Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.mft
File:                     Iybu6t1MDuVbNZSlluZyIIGcGNU.mft (raw, json)
Hash identifier:          ga9Dn5LlohKh/z5R/Ip5LYm+6NUfo84/O0ZZKzTqFPw=
Subject key identifier:   DC:24:00:94:D8:4A:BC:C7:4C:90:9A:D7:51:0F:54:A6:08:A5:CE:BA
Authority key identifier: 23:26:EE:EA:DD:4C:0E:E5:5B:35:94:A5:96:E6:72:20:81:9C:18:D5
Certificate issuer:       /CN=2326eeeadd4c0ee55b3594a596e67220819c18d5
Certificate serial:       019D2470B061A68C98D0727CEE2F45D3AABB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Iybu6t1MDuVbNZSlluZyIIGcGNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.mft
Manifest number:          188A
Signing time:             Wed 25 Mar 2026 10:00:58 +0000
Manifest this update:     Wed 25 Mar 2026 10:00:58 +0000
Manifest next update:     Thu 26 Mar 2026 10:00:58 +0000
Files and hashes:         1: AAidcFfKKn8rLVgZFcWgd6oXzBA.roa (hash: deNWXJoBp3T1ikz9GPZx7PgODBggEVznDAhwm6Au8ww=)
                          2: G3golYRCkelEfHAfABmrlnYv0EY.asa (hash: Qew4qOtn77j2TfbcFgyr9LY4AUHudNWIMGajK/7d088=)
                          3: Iybu6t1MDuVbNZSlluZyIIGcGNU.crl (hash: Yio/dLbRLT1HHjV2D2KR91Nzwra2gqkN92c0TVgeiwc=)
                          4: jB65z1ohai0nkr6HUNtdxzCDiIk.roa (hash: oekkGHlROfUOtUp+dGMPBMZMBRrWYIWnNkSbT4P6/v8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Iybu6t1MDuVbNZSlluZyIIGcGNU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 10:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:24:70:b0:61:a6:8c:98:d0:72:7c:ee:2f:45:d3:aa:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2326eeeadd4c0ee55b3594a596e67220819c18d5
        Validity
            Not Before: Mar 25 10:00:58 2026 GMT
            Not After : Mar 26 10:00:58 2026 GMT
        Subject: CN=dc240094d84abcc74c909ad7510f54a608a5ceba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d7:c6:7c:d3:93:47:3e:44:3d:a0:12:60:aa:
                    b8:da:b7:4c:09:c8:6d:3e:3e:0a:0f:17:f2:db:5d:
                    07:23:d6:84:c3:6f:c5:8c:c9:20:c3:fa:52:23:b9:
                    a5:09:01:58:a3:ac:a2:c4:6a:fb:43:b3:b0:09:2a:
                    f8:8f:93:bc:84:49:30:82:f4:d9:65:08:0c:bf:b3:
                    0d:6e:34:8e:26:75:bc:94:a0:f4:0f:1d:4f:c0:44:
                    18:57:db:c7:e7:51:b3:7f:9f:fd:90:4c:dc:96:dd:
                    55:f8:a4:19:11:a8:9e:5b:c4:b2:0e:a2:7c:a5:09:
                    15:08:9e:18:03:3b:6c:7c:5e:f5:01:5c:a6:8c:c9:
                    21:b0:db:5d:25:63:48:4c:ff:5b:dd:1e:de:f8:fa:
                    f3:e5:68:f8:5a:71:ac:28:76:ec:44:f5:6a:fd:b0:
                    50:f4:61:bf:43:e3:1a:2e:23:b9:3f:f5:f7:af:be:
                    7d:bb:3e:a4:1b:20:cf:a8:0e:d9:91:59:98:98:95:
                    f6:c6:3e:63:84:8b:c1:04:58:ca:38:d2:a9:0a:41:
                    52:32:e9:31:a6:8e:83:eb:35:37:94:30:60:f1:94:
                    85:32:c4:1c:55:98:3c:03:0a:ae:c2:9b:62:72:08:
                    f6:98:11:df:08:55:9d:27:0c:b5:15:60:31:e5:60:
                    2b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:24:00:94:D8:4A:BC:C7:4C:90:9A:D7:51:0F:54:A6:08:A5:CE:BA
            X509v3 Authority Key Identifier:
                keyid:23:26:EE:EA:DD:4C:0E:E5:5B:35:94:A5:96:E6:72:20:81:9C:18:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iybu6t1MDuVbNZSlluZyIIGcGNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:ad:2b:11:fd:2d:80:03:82:97:86:8f:37:ed:ca:40:d5:80:
         41:75:23:09:3d:9c:a8:fb:78:26:67:ec:0a:03:2f:90:cb:3a:
         27:67:ff:3c:ec:fb:9f:83:cb:e1:82:a1:98:8c:0a:c4:bc:7a:
         08:e4:e8:0d:07:0c:68:24:86:2d:3e:5b:fe:e3:7c:86:44:9c:
         1f:04:00:9f:5e:30:aa:2a:3f:db:0b:0b:d5:95:d7:52:e9:3d:
         2d:06:88:98:56:92:7c:76:54:43:cf:d0:07:21:a1:45:5a:b4:
         8a:ec:2d:24:ec:6b:93:a2:4c:67:bc:c3:98:00:da:7f:a7:8f:
         43:ff:e1:30:09:8d:c2:95:76:ca:f8:bb:ff:46:27:8c:98:c9:
         3d:5e:25:e2:0f:bc:9d:b1:e7:78:5f:92:8d:eb:36:53:d2:3f:
         1b:cb:9e:c5:0c:47:39:06:e2:ec:59:b2:0e:0f:c3:06:2a:16:
         36:63:3c:e8:78:90:59:ef:10:09:1a:e4:45:f2:36:76:88:78:
         8c:15:6e:ce:62:b7:60:7a:75:eb:4a:c3:90:08:c8:c6:53:1d:
         40:86:97:46:9a:6d:a4:64:88:a1:10:18:c3:af:2b:72:cf:4f:
         21:7a:55:2b:a5:d0:4c:8b:d3:0f:f1:b0:45:8a:ca:af:b4:a3:
         be:07:b2:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:19:28 2026 by rpki-client