Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/U1glzov1RBcCgvcgokhBQVaLDn0.mft
File:                     U1glzov1RBcCgvcgokhBQVaLDn0.mft (raw, json)
Hash identifier:          2xYYLhOX/ZLdijrB/8SGv00qZbdbFrPbYFCmjbNDVUk=
Subject key identifier:   29:EB:12:2B:30:8D:2D:C1:81:EE:23:56:2B:54:0C:AF:F4:87:9C:22
Authority key identifier: 53:58:25:CE:8B:F5:44:17:02:82:F7:20:A2:48:41:41:56:8B:0E:7D
Certificate issuer:       /CN=535825ce8bf544170282f720a2484141568b0e7d
Certificate serial:       019D2884689A604BC65FF2A1A343CD9BE3D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U1glzov1RBcCgvcgokhBQVaLDn0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/U1glzov1RBcCgvcgokhBQVaLDn0.mft
Manifest number:          188B
Signing time:             Thu 26 Mar 2026 05:00:59 +0000
Manifest this update:     Thu 26 Mar 2026 05:00:59 +0000
Manifest next update:     Fri 27 Mar 2026 05:00:59 +0000
Files and hashes:         1: 868i0cEmWAdaQ1srLCAkC6Q7hMo.roa (hash: bgPNU3tWKyMlZeeAEm+kUMGWGR8Zu5gAsJkW3Dggnbc=)
                          2: U1glzov1RBcCgvcgokhBQVaLDn0.crl (hash: UcmxPymZ27qVbSM/FKqPOUVTRgmf9XRxoJecZNvuCco=)
                          3: e-qDMdTbtmiNw1eY99Zvxji3790.roa (hash: rAjNKwDttf142Mu+7uwfX/OFpQYYqgzVqAG785xMd70=)
                          4: j86y_ItGPyrknhpKFaA3OkNhDHQ.roa (hash: cX4ebinCqmLGTvDjfCih1gjKANEWYIZmpmYzsqgMTHY=)
                          5: vS7Af9oIr8_TE8vST7hJpgUbQiA.roa (hash: l/38QxwCvvrMgly58So5QMOq8vU0cNnGu2QIK7hxaZg=)
                          6: xLZ3J1KMb8yQrN6g6__lPacbUAQ.roa (hash: 3oyRoMLYdGZGUobI7quUmcksz3zT3JdoMcdxUp1s5Fw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/U1glzov1RBcCgvcgokhBQVaLDn0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/U1glzov1RBcCgvcgokhBQVaLDn0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U1glzov1RBcCgvcgokhBQVaLDn0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:84:68:9a:60:4b:c6:5f:f2:a1:a3:43:cd:9b:e3:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=535825ce8bf544170282f720a2484141568b0e7d
        Validity
            Not Before: Mar 26 05:00:59 2026 GMT
            Not After : Mar 27 05:00:59 2026 GMT
        Subject: CN=29eb122b308d2dc181ee23562b540caff4879c22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:82:3e:11:b0:8e:55:a9:12:bb:7f:25:f5:56:
                    1d:ae:b8:48:66:b8:a5:a1:1c:96:2c:36:ee:8e:09:
                    08:2e:94:f1:1a:c3:a0:ec:46:16:8d:b0:53:2b:ed:
                    90:94:71:5a:d9:13:b2:a5:9f:7c:31:13:8d:49:5c:
                    07:f9:52:71:b9:61:a8:f5:ce:cc:58:cf:b8:aa:d0:
                    b5:80:b7:dc:32:87:91:a3:ea:5d:6a:91:f4:44:a3:
                    26:eb:6f:2d:b0:ad:49:fd:ef:80:9a:2e:89:6d:0f:
                    e0:1f:fc:91:89:ea:7b:22:6b:77:e7:d3:8c:fa:a4:
                    ca:0d:80:ba:e8:58:93:9d:a1:15:71:52:8e:19:5d:
                    88:85:46:1c:23:cb:62:6a:a5:a3:1d:e5:9e:ab:bc:
                    c8:a5:da:d0:84:c1:24:b1:b0:e9:f6:b6:99:cc:70:
                    0e:fb:8f:c0:33:fb:52:64:1e:cc:9a:2a:cb:d8:15:
                    68:b3:01:ea:54:3d:a1:08:45:8d:59:d0:8f:b0:37:
                    bb:97:6c:61:50:06:de:e3:e9:6f:41:db:df:1c:25:
                    15:85:44:b1:8e:d3:63:47:fb:08:8b:bf:a1:c2:0d:
                    da:49:b0:71:8d:9b:33:5e:be:f2:8b:e5:ef:25:6d:
                    5e:b1:9c:88:83:bc:b0:ce:19:db:48:d4:cb:5c:91:
                    ff:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:EB:12:2B:30:8D:2D:C1:81:EE:23:56:2B:54:0C:AF:F4:87:9C:22
            X509v3 Authority Key Identifier:
                keyid:53:58:25:CE:8B:F5:44:17:02:82:F7:20:A2:48:41:41:56:8B:0E:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1glzov1RBcCgvcgokhBQVaLDn0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/U1glzov1RBcCgvcgokhBQVaLDn0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/U1glzov1RBcCgvcgokhBQVaLDn0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:e0:6e:5d:6c:10:7a:8e:39:12:2c:5d:12:a8:6e:f0:87:fa:
         d3:1f:57:e1:4c:ec:48:8e:fa:7d:38:52:57:74:13:9c:b8:0b:
         a8:11:9c:de:db:b0:16:73:50:65:6b:7c:33:1d:38:d4:ad:1e:
         0d:6e:68:52:e7:40:7a:69:c7:ae:0c:58:a8:33:58:09:0b:c5:
         b2:c8:fc:47:58:5f:50:51:dc:5d:b1:7d:09:68:7c:8a:77:18:
         ef:81:8e:e5:ef:2a:c7:b4:e2:12:c8:47:5e:0a:c3:30:9a:e8:
         6a:c8:de:b1:47:bc:93:01:4a:53:2b:ba:b5:16:3e:0f:e0:d6:
         63:93:d9:84:cd:fa:31:b0:3d:6c:0f:f2:12:31:e2:73:8a:21:
         0a:51:d0:9b:5c:fa:3c:62:74:88:49:f1:09:13:37:ae:84:ef:
         6a:47:1c:ba:ee:eb:72:1d:60:04:fb:7c:b9:6f:09:33:7f:29:
         e6:2d:43:56:35:0e:c0:a3:8f:90:de:8b:a0:8a:d1:17:42:61:
         c6:ef:9c:c4:c3:dc:c6:3e:66:7e:cf:af:09:23:e5:48:a8:0b:
         b7:7f:f3:19:b4:66:b3:af:3e:b4:4d:ec:77:3b:f6:d3:5e:ac:
         76:46:90:6d:0a:9c:7a:ae:54:1a:4f:36:f2:c5:63:74:9e:3d:
         f3:21:de:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:30:44 2026 by rpki-client