Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft
File:                     Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft (raw, json)
Hash identifier:          chD68LXXoyfD5gBZZGq44e6amE4F1TOlhPOzy2/8O8I=
Subject key identifier:   14:6D:45:FE:D5:94:86:52:C5:A4:A9:D4:31:61:6B:B8:2C:45:11:2C
Authority key identifier: 36:6F:A6:4C:2B:BA:A7:25:AC:26:A4:FF:61:80:26:6F:AE:D2:08:A3
Certificate issuer:       /CN=366fa64c2bbaa725ac26a4ff6180266faed208a3
Certificate serial:       019D3307E21D0F1CE2B890564CA0E6DF6154
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nm-mTCu6pyWsJqT_YYAmb67SCKM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft
Manifest number:          188A
Signing time:             Sat 28 Mar 2026 06:00:47 +0000
Manifest this update:     Sat 28 Mar 2026 06:00:47 +0000
Manifest next update:     Sun 29 Mar 2026 06:00:47 +0000
Files and hashes:         1: Nm-mTCu6pyWsJqT_YYAmb67SCKM.crl (hash: 4zlldXULfiFucqJ1p1AYWRWBe9EKLhLkzxY3gu+isFo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nm-mTCu6pyWsJqT_YYAmb67SCKM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Mar 2026 00:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:33:07:e2:1d:0f:1c:e2:b8:90:56:4c:a0:e6:df:61:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=366fa64c2bbaa725ac26a4ff6180266faed208a3
        Validity
            Not Before: Mar 28 06:00:47 2026 GMT
            Not After : Mar 29 06:00:47 2026 GMT
        Subject: CN=146d45fed5948652c5a4a9d431616bb82c45112c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:74:57:61:b0:c0:af:b9:ae:cc:55:4e:5a:27:
                    a9:01:1c:16:59:3d:07:88:cb:b8:01:3f:1b:6e:cb:
                    61:1f:79:56:44:0a:fb:17:7f:10:55:61:0f:f7:62:
                    1c:d7:77:24:f1:75:64:cf:14:f9:a5:d9:e5:99:bd:
                    df:1f:19:24:14:5c:eb:77:60:93:f8:7b:cb:b3:89:
                    e0:be:d5:fe:cd:ef:a6:92:d2:36:bf:3a:64:12:fe:
                    b1:38:a5:73:57:45:0d:37:cb:f6:5a:24:ae:99:18:
                    2b:32:0d:30:3b:1e:5d:8a:0c:70:bb:9d:75:ea:24:
                    ec:34:2b:a4:b0:52:05:01:50:65:aa:eb:bb:1f:93:
                    4a:c1:e2:83:f0:4b:04:a4:54:78:06:e9:70:df:63:
                    d6:7e:58:c3:0c:48:4f:b6:07:17:4b:c8:24:f8:ea:
                    f0:68:4b:b0:dc:fc:89:f8:69:29:bf:58:98:57:0f:
                    c4:f0:f6:07:82:27:c2:42:8e:dd:f6:a7:89:76:9b:
                    98:da:4b:42:a5:e7:53:86:08:d6:64:41:48:a7:97:
                    c6:60:8a:09:cb:88:62:80:d5:0b:76:13:97:4e:06:
                    87:cf:ab:2b:1d:48:89:2a:0e:a7:56:1a:71:b2:cd:
                    71:ca:c1:60:76:86:39:29:d1:97:51:41:40:7f:ec:
                    a2:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:6D:45:FE:D5:94:86:52:C5:A4:A9:D4:31:61:6B:B8:2C:45:11:2C
            X509v3 Authority Key Identifier:
                keyid:36:6F:A6:4C:2B:BA:A7:25:AC:26:A4:FF:61:80:26:6F:AE:D2:08:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nm-mTCu6pyWsJqT_YYAmb67SCKM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:66:77:a6:2b:f2:bc:74:46:06:4c:3d:76:99:82:29:de:94:
         00:88:21:aa:35:0d:a4:55:9e:5e:9e:19:07:47:d8:df:44:19:
         01:86:0b:0f:d8:69:97:b0:36:d8:ac:29:2d:7c:7d:16:9a:47:
         83:cc:0e:e9:59:32:2f:b1:89:aa:3a:88:34:a2:49:43:48:fc:
         02:f0:8d:1c:b1:fa:fd:e2:4c:7d:a6:1c:8a:fe:a7:16:0f:07:
         ba:36:e7:63:38:23:b3:c7:53:1b:08:d8:1c:0f:48:53:1e:f6:
         48:a5:c1:b9:f7:80:42:79:2c:f6:40:3a:1d:89:74:44:a4:24:
         ca:a3:0c:94:40:cd:a0:6a:7e:93:b4:0e:8c:b2:32:8e:19:c0:
         4e:da:63:fa:62:63:cb:17:58:a1:c9:46:26:83:0b:d9:38:59:
         ef:d8:fd:f6:f6:b7:83:99:ef:74:ee:16:cb:80:d5:51:b0:7f:
         30:1a:c8:19:81:25:0d:0d:67:5d:85:f5:e7:79:1a:51:75:cc:
         8c:36:37:30:15:43:70:ef:0e:f5:41:fc:e3:16:b0:ce:2f:8f:
         ad:c6:e8:db:41:78:8a:c6:7c:68:f1:96:ac:a5:64:4c:d3:99:
         6b:bc:b5:6b:ce:49:e9:b9:01:3a:e6:ba:3b:29:7e:31:65:7c:
         b0:4f:ae:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:19:48 2026 by rpki-client