Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/8ce609-db1d-4997-9d8a-96ddd5a0239d/1/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.mft
File:                     2dAxjyaF4y0tupI_ZmJ3FCc1lzg.mft (raw, json)
Hash identifier:          n3S5o7XJ9dQKsYZnh4ey6ypFdFcudQ+Kg7Q8/S4xysI=
Subject key identifier:   E0:F6:29:02:95:44:BB:0E:B6:A1:C3:A2:1D:81:98:03:2C:C9:79:15
Authority key identifier: D9:D0:31:8F:26:85:E3:2D:2D:BA:92:3F:66:62:77:14:27:35:97:38
Certificate issuer:       /CN=d9d0318f2685e32d2dba923f6662771427359738
Certificate serial:       019D2816430C3650175415706602818C1DE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/8ce609-db1d-4997-9d8a-96ddd5a0239d/1/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.mft
Manifest number:          188B
Signing time:             Thu 26 Mar 2026 03:00:40 +0000
Manifest this update:     Thu 26 Mar 2026 03:00:40 +0000
Manifest next update:     Fri 27 Mar 2026 03:00:40 +0000
Files and hashes:         1: 2dAxjyaF4y0tupI_ZmJ3FCc1lzg.crl (hash: oi/ljBA3D8/shn0PiwH/LA88kNvLoUTh1a+uTV/OU8U=)
                          2: F6fUHhyih39ackVWeOiT1Us1Y8Q.roa (hash: puoFvjqopp+quYrffqHcq8C0zEtx3DRFmOVecmQhdMc=)
                          3: gXTXswMAqOUZcicFKanGyy8Pc24.roa (hash: CsXx31nQ+NdycTm6E1P0Qb6Ob5IJ6xBFv4kmPa3DVVo=)
                          4: kOj1s5oO7oSiq_7ZjXoN1j2kTnE.roa (hash: Y6xric3ra7rVJoctwp2vvhl14A8o24GxxC7BIDvBIlU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/8ce609-db1d-4997-9d8a-96ddd5a0239d/1/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/8ce609-db1d-4997-9d8a-96ddd5a0239d/1/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:16:43:0c:36:50:17:54:15:70:66:02:81:8c:1d:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9d0318f2685e32d2dba923f6662771427359738
        Validity
            Not Before: Mar 26 03:00:40 2026 GMT
            Not After : Mar 27 03:00:40 2026 GMT
        Subject: CN=e0f629029544bb0eb6a1c3a21d8198032cc97915
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d7:ab:7f:07:65:f9:61:b5:68:8f:ff:69:04:
                    76:90:0a:de:ca:15:6f:da:b6:ec:0e:06:30:9d:27:
                    e1:90:1a:46:22:89:49:14:3a:f5:fd:56:e2:ca:33:
                    b3:f3:0d:53:c7:a5:ff:33:2a:51:ee:69:8b:ae:5a:
                    2a:4a:b0:09:df:4e:3e:f6:06:ad:1b:26:e5:c8:2e:
                    72:e8:d2:51:14:0f:37:75:2b:13:3b:f2:e6:a6:e8:
                    f3:11:57:f6:42:53:e5:0c:13:9e:fe:41:5f:dc:6e:
                    b0:d0:03:a1:7e:72:d8:38:e3:39:39:41:bc:61:bc:
                    b7:77:d8:4b:9f:41:66:7f:e7:2f:05:7d:5a:9e:19:
                    12:05:09:0a:00:cb:bf:e1:57:6a:3c:30:e4:87:af:
                    cc:15:8d:40:1a:08:eb:91:de:68:57:9b:71:5e:e7:
                    d2:f7:b7:a9:fb:ab:d4:98:18:64:64:f1:8b:6e:6c:
                    37:cd:ef:78:b3:44:71:81:02:51:9f:97:ff:9a:b2:
                    64:55:a0:27:b0:a0:60:99:ec:81:a5:3f:cd:62:6d:
                    13:19:f7:a6:39:c8:2a:14:30:8d:50:5b:83:b7:37:
                    86:bc:df:28:92:b1:42:9f:9b:4c:05:16:8a:52:41:
                    8b:78:5a:53:59:d5:88:68:12:21:ad:ed:9e:b6:f7:
                    13:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:F6:29:02:95:44:BB:0E:B6:A1:C3:A2:1D:81:98:03:2C:C9:79:15
            X509v3 Authority Key Identifier:
                keyid:D9:D0:31:8F:26:85:E3:2D:2D:BA:92:3F:66:62:77:14:27:35:97:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8ce609-db1d-4997-9d8a-96ddd5a0239d/1/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8ce609-db1d-4997-9d8a-96ddd5a0239d/1/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:d4:98:13:1f:67:a9:2b:9b:81:bc:94:54:17:c8:93:37:c7:
         98:61:e1:36:f2:51:63:df:8a:ee:ff:66:2c:51:d3:00:3b:e8:
         fa:a6:80:72:de:d8:8b:c0:02:4e:5d:c7:3e:5e:ab:5b:4e:aa:
         c6:88:27:6c:7b:b0:87:85:bd:f2:80:27:54:5d:1c:2b:f0:f2:
         01:30:b5:be:d6:ad:d2:09:00:9d:c3:3e:6d:3b:20:a1:ea:48:
         36:44:0e:ba:82:fe:5a:5d:62:15:76:4b:d9:41:32:7a:dd:02:
         53:45:af:ee:f3:9c:75:79:69:aa:fd:51:b7:a3:df:d6:62:31:
         c2:d8:13:ad:7c:9e:0c:1c:3f:1e:2b:da:38:c2:7a:93:9c:50:
         53:eb:02:72:61:6c:09:8c:dc:ec:54:9c:0b:8f:67:13:50:dc:
         36:b3:fe:af:cd:62:e3:97:a3:06:81:7b:86:3a:d0:dc:4f:5f:
         15:34:78:e7:54:65:8e:e5:55:fe:60:a2:38:ba:61:6b:5e:33:
         ab:c8:78:b1:09:02:1c:9b:49:f7:15:e6:5d:46:9a:5c:8c:94:
         f4:e2:9f:1e:f1:02:46:2a:b8:34:cd:cc:e0:bc:fa:0f:30:a6:
         c1:05:dc:ff:ed:9a:23:9c:67:89:95:f7:e3:a2:4c:f4:db:1c:
         16:68:3c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:18:29 2026 by rpki-client