Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.mft
File:                     3DiEAh0bAujBa1VXQ9_rnajkjjE.mft (raw, json)
Hash identifier:          xhjSI2YzNsEht7aG5Mgz43EiRtgNBa32z4Ry+mX5gNo=
Subject key identifier:   E7:BB:44:F3:06:9A:13:CB:DD:9A:F9:AA:35:E7:25:4F:5E:BF:E7:91
Authority key identifier: DC:38:84:02:1D:1B:02:E8:C1:6B:55:57:43:DF:EB:9D:A8:E4:8E:31
Certificate issuer:       /CN=dc3884021d1b02e8c16b555743dfeb9da8e48e31
Certificate serial:       019D270429B9B7B02A587216E6251F462A97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3DiEAh0bAujBa1VXQ9_rnajkjjE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.mft
Manifest number:          188D
Signing time:             Wed 25 Mar 2026 22:01:17 +0000
Manifest this update:     Wed 25 Mar 2026 22:01:17 +0000
Manifest next update:     Thu 26 Mar 2026 22:01:17 +0000
Files and hashes:         1: 3DiEAh0bAujBa1VXQ9_rnajkjjE.crl (hash: 7kGyrO0sK1T4jfExp3fzbo8LonbG/IrOP9l1kbOwlk0=)
                          2: MkXamkMit0DUCscCJeOeai_2BUE.roa (hash: WMrPqELHvgkrdxREhlBpsAdq+q/gtttubRFmvCN11rs=)
                          3: WVFWsnDyURdYEX6Y48O_tzjkAoE.roa (hash: vDQgxFeJsm3RaP7KUS8Geu388WUgzUBm4NzCZDCx6Hk=)
                          4: jIASpROSIV_qZhR1JMZmDWlpQjE.roa (hash: fhdz/8TRPnLedG78rrZ+dqgOjuSc/WvPYigkuKXyrVM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3DiEAh0bAujBa1VXQ9_rnajkjjE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:04:29:b9:b7:b0:2a:58:72:16:e6:25:1f:46:2a:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc3884021d1b02e8c16b555743dfeb9da8e48e31
        Validity
            Not Before: Mar 25 22:01:17 2026 GMT
            Not After : Mar 26 22:01:17 2026 GMT
        Subject: CN=e7bb44f3069a13cbdd9af9aa35e7254f5ebfe791
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:29:c8:1f:4f:7f:c3:37:63:6b:46:ae:41:4e:
                    0d:18:d2:8f:c7:6b:db:00:21:04:4e:88:26:eb:35:
                    f4:4a:d3:49:80:c2:66:76:74:32:6c:0b:45:f8:39:
                    c6:7b:b4:5a:97:0a:11:90:3b:f0:22:db:45:e2:0c:
                    38:16:db:25:03:35:36:ab:a9:4c:80:1d:a9:c9:44:
                    ee:2a:86:72:ae:90:9d:dc:6d:e8:82:7a:ef:df:06:
                    79:9a:50:76:c0:0d:5a:8d:a0:3f:d8:57:d9:10:57:
                    78:8b:23:0e:18:7f:0e:09:f4:1f:51:43:25:ca:dd:
                    67:20:00:cf:60:3e:4a:45:39:63:a9:07:20:8f:64:
                    05:95:ba:e3:b1:f6:46:9f:b0:9b:5e:21:8d:3c:c8:
                    c3:9d:17:68:57:a2:06:ff:ce:84:6c:ed:68:f5:82:
                    9c:f8:61:71:88:52:70:fc:59:7f:f1:92:f7:10:7c:
                    9a:f1:d5:81:93:9a:a0:3b:e0:99:58:21:85:50:b4:
                    8a:e6:9c:64:6f:5c:b9:7d:f7:7c:8f:86:98:e3:a2:
                    f2:fa:85:ed:72:ee:d6:af:36:1b:3e:04:c5:b2:60:
                    9c:dd:96:a9:43:b4:31:03:ea:08:a2:23:4b:f4:d3:
                    35:8f:53:11:38:61:f4:0a:17:ba:41:e5:07:c9:4b:
                    e8:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:BB:44:F3:06:9A:13:CB:DD:9A:F9:AA:35:E7:25:4F:5E:BF:E7:91
            X509v3 Authority Key Identifier:
                keyid:DC:38:84:02:1D:1B:02:E8:C1:6B:55:57:43:DF:EB:9D:A8:E4:8E:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DiEAh0bAujBa1VXQ9_rnajkjjE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:d8:23:25:b3:06:8f:35:db:2b:5a:9c:a9:16:21:ad:ea:5d:
         c9:43:63:c2:1d:ce:fa:1b:e9:b7:76:d5:8e:e1:a5:eb:43:c7:
         a5:ab:28:dc:27:43:e6:66:04:e9:94:38:3e:04:0d:ad:ef:f6:
         01:28:97:3e:50:a7:5c:3c:c5:e1:0a:0b:0b:36:c1:09:37:88:
         31:58:87:b4:6c:4a:68:3f:d3:ac:ca:d0:9a:5e:29:a6:72:a8:
         cb:c8:b6:b8:bd:f2:5d:fe:6a:a7:05:1c:00:5b:71:d6:36:1a:
         4c:e9:b1:68:a5:b9:6d:c4:fd:29:24:c2:85:d6:69:85:30:24:
         32:cb:19:05:38:3c:8a:f3:a8:d8:3c:5a:a0:b7:f0:d1:3a:93:
         cd:be:fe:ef:19:2f:a3:79:2b:63:ca:15:22:24:56:e5:09:e0:
         b0:24:61:1a:e9:06:81:d7:0c:57:86:c2:43:91:17:f6:6e:81:
         10:60:b5:e1:d5:90:03:e0:0b:e2:61:70:62:af:20:d8:26:a8:
         2c:61:c6:4c:99:6f:24:86:8a:bd:c9:2c:b1:00:b3:65:99:da:
         f1:98:0c:73:0f:d1:9b:d4:6d:a6:24:6a:a7:5a:bb:c7:53:d8:
         09:26:64:67:8f:66:90:1e:8e:09:cc:52:f7:27:ed:ac:ab:eb:
         ce:a7:95:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:19:54 2026 by rpki-client