity
            Not Before: Mar 25 17:01:35 2026 GMT
            Not After : Mar 26 17:01:35 2026 GMT
        Subject: CN=e49bdcd991ad922a7075499ec4131c3f0d523b1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7d:e1:c6:9b:ad:02:df:51:43:32:f7:82:64:
                    fe:7c:c0:08:2c:97:74:51:b1:a6:38:e9:ff:09:9f:
                    95:83:6b:f7:50:9e:27:f7:1a:53:2a:06:1c:48:a1:
                    0d:e7:26:e0:20:fa:eb:f8:5e:6e:df:92:54:c7:77:
                    55:73:47:75:5b:95:25:ba:83:03:d1:52:2b:7a:79:
                    f7:19:91:01:6f:09:a7:ad:2c:ce:8f:4f:92:c2:fa:
                    43:5e:f0:ed:e1:5b:03:2c:4f:45:ad:0c:45:65:be:
                    a5:37:bf:82:2e:03:82:11:3d:e7:41:aa:07:b3:66:
                    ba:9b:73:0a:b5:3f:cc:e5:45:df:73:3a:6b:26:8b:
                    2a:b3:81:a6:a9:d7:f2:43:7b:ec:b0:87:88:89:66:
                    b2:f4:a7:9a:d3:de:91:bd:a8:ab:dd:3f:a7:35:ed:
                    b9:55:58:64:5c:3b:2a:d6:eb:76:98:1e:99:32:f8:
                    61:34:b7:6d:9c:99:fc:26:80:2f:04:6f:80:fe:a3:
                    77:28:ee:37:d6:6c:13:00:99:18:31:b4:45:04:09:
                    fa:99:06:34:34:62:53:6b:ca:c7:23:3e:fb:d2:10:
                    16:28:23:2a:fe:90:57:88:1d:33:d6:19:b7:74:96:
                    eb:c8:a3:72:98:3e:1a:a1:2d:2b:5b:8b:b7:5b:fe:
                    7c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:9B:DC:D9:91:AD:92:2A:70:75:49:9E:C4:13:1C:3F:0D:52:3B:1B
            X509v3 Authority Key Identifier:
                keyid:0F:65:70:93:F3:26:54:7B:F2:5A:99:85:C8:1C:F1:40:31:40:A3:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/181ad6-4764-4881-8962-0aff69faf68a/1/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/181ad6-4764-4881-8962-0aff69faf68a/1/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:da:02:ac:f7:c9:67:9c:5d:c3:ce:0e:3d:68:a8:d0:ed:79:
         da:4d:92:fa:df:4b:2f:92:69:bd:9b:34:59:77:42:4d:58:ee:
         1b:1c:fe:a6:de:e4:d6:31:14:e0:46:20:75:99:9a:80:36:0c:
         70:f3:6a:08:17:be:3d:99:68:8e:11:1d:6b:01:32:68:62:ad:
         c2:f3:08:a5:7a:71:71:11:3c:e0:e5:4f:f1:0e:fa:fa:44:15:
         62:06:7d:08:1c:be:80:e4:4c:78:68:c4:bb:95:3e:b3:f9:ba:
         f3:98:37:92:ce:2d:73:cc:b5:a8:11:e2:80:46:47:7b:46:7d:
         65:c2:16:04:67:52:fb:56:43:94:5c:53:1b:dc:41:3d:0c:da:
         bf:2d:8c:2d:49:87:c9:c4:6a:41:cb:ec:86:30:85:72:1d:74:
         12:07:ac:44:39:39:31:cb:3f:a7:57:13:c9:79:0d:fb:b2:ef:
         49:4c:82:f8:0a:3b:ec:1b:3f:b7:3e:c7:a0:d6:48:7a:65:d6:
         80:8e:6a:4f:b5:1a:c8:d5:27:7a:72:36:3c:fa:74:ca:79:4e:
         31:26:c4:c8:9c:d9:61:72:6b:f2:b4:bb:3e:36:ad:b0:28:ab:
         0d:cd:8f:42:ba:eb:7e:8a:bf:f1:d5:88:37:5f:15:f6:57:f8:
         ce:d7:77:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:17 2026 by rpki-client