Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/JwKQ9fMfI43z6PO9_MBXUcwvGSw.mft
File:                     JwKQ9fMfI43z6PO9_MBXUcwvGSw.mft (raw, json)
Hash identifier:          uEHJaaaX9xcarJH9wqK32g+qKLmxjc9qFMCPUgVXv88=
Subject key identifier:   B1:62:DA:91:E2:39:30:C7:0F:BE:FF:FF:8D:DD:1E:B9:FE:E9:67:9F
Authority key identifier: 27:02:90:F5:F3:1F:23:8D:F3:E8:F3:BD:FC:C0:57:51:CC:2F:19:2C
Certificate issuer:       /CN=270290f5f31f238df3e8f3bdfcc05751cc2f192c
Certificate serial:       019D284DC68FCD7DC37EBB707BFC4307FB01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JwKQ9fMfI43z6PO9_MBXUcwvGSw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/JwKQ9fMfI43z6PO9_MBXUcwvGSw.mft
Manifest number:          188A
Signing time:             Thu 26 Mar 2026 04:01:18 +0000
Manifest this update:     Thu 26 Mar 2026 04:01:18 +0000
Manifest next update:     Fri 27 Mar 2026 04:01:18 +0000
Files and hashes:         1: 3xiDzGgK4e9ceC4u7RUWp0fz_SM.roa (hash: DZHEO3sSIJCigbbB46icKw7YPH6Y87vFoZ5HjcDSncs=)
                          2: 9pGhFTVH5XN8vbhHpytqSGENvrk.roa (hash: LhRnX4VDOkccbXWuT427U2ER9cwZLZ0V0MGvKtu8Yyg=)
                          3: JwKQ9fMfI43z6PO9_MBXUcwvGSw.crl (hash: dyTt8WJKnP8RaavTkXExbE30EcIyKDWLcprRihGRnKA=)
                          4: eEZUpEtjObJ9yeYuMAQAw_0jXUU.roa (hash: nuE7s/MKLf67lp3yMJo4q3u/cNq9UefHf0q9u+Y32mI=)
                          5: nNax3jH-aHbv8fUxbVL4yA04BCc.roa (hash: fqwvBl3p3PjrVK5KfWPgoqVaATaBD26mauAzKvmJgv8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/JwKQ9fMfI43z6PO9_MBXUcwvGSw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/JwKQ9fMfI43z6PO9_MBXUcwvGSw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JwKQ9fMfI43z6PO9_MBXUcwvGSw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 04:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4d:c6:8f:cd:7d:c3:7e:bb:70:7b:fc:43:07:fb:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=270290f5f31f238df3e8f3bdfcc05751cc2f192c
        Validity
            Not Before: Mar 26 04:01:18 2026 GMT
            Not After : Mar 27 04:01:18 2026 GMT
        Subject: CN=b162da91e23930c70fbeffff8ddd1eb9fee9679f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:28:88:22:0b:a8:c3:79:79:9c:bb:3e:ab:4c:
                    d9:b4:ec:bc:92:74:b1:32:4a:44:ec:eb:a7:7b:67:
                    b5:d4:18:a2:10:ed:7f:3f:d3:5c:b3:16:6d:32:ef:
                    24:30:8d:41:88:cb:67:2e:a9:c2:9f:c6:5f:df:b4:
                    11:48:eb:41:40:00:fe:0a:7f:2e:62:58:ab:4b:29:
                    15:a4:4f:ce:e7:e8:22:83:b3:77:4e:4b:59:ec:a0:
                    73:ff:65:bd:15:31:17:49:b3:2c:7e:10:c0:44:71:
                    4a:a2:59:21:de:72:bd:07:90:18:c8:d9:a1:93:e4:
                    2d:56:66:3d:b8:c4:cb:61:9b:31:52:c3:28:e5:44:
                    28:2d:77:f2:30:7e:19:d8:ae:cf:b5:cf:75:13:05:
                    24:84:95:de:c2:e3:f1:95:ac:f8:e3:01:91:70:1a:
                    01:f4:f0:55:4c:3f:c9:4b:a7:c1:cb:1a:fe:dd:c3:
                    2d:61:a6:81:9b:fc:c0:c7:9e:c7:05:df:a2:b6:5f:
                    3f:cd:93:1c:52:be:ed:49:bd:25:99:de:a6:3a:78:
                    bc:e1:f6:9e:92:fa:73:07:c5:97:cb:b8:94:4b:66:
                    b2:0c:8c:8a:9c:e8:4c:4d:94:cc:90:27:2c:4a:dd:
                    39:7a:89:88:b6:d0:36:ec:b2:92:23:7e:ec:40:69:
                    db:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:62:DA:91:E2:39:30:C7:0F:BE:FF:FF:8D:DD:1E:B9:FE:E9:67:9F
            X509v3 Authority Key Identifier:
                keyid:27:02:90:F5:F3:1F:23:8D:F3:E8:F3:BD:FC:C0:57:51:CC:2F:19:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwKQ9fMfI43z6PO9_MBXUcwvGSw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/JwKQ9fMfI43z6PO9_MBXUcwvGSw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/JwKQ9fMfI43z6PO9_MBXUcwvGSw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:4b:c3:4c:98:01:02:92:37:1e:8e:b9:37:2f:d0:13:a4:1c:
         26:8b:58:2b:f2:19:41:52:33:fb:0f:a3:97:0c:65:a3:0e:9a:
         1c:c7:66:7a:4e:5e:20:7d:af:ea:97:23:9b:94:6d:84:ca:19:
         fa:0a:1f:01:0e:91:d1:bc:01:6b:2a:4b:17:38:a4:24:bf:53:
         83:fc:77:9c:51:e6:f5:0e:38:38:eb:36:15:ea:85:9f:ff:e6:
         22:e8:07:5c:ae:2f:da:21:46:07:0a:19:bd:22:b0:31:c6:ac:
         46:d8:0d:88:61:4b:3a:7f:5a:e2:a3:2f:4c:21:89:45:20:f5:
         ac:f2:82:69:c4:38:a5:1d:c7:33:ce:b9:4f:7b:aa:2e:17:d6:
         2b:a4:a3:e0:08:6e:3a:4d:08:5d:9e:59:5c:8d:90:6c:ab:15:
         df:59:c3:e7:58:b9:f2:a5:2e:81:11:d9:f4:c2:d7:88:50:6a:
         4d:5b:75:61:1d:a3:84:54:f6:66:46:ae:07:e4:87:5c:6c:1a:
         b7:9a:6d:3c:57:12:f7:8d:41:5c:9e:ea:4c:cc:32:1e:16:b7:
         9e:a8:fb:74:7d:6d:de:e0:36:a5:af:23:72:a2:1f:6c:e7:c2:
         0a:43:92:35:9e:ff:5f:22:b1:87:ee:fd:06:5f:3d:54:78:d2:
         e7:ac:76:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:26:27 2026 by rpki-client