Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.mft
File:                     oWsNirSUNlULar9Ft5A1rsav8jw.mft (raw, json)
Hash identifier:          mjXboWQF/VcOCahD2P0biU04s++/7wLTSOY8UNFdXIY=
Subject key identifier:   32:A8:A3:AE:B4:5D:26:02:F7:50:D3:86:4E:37:69:55:F7:6A:1A:06
Authority key identifier: A1:6B:0D:8A:B4:94:36:55:0B:6A:BF:45:B7:90:35:AE:C6:AF:F2:3C
Certificate issuer:       /CN=a16b0d8ab49436550b6abf45b79035aec6aff23c
Certificate serial:       019D265FA2C0D299A96EC3A9AE383B30D70C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oWsNirSUNlULar9Ft5A1rsav8jw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.mft
Manifest number:          188E
Signing time:             Wed 25 Mar 2026 19:01:34 +0000
Manifest this update:     Wed 25 Mar 2026 19:01:34 +0000
Manifest next update:     Thu 26 Mar 2026 19:01:34 +0000
Files and hashes:         1: eH9pN3T8uZtfjzNIHm2QIWz86JU.roa (hash: 6WTiCPJHOrzizrSNq8riDUFegfS58h7BM9hToFWx7eQ=)
                          2: ffMr-vGRUopXUQF11fs9N-58S5A.roa (hash: f6/aHTleq3uzGygn/Gg7UKDvdBVMxROzI3ip6izS/3g=)
                          3: oWsNirSUNlULar9Ft5A1rsav8jw.crl (hash: w/rqmXAZgqv6G/NvgrI/li0SHFlHvUl0R8xEYCvNV5U=)
                          4: q4WcfCRWGVzGeRAaFA36efTC1fc.roa (hash: NzEF7aAGWrkW8QtiypziwNCiqL4q9mcX58JJBXOJgOs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oWsNirSUNlULar9Ft5A1rsav8jw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 19:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:a2:c0:d2:99:a9:6e:c3:a9:ae:38:3b:30:d7:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a16b0d8ab49436550b6abf45b79035aec6aff23c
        Validity
            Not Before: Mar 25 19:01:34 2026 GMT
            Not After : Mar 26 19:01:34 2026 GMT
        Subject: CN=32a8a3aeb45d2602f750d3864e376955f76a1a06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:cc:c1:37:d4:8f:37:17:9f:91:82:3c:21:89:
                    0e:00:a1:f1:52:ec:6d:71:7d:7e:28:92:9e:ef:b6:
                    a9:e3:d2:64:86:98:ca:8e:a7:f8:4b:bd:2e:28:3d:
                    b1:c2:2e:d3:83:35:25:3e:fe:38:e7:6b:21:18:30:
                    50:0c:6b:08:db:b4:30:76:d8:96:a3:63:55:d4:b7:
                    61:a4:0e:f4:15:58:7d:9c:cb:30:c9:29:7d:c0:56:
                    b5:a1:56:c1:18:4f:8d:65:74:ac:9b:c6:49:e0:c8:
                    44:89:02:5b:54:b0:f3:ba:a5:8c:a3:e4:c3:71:30:
                    80:55:97:91:86:4a:3b:af:b5:79:89:f3:f3:32:9c:
                    98:5b:65:ba:bd:45:1f:9e:6f:7f:9f:ab:97:fa:6b:
                    c1:0b:7b:8e:46:72:55:09:9e:53:50:f6:18:fc:41:
                    52:7d:e2:b9:a2:4a:9e:01:10:22:90:e1:93:39:e3:
                    5d:d0:98:40:7b:af:12:7d:37:40:d7:39:b9:c6:78:
                    fb:07:eb:32:5b:02:91:0d:09:29:9d:7c:ea:7f:59:
                    4a:6c:9d:f2:cc:c6:39:6f:30:b4:5d:51:2a:e5:34:
                    a0:96:9f:dd:30:7e:d7:db:b7:69:d9:c0:93:ca:78:
                    a7:77:6f:41:6d:01:02:aa:ed:98:d1:ad:5e:0d:40:
                    2a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:A8:A3:AE:B4:5D:26:02:F7:50:D3:86:4E:37:69:55:F7:6A:1A:06
            X509v3 Authority Key Identifier:
                keyid:A1:6B:0D:8A:B4:94:36:55:0B:6A:BF:45:B7:90:35:AE:C6:AF:F2:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWsNirSUNlULar9Ft5A1rsav8jw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:00:c1:78:a6:d0:57:fa:1e:23:9b:33:3b:02:69:23:4e:07:
         5d:32:d3:7b:57:33:07:9a:f1:9f:13:48:f7:55:84:66:f9:dc:
         59:67:36:34:d9:5c:2f:bb:9e:f1:b3:0f:f1:39:81:3c:1f:cc:
         00:84:9a:95:f3:99:2b:7d:13:a1:2a:3d:ca:d1:7f:0a:94:89:
         9e:57:6e:1b:84:1d:27:0b:1c:f2:c9:5d:02:3b:e4:f2:92:57:
         93:9c:2e:0d:52:a5:64:a9:e3:52:f0:23:80:f3:b6:63:7a:e4:
         3a:0a:4c:68:60:1a:8c:50:30:db:3c:4e:a3:fb:78:48:5d:7e:
         b0:ac:ab:07:28:28:ce:56:68:20:18:54:e4:d6:cc:3f:50:d5:
         df:a7:2b:7c:68:98:4a:6f:5c:81:58:3f:f0:8a:a6:b9:25:7f:
         80:7a:be:fc:ce:2a:9a:20:31:80:31:a0:df:3b:bb:e0:ab:43:
         af:67:26:58:a2:e3:aa:f2:40:a5:75:4f:ae:4f:f4:df:14:9c:
         2a:dd:88:3e:fe:2c:25:bb:04:6a:cc:05:c6:22:61:d4:34:f6:
         d8:a5:a2:4f:d0:41:42:62:5f:c8:13:69:48:94:e9:f1:62:4d:
         20:0b:ae:2d:a3:c0:3a:28:cb:fc:13:75:14:7d:43:9c:58:8b:
         c3:d2:cc:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:39:18 2026 by rpki-client