Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/wFIM7LolHNN83zxNWrA2JVIruqw.mft
File:                     wFIM7LolHNN83zxNWrA2JVIruqw.mft (raw, json)
Hash identifier:          nu538YFf94vfOGmC8HS0Oso/EVWr2QMJH4tu9M2gowg=
Subject key identifier:   B8:92:68:E8:98:96:28:FB:2A:60:98:C7:FF:5A:8D:66:8C:71:83:79
Authority key identifier: C0:52:0C:EC:BA:25:1C:D3:7C:DF:3C:4D:5A:B0:36:25:52:2B:BA:AC
Certificate issuer:       /CN=c0520cecba251cd37cdf3c4d5ab03625522bbaac
Certificate serial:       019D265F315AD74EFBDA292F54F6128BDD62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wFIM7LolHNN83zxNWrA2JVIruqw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/wFIM7LolHNN83zxNWrA2JVIruqw.mft
Manifest number:          188A
Signing time:             Wed 25 Mar 2026 19:01:05 +0000
Manifest this update:     Wed 25 Mar 2026 19:01:05 +0000
Manifest next update:     Thu 26 Mar 2026 19:01:05 +0000
Files and hashes:         1: 36T8Tn4Sup8fmQcjWCy26dR6re0.roa (hash: SG3LgOxnqBUaF6P4Vt2PLcBh7paYsvxM9iIaS6ERJJ0=)
                          2: 5QI4fVyPMm0-K60PBKXaZ8ZbhYY.roa (hash: PJ8hWL8fv95vnL+98n7N2nc5zp7ZDQ14+kWYLI42xqM=)
                          3: D3Scbfl6fBr15c-mbPSi-zu0HHY.roa (hash: GocWeJMCxjrHRiAM5S4dU7oou7wP+fPBVESKdHPj5Io=)
                          4: wFIM7LolHNN83zxNWrA2JVIruqw.crl (hash: un6ds4UXuXm6Zaxj6BhItS7V5KZGZmDWjw1KUN1L/rE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/wFIM7LolHNN83zxNWrA2JVIruqw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/wFIM7LolHNN83zxNWrA2JVIruqw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wFIM7LolHNN83zxNWrA2JVIruqw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 19:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:31:5a:d7:4e:fb:da:29:2f:54:f6:12:8b:dd:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0520cecba251cd37cdf3c4d5ab03625522bbaac
        Validity
            Not Before: Mar 25 19:01:05 2026 GMT
            Not After : Mar 26 19:01:05 2026 GMT
        Subject: CN=b89268e8989628fb2a6098c7ff5a8d668c718379
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d0:7a:0d:ec:2f:e4:04:98:26:03:23:c5:61:
                    67:6f:3f:b0:f4:5b:6e:18:a6:cc:3d:f0:a5:1e:86:
                    01:2a:45:01:74:43:9b:70:22:9b:3e:22:73:6e:5b:
                    44:ae:f6:af:44:9e:7c:3a:44:8f:e0:ca:66:42:3c:
                    14:80:9b:c8:51:06:f8:4e:b8:12:c1:6f:29:c8:16:
                    77:e7:76:e2:75:bc:38:b1:18:43:0f:e7:80:2c:76:
                    04:9e:42:34:73:79:cb:c9:35:66:82:5f:0d:c3:b5:
                    8f:41:f5:f0:fd:43:00:8e:11:1f:9f:f8:5e:d8:34:
                    31:74:69:38:82:ef:5f:ac:7b:59:d2:45:c9:78:eb:
                    e2:8b:fa:e9:2e:f3:a1:3c:96:e3:04:ae:ab:b6:ff:
                    b0:36:9a:ac:14:5e:9d:4e:64:9b:2f:76:89:f8:23:
                    5c:c7:87:07:f4:93:b3:ca:15:d3:2d:f2:41:6f:d6:
                    e1:98:6a:10:95:fe:9a:ff:3b:c7:a9:5c:39:74:59:
                    10:a1:9f:70:ae:5f:78:69:29:e0:9f:36:8e:bd:0d:
                    2d:54:80:ed:f7:02:4e:44:71:d6:f2:c4:97:38:63:
                    6c:f3:1d:02:a9:20:de:d8:c4:86:90:65:14:37:3e:
                    c7:84:41:10:37:a0:bd:3d:33:94:da:11:af:02:04:
                    81:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:92:68:E8:98:96:28:FB:2A:60:98:C7:FF:5A:8D:66:8C:71:83:79
            X509v3 Authority Key Identifier:
                keyid:C0:52:0C:EC:BA:25:1C:D3:7C:DF:3C:4D:5A:B0:36:25:52:2B:BA:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wFIM7LolHNN83zxNWrA2JVIruqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/wFIM7LolHNN83zxNWrA2JVIruqw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/wFIM7LolHNN83zxNWrA2JVIruqw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:eb:5b:4d:d4:0f:7a:0c:41:39:d8:15:f7:63:ec:1d:f5:a5:
         b6:e9:dd:ad:d2:a9:cf:00:25:1f:45:9a:eb:59:c4:ed:2b:92:
         07:9d:e5:14:2c:0a:c9:3a:41:0f:11:8b:b2:8b:b9:93:36:e3:
         c7:b8:3b:ba:13:63:05:8e:2b:ee:59:43:63:0b:cd:90:fe:e3:
         58:d1:86:64:2a:b4:8f:30:96:ac:dc:4a:c1:df:08:c2:92:df:
         6c:c7:c0:e8:57:dd:33:73:40:5f:cd:f3:5e:6c:23:28:c9:12:
         c5:ac:55:b5:a8:62:bc:22:b9:c0:8b:fc:19:31:ea:54:ab:22:
         12:14:43:7e:78:41:f7:bf:30:e3:e1:b7:4f:06:64:99:f2:6c:
         2a:98:e2:14:04:6e:e6:fb:83:e7:7d:1a:a9:c3:8b:59:1b:90:
         3f:f8:c7:29:8e:ef:ce:3d:ec:70:26:c7:46:80:6f:05:e8:e3:
         46:52:86:ab:ff:a2:2e:4f:33:a8:48:6d:db:9e:b9:90:74:77:
         d1:e3:b9:ed:cf:d1:a3:15:3c:77:bf:04:e4:66:d7:14:55:18:
         c4:f9:1c:11:7e:d5:b9:15:a0:28:ce:40:3b:e9:ce:4a:6d:91:
         cc:f9:4f:9d:fc:89:52:b9:80:62:ea:0f:0b:a1:10:a3:b0:0b:
         a7:65:21:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:36:39 2026 by rpki-client