Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/979417-f186-46de-acd4-9ce1b416877d/1/x2XWPJFj8sxbVhTDx_MRbnxy-fU.mft
File:                     x2XWPJFj8sxbVhTDx_MRbnxy-fU.mft (raw, json)
Hash identifier:          DD4C6lknZDXZkuSUu9+BXE5squZSiQlysuNdhZKvx/Q=
Subject key identifier:   56:7D:62:75:80:57:0A:30:4E:E8:7A:76:83:07:C5:5C:E7:74:4E:F0
Authority key identifier: C7:65:D6:3C:91:63:F2:CC:5B:56:14:C3:C7:F3:11:6E:7C:72:F9:F5
Certificate issuer:       /CN=c765d63c9163f2cc5b5614c3c7f3116e7c72f9f5
Certificate serial:       019D2BBC31386B937FB2ED4CC6A1468FD67C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x2XWPJFj8sxbVhTDx_MRbnxy-fU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/979417-f186-46de-acd4-9ce1b416877d/1/x2XWPJFj8sxbVhTDx_MRbnxy-fU.mft
Manifest number:          188A
Signing time:             Thu 26 Mar 2026 20:00:46 +0000
Manifest this update:     Thu 26 Mar 2026 20:00:46 +0000
Manifest next update:     Fri 27 Mar 2026 20:00:46 +0000
Files and hashes:         1: bPyQY6SXWWwE0kxuCGK65w1wEbQ.roa (hash: HBq1ZxOHL2v4vjCZS/Tly78qQg5nD5KUf65a7gSUtF4=)
                          2: x2XWPJFj8sxbVhTDx_MRbnxy-fU.crl (hash: 97WRYQfoLN7GcgozA5Ww0/RytWDdCdllnuPSYCQtgsE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/979417-f186-46de-acd4-9ce1b416877d/1/x2XWPJFj8sxbVhTDx_MRbnxy-fU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/979417-f186-46de-acd4-9ce1b416877d/1/x2XWPJFj8sxbVhTDx_MRbnxy-fU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x2XWPJFj8sxbVhTDx_MRbnxy-fU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:32:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2b:bc:31:38:6b:93:7f:b2:ed:4c:c6:a1:46:8f:d6:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c765d63c9163f2cc5b5614c3c7f3116e7c72f9f5
        Validity
            Not Before: Mar 26 20:00:46 2026 GMT
            Not After : Mar 27 20:00:46 2026 GMT
        Subject: CN=567d627580570a304ee87a768307c55ce7744ef0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:86:d5:e5:f2:ee:ba:d6:40:de:46:51:d3:23:
                    86:f9:7d:e9:21:a4:8f:da:35:50:02:97:7c:0e:92:
                    d8:64:1e:d0:c1:cc:37:9d:5e:0b:24:22:83:1c:73:
                    fe:42:0b:9f:4d:86:1b:04:89:9e:10:37:f7:24:bb:
                    77:c1:47:af:d4:15:a2:cc:f8:8b:4d:09:f0:4c:c8:
                    f8:32:be:7b:5f:25:65:3d:4c:ff:5d:4b:b9:13:fb:
                    84:dd:4f:85:f4:e7:8d:4c:14:74:fc:9d:4c:f7:4a:
                    73:6a:12:3d:05:9d:a0:16:fd:9e:97:fd:9d:12:ba:
                    89:fd:67:3e:c8:10:f6:99:64:75:9b:9d:75:a9:25:
                    44:82:17:7c:a6:1a:87:61:a1:c3:79:8e:71:5d:bb:
                    a6:30:24:40:6e:4c:63:81:d8:d6:e1:b0:ea:b1:0c:
                    a2:85:9b:95:af:a6:4d:8e:f3:17:70:c6:27:5e:2d:
                    42:aa:9d:25:98:fd:42:a7:ce:dd:ff:1c:e1:2f:6c:
                    ef:b8:58:d8:6e:16:a9:a1:09:1f:48:79:f4:0f:6f:
                    e6:46:aa:f5:32:4e:51:aa:b9:6f:63:2c:21:0a:7d:
                    f4:0b:0a:d0:95:b3:73:10:8a:c8:67:df:9e:25:ea:
                    e4:b5:33:53:97:6b:7b:38:73:ce:62:c8:e9:7a:72:
                    b6:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:7D:62:75:80:57:0A:30:4E:E8:7A:76:83:07:C5:5C:E7:74:4E:F0
            X509v3 Authority Key Identifier:
                keyid:C7:65:D6:3C:91:63:F2:CC:5B:56:14:C3:C7:F3:11:6E:7C:72:F9:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2XWPJFj8sxbVhTDx_MRbnxy-fU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/979417-f186-46de-acd4-9ce1b416877d/1/x2XWPJFj8sxbVhTDx_MRbnxy-fU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/979417-f186-46de-acd4-9ce1b416877d/1/x2XWPJFj8sxbVhTDx_MRbnxy-fU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:5f:cf:9f:7c:a2:05:97:19:cf:fb:b0:fa:7b:6b:35:a3:8d:
         14:ff:c8:fc:f9:f1:23:a2:36:12:a8:3e:b2:c8:f9:a4:db:0a:
         80:a3:34:94:fe:99:78:b5:62:f8:19:3f:f1:a2:42:d2:37:70:
         99:37:c1:af:db:d7:ac:49:df:11:90:82:bf:0d:52:5f:a7:de:
         7a:f4:29:44:01:41:72:38:9d:3c:4c:63:a6:78:1a:9e:d6:b4:
         f1:04:e1:19:a1:82:d1:18:2a:6b:73:ef:b7:a4:b1:a0:bd:90:
         15:f8:df:2a:be:29:00:2b:e3:fb:38:b2:26:c4:13:8c:07:4d:
         b4:e3:20:9f:2f:af:8c:4e:28:8f:d7:30:8a:eb:7c:c9:dd:07:
         c4:5c:bb:df:69:93:e9:4c:5f:8a:b2:bc:c7:f0:60:e6:12:f8:
         77:6c:38:e6:81:dd:a9:ac:7d:98:98:02:0d:eb:cd:2b:2f:05:
         db:b7:1b:30:4a:a1:7e:b4:ee:87:80:15:2b:95:88:6d:99:83:
         c7:db:81:37:9b:99:a1:e8:dd:b5:07:5f:9f:16:b4:d9:00:84:
         fa:f3:55:70:69:e5:be:9f:7a:81:83:09:23:6e:ab:27:7e:b9:
         fb:c7:7b:f6:13:ef:f1:58:19:7d:4d:ff:98:58:3c:17:54:2d:
         94:b4:f8:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:17:59 2026 by rpki-client