Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.mft
File:                     oaLWN8sKzPhyH0PiZs4hP47d0mo.mft (raw, json)
Hash identifier:          7HiI1hWr/bLw0QkwcwUt9lppOLLdQ/Rg89tQu6AJDz4=
Subject key identifier:   FA:B8:56:AA:D6:5F:1B:66:47:E7:83:D6:C8:6B:92:1C:24:CD:2D:F0
Authority key identifier: A1:A2:D6:37:CB:0A:CC:F8:72:1F:43:E2:66:CE:21:3F:8E:DD:D2:6A
Certificate issuer:       /CN=a1a2d637cb0accf8721f43e266ce213f8eddd26a
Certificate serial:       019D26CD44759CB9297BDF4F17381AA3A76C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oaLWN8sKzPhyH0PiZs4hP47d0mo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.mft
Manifest number:          188D
Signing time:             Wed 25 Mar 2026 21:01:19 +0000
Manifest this update:     Wed 25 Mar 2026 21:01:19 +0000
Manifest next update:     Thu 26 Mar 2026 21:01:19 +0000
Files and hashes:         1: 1qCi6Sq-_dCneR6GoHYrYL634Nc.roa (hash: si5wfQgczxPexpvI3zOZcdBSWeRL01fGRYVbjNQoh5k=)
                          2: Ey6_U3MNqlk5sSbuI2Okie2De-M.roa (hash: EHs4rxI+XpWq2Dq6A1mosS3qkiasZu2Py2spZNfHGZc=)
                          3: ZVmzCRGm6Ac5itIuDxSJvmt1oKM.roa (hash: vz5MSkdppxEecAJ47gQzG2qHkIp9VneH0S1nTYp4M1Y=)
                          4: oaLWN8sKzPhyH0PiZs4hP47d0mo.crl (hash: pqxAbissGBb5XiJ0skzBte5olCXQwnEh8ceVwN3R3LQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oaLWN8sKzPhyH0PiZs4hP47d0mo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 21:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:cd:44:75:9c:b9:29:7b:df:4f:17:38:1a:a3:a7:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1a2d637cb0accf8721f43e266ce213f8eddd26a
        Validity
            Not Before: Mar 25 21:01:19 2026 GMT
            Not After : Mar 26 21:01:19 2026 GMT
        Subject: CN=fab856aad65f1b6647e783d6c86b921c24cd2df0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:32:a6:7e:31:ac:97:78:2a:30:5d:a1:ed:d6:
                    96:f8:a7:67:71:36:b7:44:55:93:69:50:76:30:78:
                    98:fa:d4:a7:c9:a3:9d:3f:6d:f2:9d:aa:17:5f:c9:
                    7c:99:6a:8c:c1:14:9b:a6:b9:de:d7:f1:50:0c:52:
                    0a:f8:56:34:4f:ea:1f:15:2f:ba:f3:bb:7b:45:8f:
                    dc:cb:11:fe:c9:06:5e:70:f1:99:a6:dd:69:dd:10:
                    12:b0:e3:59:b8:6a:e7:2c:81:aa:ce:bc:e3:25:81:
                    e9:82:ed:1c:44:86:0b:d3:7b:ad:76:8d:bd:27:83:
                    fc:66:7c:46:53:4a:7c:88:2e:ca:f4:12:0f:15:21:
                    13:51:f6:2d:01:bc:09:11:e1:a9:e3:fc:04:89:5c:
                    5b:57:b8:26:59:cf:3d:e4:35:61:b4:bb:82:5e:c6:
                    e7:72:bb:a1:b1:97:08:c5:1b:f6:54:20:cf:75:34:
                    0f:5f:57:4d:94:5f:02:f5:fd:c2:33:22:1c:d4:20:
                    83:ff:10:0f:b0:88:ae:ed:55:45:f5:cd:e0:84:b5:
                    e2:61:26:bc:9e:6a:f3:bb:ed:7a:fe:e7:e9:72:8f:
                    2b:ac:3e:5f:b7:bf:20:86:3d:03:0d:4e:2f:45:d5:
                    1f:58:75:13:17:f5:68:31:12:31:b7:1f:74:e7:b6:
                    f0:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:B8:56:AA:D6:5F:1B:66:47:E7:83:D6:C8:6B:92:1C:24:CD:2D:F0
            X509v3 Authority Key Identifier:
                keyid:A1:A2:D6:37:CB:0A:CC:F8:72:1F:43:E2:66:CE:21:3F:8E:DD:D2:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oaLWN8sKzPhyH0PiZs4hP47d0mo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:8f:1c:8e:4b:ff:14:99:60:68:0e:41:c0:14:2c:59:f3:15:
         4d:51:9d:2e:75:c1:f7:ad:fc:13:a5:a2:17:58:6c:2d:6e:f0:
         82:6b:f1:c2:a9:eb:8c:ca:b6:e1:82:db:31:d8:2e:5b:e3:c3:
         75:33:e2:0a:39:6f:d5:0f:d0:e4:fb:f3:bb:ae:e7:4f:3e:6d:
         bd:c1:34:77:3a:30:33:d1:24:cd:da:d5:8f:1f:5f:57:b6:b6:
         d2:1c:fd:8f:1b:e6:df:78:f7:d5:20:19:bb:ed:6e:f5:35:02:
         a2:88:3b:09:12:2f:42:79:cf:d4:50:22:b1:3d:54:67:84:cf:
         f9:2e:eb:4a:29:de:44:ad:f2:2c:4c:e1:34:a8:70:07:fb:88:
         15:b6:ab:bb:24:fb:3b:0d:d2:37:3c:07:f2:3e:09:b2:bc:5f:
         20:47:7a:af:6e:13:e3:c9:9e:58:82:96:e2:0c:f9:7f:79:5c:
         e8:79:a3:68:48:b0:46:d0:d5:2e:65:15:a5:c1:1b:35:80:9f:
         7b:4c:43:9b:f7:4e:7d:8e:9e:44:94:d5:84:89:12:53:bd:e9:
         eb:8e:fc:30:56:0a:b9:df:22:c7:f0:11:6c:f5:b5:8e:fb:bf:
         54:7a:ae:d8:89:78:8e:52:a6:e6:c9:d1:73:86:2c:c3:ec:6a:
         e7:9c:51:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:57:52 2026 by rpki-client