Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/0188da-3655-482d-881b-febbc4a3b45b/1/v6v1pHSv5yEjMWcOgx4RnaOPKE8.mft
File:                     v6v1pHSv5yEjMWcOgx4RnaOPKE8.mft (raw, json)
Hash identifier:          Jjsuaw9Lsrx5FRPWTkqyWNNaRJCWlMw/yinFEjdmXro=
Subject key identifier:   68:21:AF:88:81:47:C3:55:E9:C2:9B:99:CA:6B:56:27:09:E7:BF:F8
Authority key identifier: BF:AB:F5:A4:74:AF:E7:21:23:31:67:0E:83:1E:11:9D:A3:8F:28:4F
Certificate issuer:       /CN=bfabf5a474afe7212331670e831e119da38f284f
Certificate serial:       019D29609C4BCCD4A0F96B91425C000F2BA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v6v1pHSv5yEjMWcOgx4RnaOPKE8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/0188da-3655-482d-881b-febbc4a3b45b/1/v6v1pHSv5yEjMWcOgx4RnaOPKE8.mft
Manifest number:          188A
Signing time:             Thu 26 Mar 2026 09:01:30 +0000
Manifest this update:     Thu 26 Mar 2026 09:01:30 +0000
Manifest next update:     Fri 27 Mar 2026 09:01:30 +0000
Files and hashes:         1: v6v1pHSv5yEjMWcOgx4RnaOPKE8.crl (hash: uDCTgztAcVKGWIiZoIaLbWZYLifgDorw61Hx/GrpkUA=)
                          2: yOtgoQUSDDTF6dzBLbgn19zbD20.roa (hash: FLmTb8uB8aThQGwMLCsGAZe9JiC1Qd3BPfuyYTN+2do=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/0188da-3655-482d-881b-febbc4a3b45b/1/v6v1pHSv5yEjMWcOgx4RnaOPKE8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/0188da-3655-482d-881b-febbc4a3b45b/1/v6v1pHSv5yEjMWcOgx4RnaOPKE8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v6v1pHSv5yEjMWcOgx4RnaOPKE8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:60:9c:4b:cc:d4:a0:f9:6b:91:42:5c:00:0f:2b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfabf5a474afe7212331670e831e119da38f284f
        Validity
            Not Before: Mar 26 09:01:30 2026 GMT
            Not After : Mar 27 09:01:30 2026 GMT
        Subject: CN=6821af888147c355e9c29b99ca6b562709e7bff8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3a:9e:fd:8e:58:51:08:44:6e:22:90:11:bc:
                    6d:70:1f:08:08:6c:9a:b7:b8:1d:86:4c:33:df:6e:
                    ff:62:0d:3c:ad:08:9f:e6:51:b5:6b:97:0d:85:53:
                    45:d2:a6:3c:da:a3:d5:33:3e:ff:0c:73:41:d7:11:
                    4f:3e:93:8c:57:03:db:0a:fc:e7:8a:10:67:c7:c2:
                    75:43:0e:52:06:ec:57:a2:80:65:19:ab:c8:91:0b:
                    7d:c4:50:fe:53:53:fa:20:7d:7e:b8:fa:4b:fa:f7:
                    7f:62:9b:71:bb:cd:a7:1f:43:78:ee:5e:3d:2d:32:
                    7f:80:d3:37:45:f7:8c:dc:15:e7:d5:28:3d:76:c8:
                    ae:7a:68:53:de:8f:2b:17:64:41:3a:33:c9:09:57:
                    e2:9b:92:dd:2b:3b:79:b0:bf:ac:9e:14:28:76:f6:
                    49:37:48:e3:78:8b:07:e0:03:86:c6:4a:47:8f:53:
                    ff:7a:26:71:c0:59:3a:a1:fa:a6:86:88:ec:9b:5e:
                    59:54:13:ec:e4:30:8b:43:d6:66:73:24:fd:8c:6c:
                    83:b4:4b:40:17:f6:5a:c9:4b:1a:5d:65:ec:11:0f:
                    b4:83:22:91:69:f3:56:98:d0:13:2e:8e:34:5c:f2:
                    9b:10:4c:96:5a:3f:60:1d:7b:d7:a9:99:72:27:8f:
                    60:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:21:AF:88:81:47:C3:55:E9:C2:9B:99:CA:6B:56:27:09:E7:BF:F8
            X509v3 Authority Key Identifier:
                keyid:BF:AB:F5:A4:74:AF:E7:21:23:31:67:0E:83:1E:11:9D:A3:8F:28:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6v1pHSv5yEjMWcOgx4RnaOPKE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0188da-3655-482d-881b-febbc4a3b45b/1/v6v1pHSv5yEjMWcOgx4RnaOPKE8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0188da-3655-482d-881b-febbc4a3b45b/1/v6v1pHSv5yEjMWcOgx4RnaOPKE8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:d8:f2:8d:45:7b:65:4e:0f:68:cd:57:92:06:b0:6a:53:6f:
         26:ae:67:c4:9f:16:b7:5f:9e:5c:bf:6c:47:31:94:ba:48:24:
         0d:bd:94:c2:d3:b3:a7:fd:3e:f1:78:50:84:17:95:94:50:e4:
         a4:93:20:67:89:fc:bc:c4:d7:c0:d8:c3:e3:da:85:18:1d:16:
         e3:01:8e:37:6d:f5:a3:e1:ab:03:fb:a5:9e:6e:34:a0:49:ed:
         fc:3c:e9:68:8d:b9:a1:42:3f:cb:d6:5e:cd:2d:39:cc:64:5e:
         84:43:30:74:6b:36:c7:0c:02:0a:8d:ce:8b:ca:f1:ca:98:fe:
         9c:86:65:44:95:fd:73:c4:05:29:f1:9e:ae:68:d0:6a:92:9d:
         1d:aa:1a:9a:4a:e4:7c:94:09:c0:41:ea:eb:bb:8d:9c:6c:72:
         5b:83:c7:50:fe:fb:c1:35:47:a8:5c:ab:7e:b1:7c:25:73:ac:
         06:52:07:b3:15:79:88:e1:f0:da:ec:ab:72:4a:0f:17:88:ba:
         5b:07:16:ca:66:31:92:a7:d4:bb:63:e6:57:29:de:68:24:13:
         84:39:81:1e:14:04:66:62:f5:cb:34:7b:15:fb:97:4a:05:96:
         1f:ee:7f:9c:81:99:36:d3:95:17:06:5e:b3:4d:7c:50:3b:ab:
         b3:49:ec:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:21:21 2026 by rpki-client