Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.mft
File:                     azeN8nvZJgx-sVJz6ZPjawmF2hA.mft (raw, json)
Hash identifier:          GUrykMFv2ouDEK+aoEei5UCoIl2dJsSViP0z5aJD63g=
Subject key identifier:   56:9F:95:99:DA:89:97:11:8C:1D:70:84:F3:32:48:EF:84:38:A0:17
Authority key identifier: 6B:37:8D:F2:7B:D9:26:0C:7E:B1:52:73:E9:93:E3:6B:09:85:DA:10
Certificate issuer:       /CN=6b378df27bd9260c7eb15273e993e36b0985da10
Certificate serial:       019D265F4D862FE2FD9C822B319A7239B635
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/azeN8nvZJgx-sVJz6ZPjawmF2hA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.mft
Manifest number:          188C
Signing time:             Wed 25 Mar 2026 19:01:12 +0000
Manifest this update:     Wed 25 Mar 2026 19:01:12 +0000
Manifest next update:     Thu 26 Mar 2026 19:01:12 +0000
Files and hashes:         1: BhiORD-UuUDBrhyIYI_DoUYPlI8.roa (hash: JTlV8Y8e4tmlDr8mHk2b5u6aD2TaQXFvARgJc495HDg=)
                          2: azeN8nvZJgx-sVJz6ZPjawmF2hA.crl (hash: doxanZJt4unW3xJzW7qJZY5J8NRWhH/O5bjYUvw/GqA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/azeN8nvZJgx-sVJz6ZPjawmF2hA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 19:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:4d:86:2f:e2:fd:9c:82:2b:31:9a:72:39:b6:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b378df27bd9260c7eb15273e993e36b0985da10
        Validity
            Not Before: Mar 25 19:01:12 2026 GMT
            Not After : Mar 26 19:01:12 2026 GMT
        Subject: CN=569f9599da8997118c1d7084f33248ef8438a017
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:43:81:bb:78:ef:20:3b:86:24:9d:88:7d:86:
                    76:fb:36:f1:04:d3:db:41:f1:55:95:31:ad:6e:c4:
                    33:ba:75:80:9f:b9:96:fc:01:77:56:ce:40:a3:62:
                    db:88:79:3d:49:09:d5:7e:9d:c8:a1:0f:c0:0e:c6:
                    58:50:09:8a:f1:fb:ac:95:d9:41:18:36:f1:e4:ee:
                    b2:c4:ec:e6:d5:7b:71:8d:d3:bd:cb:18:e2:24:3a:
                    25:1b:7d:3c:a2:d1:e5:40:12:0d:34:7b:6b:e5:22:
                    37:4f:b9:42:22:86:13:86:33:00:10:f1:2d:3e:f2:
                    2b:06:36:ba:2d:67:fd:8f:8c:73:92:fe:f6:3a:8b:
                    6e:c5:8b:f7:48:6f:3e:44:3b:da:14:90:7a:a1:f6:
                    22:2d:88:1c:f9:ae:3d:ee:fa:69:8a:a0:e3:4f:f1:
                    b7:31:51:a9:2e:6a:e5:66:23:0c:39:c8:47:43:a8:
                    07:97:13:d4:f7:7a:64:ff:c1:00:35:1f:4a:58:29:
                    81:76:6d:17:b9:45:85:60:e6:a5:dc:98:ea:ae:d0:
                    31:f5:ed:cc:e4:ee:ed:f7:5d:f5:1c:66:57:52:a0:
                    3d:d3:af:f5:95:e9:59:93:7c:54:2c:0f:ef:77:95:
                    ad:1b:28:4f:38:22:d9:22:f3:96:ba:55:be:c3:a3:
                    a5:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:9F:95:99:DA:89:97:11:8C:1D:70:84:F3:32:48:EF:84:38:A0:17
            X509v3 Authority Key Identifier:
                keyid:6B:37:8D:F2:7B:D9:26:0C:7E:B1:52:73:E9:93:E3:6B:09:85:DA:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azeN8nvZJgx-sVJz6ZPjawmF2hA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:8e:d7:61:27:14:23:ea:02:96:39:2c:21:69:49:4d:81:eb:
         04:96:8c:53:a1:fd:3d:d6:67:9d:3f:8f:51:b6:3d:6d:51:1d:
         1a:ed:37:56:ed:b6:6b:c4:8e:a8:2c:99:9a:17:6f:b3:58:b0:
         99:6d:88:f1:16:1d:fd:cd:11:41:6a:be:ed:2c:0e:8a:57:a1:
         54:40:60:75:b6:2a:06:b4:c7:a5:8f:0f:3e:f8:8b:06:5d:e4:
         b1:7a:d6:f1:95:20:11:62:0e:05:56:46:af:59:cf:ce:6a:bc:
         93:ac:04:26:e0:85:bc:47:0f:19:06:c5:74:23:30:fc:e2:28:
         22:a1:fb:2c:3f:df:55:9d:a3:26:11:4a:ea:14:c3:46:47:bc:
         3f:20:84:7d:a0:9c:d7:ef:2a:ef:5b:37:59:9f:74:b8:50:fb:
         25:74:bd:8a:c8:8d:54:69:df:ca:0e:04:16:b6:f0:a8:84:41:
         1c:59:0e:e7:7a:8c:e3:8a:57:f8:27:fa:90:40:6a:8d:ca:c5:
         bf:83:61:ad:a0:e4:a9:24:e9:48:e2:30:ad:10:0a:36:de:8e:
         07:92:cd:10:01:de:e9:86:04:31:82:23:34:3c:bd:f9:95:f1:
         c4:c0:d6:ee:9e:54:b8:73:bb:0d:e9:f5:65:79:da:0d:0c:12:
         ea:aa:50:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:54:37 2026 by rpki-client