Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.mft
File:                     inK2D1-0kwAWzrhgzBdKUxNfFhY.mft (raw, json)
Hash identifier:          fH27DXgVd9U49wdmTYTiGEndV+D1YtjSZgWOoug5Op4=
Subject key identifier:   71:8F:24:73:11:F9:3D:7A:DB:A6:B7:6A:19:CB:1F:1E:09:31:3B:81
Authority key identifier: 8A:72:B6:0F:5F:B4:93:00:16:CE:B8:60:CC:17:4A:53:13:5F:16:16
Certificate issuer:       /CN=8a72b60f5fb4930016ceb860cc174a53135f1616
Certificate serial:       019D29CE7C80F3FFF71F46DBBB1C55268C6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/inK2D1-0kwAWzrhgzBdKUxNfFhY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.mft
Manifest number:          188E
Signing time:             Thu 26 Mar 2026 11:01:31 +0000
Manifest this update:     Thu 26 Mar 2026 11:01:31 +0000
Manifest next update:     Fri 27 Mar 2026 11:01:31 +0000
Files and hashes:         1: PguFJecoQt--LyHW2Dxlv0ZZ3t0.asa (hash: 0DuH9ZfW8f/p2+Moq7rG/7mXkezlodPdLgpnaG/Lc0I=)
                          2: cSJtDg9vgEHyxl9pdyznOaSGrWg.roa (hash: 76q9DQ4PdJdy77vI2HX3g1+OVo3qLamEUqimf88VMZA=)
                          3: inK2D1-0kwAWzrhgzBdKUxNfFhY.crl (hash: f8a9IE/LvdPz3RMkvoUjzUDsW2y0Luc9N8xdhLIxrdw=)
                          4: nyn8nP7M60E_Gz5chelL2mp7sBg.roa (hash: no7cv4ijMcaVa1AjDdpe2zKmm1N/3cLT1g+7PMJ12Ew=)
                          5: x5mGmJWW7VG2d9fAFZDjA0LUA6M.asa (hash: VX9BMxwn8E44ljUNBHA9sm5zOwxMI5hsQlaAlIe0HNQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/inK2D1-0kwAWzrhgzBdKUxNfFhY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:ce:7c:80:f3:ff:f7:1f:46:db:bb:1c:55:26:8c:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a72b60f5fb4930016ceb860cc174a53135f1616
        Validity
            Not Before: Mar 26 11:01:31 2026 GMT
            Not After : Mar 27 11:01:31 2026 GMT
        Subject: CN=718f247311f93d7adba6b76a19cb1f1e09313b81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f7:0a:cf:5b:eb:bb:a7:20:6f:21:87:d3:5b:
                    7a:34:a1:71:6d:bf:3a:73:9f:f9:c5:f5:c9:e7:62:
                    fb:a8:34:29:7c:6f:85:71:91:64:99:42:c4:b6:45:
                    f8:2a:e1:8d:af:57:49:7d:54:07:22:ae:8d:69:ca:
                    da:7d:48:13:31:05:3c:04:11:7e:fc:87:da:89:87:
                    97:cb:81:87:94:17:79:aa:07:6b:1a:3d:67:1e:e2:
                    da:ca:66:5a:7a:e8:97:1e:39:13:a0:52:7a:3a:a8:
                    0e:e3:50:2a:58:3c:11:c2:d4:a1:b8:3f:4f:ed:e3:
                    9b:8c:67:58:1e:09:b3:8a:e0:58:9e:75:5e:6b:2d:
                    10:32:1d:40:4f:a8:28:00:6d:6a:53:d1:1a:56:cf:
                    88:a4:c8:34:e3:81:74:8f:61:44:67:a6:c8:d7:bd:
                    a5:d9:47:d4:59:ef:c8:ba:3b:03:65:c6:d7:14:00:
                    88:6e:1e:97:e0:a2:ed:7b:f4:16:fc:4e:df:00:b7:
                    f2:2d:eb:84:78:56:21:6c:50:5f:35:6a:6e:52:05:
                    e0:fe:ee:c9:cc:6a:7e:31:36:5a:fa:13:52:38:53:
                    33:df:6b:9c:38:db:59:8c:f6:d7:8a:14:80:3c:36:
                    37:57:ce:42:0f:c3:f3:cd:19:2a:bd:14:ed:26:67:
                    7d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:8F:24:73:11:F9:3D:7A:DB:A6:B7:6A:19:CB:1F:1E:09:31:3B:81
            X509v3 Authority Key Identifier:
                keyid:8A:72:B6:0F:5F:B4:93:00:16:CE:B8:60:CC:17:4A:53:13:5F:16:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/inK2D1-0kwAWzrhgzBdKUxNfFhY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:15:a1:23:6e:09:a9:b8:b4:1b:ef:50:19:81:b9:cd:c6:0d:
         3c:db:a4:e4:43:69:a1:62:5f:49:13:57:eb:7b:d6:33:7e:a3:
         a2:65:98:56:ba:7c:39:88:85:c1:74:52:ba:94:ca:52:52:88:
         31:e6:0a:00:39:81:d4:ca:0d:52:d4:68:09:67:56:80:d5:24:
         d4:8c:cd:fc:15:e1:6f:4b:7b:de:c9:38:7e:93:5b:d4:61:5b:
         71:c2:69:ba:c8:26:f7:41:c5:2d:67:c3:04:68:ad:90:9b:08:
         de:5f:0d:0f:59:42:21:58:12:4a:53:86:c9:87:0c:56:20:a2:
         a6:09:6f:6d:f2:88:bf:38:15:d8:ef:11:b6:9a:c3:8c:33:eb:
         50:09:52:78:1f:b0:e0:ca:73:33:4e:c1:aa:e2:95:a9:7e:43:
         80:90:1a:e3:ca:f6:c9:f1:97:1a:51:24:73:60:f3:5d:c9:4e:
         c0:34:09:83:03:73:7a:4d:90:32:36:33:ee:26:7a:d8:87:82:
         2f:c5:13:9c:57:08:07:6c:64:83:26:f9:f8:04:25:38:e2:00:
         9e:5c:98:25:b7:81:b6:6c:3c:94:e0:f2:ca:76:72:ea:77:b6:
         91:16:29:0d:2a:91:23:9c:49:db:52:9a:ff:c3:25:38:bc:0a:
         7f:f6:dd:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:02:14 2026 by rpki-client