Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/62c92a-5c23-48d7-bca2-63f04095a4c4/1/Ou3Txyc9mrNkoxTaSB5bpR-EKW8.mft
File:                     Ou3Txyc9mrNkoxTaSB5bpR-EKW8.mft (raw, json)
Hash identifier:          9yxJwnv+ECObsQwF7ywLq+V1CLUQPQR09hWmFsHHssU=
Subject key identifier:   00:3B:F4:05:A0:C7:4A:3A:58:13:4D:E9:85:9F:E5:A3:8B:40:43:2B
Authority key identifier: 3A:ED:D3:C7:27:3D:9A:B3:64:A3:14:DA:48:1E:5B:A5:1F:84:29:6F
Certificate issuer:       /CN=3aedd3c7273d9ab364a314da481e5ba51f84296f
Certificate serial:       019D32633910332162E7FAA3CC0500FF24C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ou3Txyc9mrNkoxTaSB5bpR-EKW8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/62c92a-5c23-48d7-bca2-63f04095a4c4/1/Ou3Txyc9mrNkoxTaSB5bpR-EKW8.mft
Manifest number:          188A
Signing time:             Sat 28 Mar 2026 03:00:56 +0000
Manifest this update:     Sat 28 Mar 2026 03:00:56 +0000
Manifest next update:     Sun 29 Mar 2026 03:00:56 +0000
Files and hashes:         1: Ou3Txyc9mrNkoxTaSB5bpR-EKW8.crl (hash: bbm1AXdhkRIuv75Vsviv9epf/zccPaLMbLAMLmi790U=)
                          2: jTw_oq7LAYrSJ1yTG6NZs-qd_OQ.roa (hash: nLB/S+2oGFc9tQIVWN3vkSki+22/PC0HnQATmKLZOKM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/62c92a-5c23-48d7-bca2-63f04095a4c4/1/Ou3Txyc9mrNkoxTaSB5bpR-EKW8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/62c92a-5c23-48d7-bca2-63f04095a4c4/1/Ou3Txyc9mrNkoxTaSB5bpR-EKW8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ou3Txyc9mrNkoxTaSB5bpR-EKW8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Mar 2026 03:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:32:63:39:10:33:21:62:e7:fa:a3:cc:05:00:ff:24:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3aedd3c7273d9ab364a314da481e5ba51f84296f
        Validity
            Not Before: Mar 28 03:00:56 2026 GMT
            Not After : Mar 29 03:00:56 2026 GMT
        Subject: CN=003bf405a0c74a3a58134de9859fe5a38b40432b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7d:7d:f6:af:5d:3d:0d:f4:bb:ef:d7:5e:15:
                    e3:c8:4f:c3:cb:77:ce:65:5d:61:81:69:c9:c8:fd:
                    01:96:1c:61:31:e0:04:84:b9:77:45:9f:a6:df:68:
                    5f:43:5c:43:08:00:36:1f:8c:a6:87:7f:87:c5:3c:
                    ae:9e:d7:57:ef:09:89:eb:6a:7d:b7:7a:6c:aa:84:
                    f1:f4:26:7a:49:02:43:f9:e8:7d:33:1d:cd:86:c8:
                    4c:f5:ae:cb:11:6f:72:99:7a:84:16:a7:72:8d:c9:
                    06:d1:48:6a:0a:57:53:6a:d1:14:f6:71:77:04:18:
                    ab:d0:6b:cd:e9:fa:89:cc:43:80:28:94:c5:c8:9e:
                    1a:dd:12:01:cc:3c:5a:89:48:ef:ac:a0:a1:bc:8a:
                    a4:81:5a:64:e1:90:9f:67:5c:90:63:ba:0f:19:06:
                    9f:5f:f9:06:2d:ba:da:69:19:80:5b:9c:ab:b4:2a:
                    86:3e:d3:f9:33:74:37:21:f3:9a:ac:23:85:a9:bc:
                    3b:94:ba:14:13:00:76:5c:d4:d7:84:bd:00:73:a2:
                    b6:dc:50:5e:cf:32:0e:cb:b5:7d:5d:8c:a4:f9:96:
                    bc:a8:d8:0e:f7:01:5d:fe:d9:38:c3:4e:a7:66:91:
                    ee:4c:c8:72:42:b4:b9:b8:93:fe:0d:10:2e:e8:45:
                    63:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:3B:F4:05:A0:C7:4A:3A:58:13:4D:E9:85:9F:E5:A3:8B:40:43:2B
            X509v3 Authority Key Identifier:
                keyid:3A:ED:D3:C7:27:3D:9A:B3:64:A3:14:DA:48:1E:5B:A5:1F:84:29:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ou3Txyc9mrNkoxTaSB5bpR-EKW8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/62c92a-5c23-48d7-bca2-63f04095a4c4/1/Ou3Txyc9mrNkoxTaSB5bpR-EKW8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/62c92a-5c23-48d7-bca2-63f04095a4c4/1/Ou3Txyc9mrNkoxTaSB5bpR-EKW8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:8e:e9:a7:08:c5:9d:04:a7:54:76:e9:70:54:01:21:42:f3:
         b2:e5:b4:b6:31:d8:2d:c3:0b:fa:4d:92:5e:40:70:01:0f:53:
         9a:e0:e0:43:7d:e6:d0:4c:6c:05:69:fe:39:c8:14:4c:29:9f:
         35:09:ef:19:82:89:93:d8:f8:d4:0b:d0:52:36:0b:a1:ca:ff:
         40:1b:1a:09:15:5f:b1:be:df:69:fd:4d:54:6e:0c:57:3d:c6:
         fa:eb:c1:e9:04:23:f4:83:ef:0a:69:82:35:3d:2c:14:04:bd:
         de:c7:08:d2:8d:b6:93:cb:20:2f:d8:af:8e:cb:47:5c:39:a2:
         66:21:1e:98:7e:04:a0:26:ee:8c:83:7f:7c:0f:54:be:33:53:
         59:2a:d9:a0:ea:55:dc:04:5e:e0:f9:cf:51:be:c3:dc:c1:99:
         8e:c8:2a:fb:f3:39:56:1c:d9:be:d5:89:43:3c:49:e4:ed:47:
         59:e8:86:39:5c:72:b0:7b:fd:03:b3:59:58:d8:f5:0b:6c:4e:
         3a:4e:02:b3:5b:a2:ac:e8:54:a2:3c:ed:28:a7:98:3b:ac:98:
         24:85:e0:fd:8d:76:d5:69:44:ab:03:ba:ff:8a:8c:d5:e9:18:
         77:c8:62:cc:4c:ea:76:65:41:3b:40:01:32:f3:95:d3:41:1a:
         3b:ac:83:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:17:55 2026 by rpki-client