Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft
File:                     _sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft (raw, json)
Hash identifier:          SjXzANApC0sp7IDK9CWgvrSB/xyocm3gMUWPx03n9x0=
Subject key identifier:   8F:D8:90:38:12:6A:48:F0:99:0D:22:13:41:28:F0:A3:7D:E3:9D:86
Authority key identifier: FE:C3:5D:4F:2F:2D:24:7E:A0:8C:4A:01:17:D3:28:E4:E8:ED:F1:52
Certificate issuer:       /CN=fec35d4f2f2d247ea08c4a0117d328e4e8edf152
Certificate serial:       019D2771E25698AE1A722224F67DB98B73D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft
Manifest number:          188A
Signing time:             Thu 26 Mar 2026 00:01:07 +0000
Manifest this update:     Thu 26 Mar 2026 00:01:07 +0000
Manifest next update:     Fri 27 Mar 2026 00:01:07 +0000
Files and hashes:         1: _sNdTy8tJH6gjEoBF9Mo5Ojt8VI.crl (hash: RrBbsrKoNS19r1e/epD/XMCuxzqFYW00oDeVynEtoGI=)
                          2: ffUc8_MFuN5GuGa6IoP-AwjDMng.roa (hash: KNgb7b/tPa4J6bvxUtY9aR+BXwQn3PEB0DvOOi2I63k=)
                          3: sM3tnsiZQn2B9YY5mcbZ8QMKhas.asa (hash: 8b+A4QTkJNsWBcHqmtMFMLgJOAkXA+/IFEAZETTjwiI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:71:e2:56:98:ae:1a:72:22:24:f6:7d:b9:8b:73:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fec35d4f2f2d247ea08c4a0117d328e4e8edf152
        Validity
            Not Before: Mar 26 00:01:07 2026 GMT
            Not After : Mar 27 00:01:07 2026 GMT
        Subject: CN=8fd89038126a48f0990d22134128f0a37de39d86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:72:23:b2:44:f4:59:c2:4b:18:1b:0b:72:48:
                    45:4c:bc:d0:6d:f0:63:5d:66:9f:47:f3:49:76:11:
                    00:5e:8c:c7:56:ce:0d:61:43:22:23:6d:35:80:1f:
                    9b:41:54:e1:4d:4c:26:0c:d1:d5:3f:03:5f:ec:38:
                    20:04:89:3e:33:13:35:51:06:30:fb:f6:a0:f4:35:
                    17:fe:43:c7:41:95:6e:23:b1:1e:fe:e8:89:b6:f0:
                    33:92:81:a9:a9:c2:da:60:56:60:ab:d8:d1:ed:88:
                    31:6f:95:73:6b:ec:7e:e3:01:f3:0d:c1:0d:4b:5f:
                    71:fb:21:58:b5:62:0b:7d:57:e4:29:3f:51:1e:82:
                    0b:c5:68:7f:c0:d2:ec:87:b2:64:ca:64:eb:9b:16:
                    f7:01:c5:57:d2:fa:9d:87:af:5d:ac:c3:60:fa:93:
                    72:ff:66:1f:04:1c:59:0e:a9:9d:50:34:3a:88:80:
                    6a:84:11:01:3c:bc:99:86:b3:28:49:a9:5f:3c:fd:
                    0d:93:14:9d:72:a2:26:ef:2c:10:de:96:bd:4b:87:
                    fa:b0:94:c5:1d:ca:4f:a0:44:37:92:df:49:a1:81:
                    2a:fe:14:4e:2f:25:4b:e6:47:4e:81:2f:aa:3b:99:
                    9f:ba:44:49:d9:30:e6:e5:8e:46:19:20:42:2d:fd:
                    74:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:D8:90:38:12:6A:48:F0:99:0D:22:13:41:28:F0:A3:7D:E3:9D:86
            X509v3 Authority Key Identifier:
                keyid:FE:C3:5D:4F:2F:2D:24:7E:A0:8C:4A:01:17:D3:28:E4:E8:ED:F1:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:f6:92:20:94:cb:af:12:95:3c:05:ec:42:b8:3b:9c:6c:56:
         d8:1f:af:50:db:21:86:27:6d:e6:00:53:3e:22:c1:f2:98:f4:
         d0:d6:55:18:28:49:7d:60:aa:35:44:cb:1c:86:19:b0:27:95:
         78:5f:c0:a4:8d:24:36:85:c8:0c:a9:b4:90:92:d2:a2:8d:45:
         4f:66:16:e9:d8:c5:56:4c:3a:5e:0c:60:45:bf:68:12:29:c9:
         24:78:c1:af:be:f0:3f:1c:35:12:0e:cd:ea:a4:9a:81:ff:5d:
         d8:02:05:b2:42:7d:25:52:39:9c:94:a9:ba:00:96:c0:4b:2c:
         4a:11:ea:f5:ce:3b:0b:f2:b5:9e:0f:3d:9d:a1:8a:5e:6c:35:
         96:33:95:63:f7:cd:d2:b5:16:4e:4b:52:73:76:8b:1d:46:51:
         de:56:14:e1:88:60:7a:27:a5:b4:3f:9a:68:ce:cf:a8:c5:07:
         88:25:95:50:d7:4b:e1:43:0c:31:12:2e:d4:31:ba:b1:d6:cc:
         68:ad:df:b8:a9:a8:58:d7:3d:64:87:99:d2:dc:08:02:42:f7:
         2c:48:de:a0:ff:3b:d5:90:72:26:5a:18:1d:d7:8e:01:fb:f7:
         fe:91:79:98:8d:28:f6:62:0c:66:f8:da:95:0c:f6:01:78:d8:
         43:a8:0d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:31:15 2026 by rpki-client