Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.mft
File:                     B2KQRhen92vQw05C0bl_fIPc8Cg.mft (raw, json)
Hash identifier:          uu6y1Ze0abQn8fdG4hx1zWlSUo+ecYKuobLX7ExUpSk=
Subject key identifier:   C1:6E:FE:E3:C4:57:65:26:FF:63:4D:18:4A:93:F4:ED:6B:AE:13:DA
Authority key identifier: 07:62:90:46:17:A7:F7:6B:D0:C3:4E:42:D1:B9:7F:7C:83:DC:F0:28
Certificate issuer:       /CN=0762904617a7f76bd0c34e42d1b97f7c83dcf028
Certificate serial:       019D38657BDFB89AB52A50120A5E55334682
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B2KQRhen92vQw05C0bl_fIPc8Cg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.mft
Manifest number:          188D
Signing time:             Sun 29 Mar 2026 07:01:08 +0000
Manifest this update:     Sun 29 Mar 2026 07:01:08 +0000
Manifest next update:     Mon 30 Mar 2026 07:01:08 +0000
Files and hashes:         1: B2KQRhen92vQw05C0bl_fIPc8Cg.crl (hash: K09bX9Hv/9lDJHsB8UpgZKfFZijBYLxobykLVDpZTnM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B2KQRhen92vQw05C0bl_fIPc8Cg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:65:7b:df:b8:9a:b5:2a:50:12:0a:5e:55:33:46:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0762904617a7f76bd0c34e42d1b97f7c83dcf028
        Validity
            Not Before: Mar 29 07:01:08 2026 GMT
            Not After : Mar 30 07:01:08 2026 GMT
        Subject: CN=c16efee3c4576526ff634d184a93f4ed6bae13da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:1f:39:0f:c5:f9:fc:bd:38:d5:b8:c9:4a:92:
                    88:63:bb:3e:d0:1d:ae:4a:fa:37:e4:16:03:ff:d8:
                    3b:79:51:66:09:ea:88:29:d5:5d:69:7e:96:0c:11:
                    34:20:0c:7f:b7:69:aa:48:73:0c:b6:c3:d9:08:34:
                    8c:73:b7:a5:f4:1c:34:55:26:9a:4d:d7:85:18:dc:
                    00:38:18:38:0b:39:4d:b7:3d:89:b6:b3:67:8f:8f:
                    fe:47:e2:4f:f4:b9:bf:97:a7:13:8a:90:fa:36:3f:
                    c0:c5:7e:59:3c:8d:f0:bd:5d:a2:97:61:53:00:55:
                    14:e4:86:8a:ee:47:a3:9b:be:3d:c0:7c:ca:aa:71:
                    d0:d2:49:cd:c3:03:9b:bd:a4:b0:7c:92:f4:1f:22:
                    99:32:2f:58:94:03:33:ae:00:26:af:03:b2:8e:d0:
                    07:3e:ba:86:d3:ac:71:8d:0b:e5:5f:07:a4:a9:ac:
                    6c:dc:d7:0f:3d:eb:fc:eb:70:e7:34:36:c1:7e:d0:
                    49:38:73:57:63:9c:6e:49:7d:22:f8:9a:5d:dd:da:
                    3b:1c:c2:97:96:f3:93:d1:82:d5:2f:9b:54:ca:52:
                    28:ac:3b:79:2b:2b:6e:0c:b1:13:0b:cc:a2:47:49:
                    6b:69:6d:3d:b5:81:40:08:3f:10:bf:d7:92:85:9d:
                    93:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:6E:FE:E3:C4:57:65:26:FF:63:4D:18:4A:93:F4:ED:6B:AE:13:DA
            X509v3 Authority Key Identifier:
                keyid:07:62:90:46:17:A7:F7:6B:D0:C3:4E:42:D1:B9:7F:7C:83:DC:F0:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2KQRhen92vQw05C0bl_fIPc8Cg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:7a:ac:a5:7c:45:1c:8c:02:c5:62:a5:4b:66:54:10:93:93:
         ae:98:5f:11:0d:6e:09:51:24:7c:d1:8f:f0:b7:e2:3c:39:3c:
         82:9b:1c:cc:d9:ca:99:53:4e:f8:f6:ed:fb:00:f7:96:01:c2:
         de:42:11:e6:1f:99:8c:0e:e5:61:98:b9:b4:d2:be:97:57:fb:
         94:2e:f9:89:6a:5a:4b:66:d8:37:3b:ee:d0:58:09:58:0b:69:
         e8:61:be:90:ae:8c:d8:a5:29:4f:fa:c3:4a:b5:e9:8e:f2:d4:
         30:4b:5e:07:cc:6d:d0:fc:81:54:da:1a:1f:d1:f5:79:23:7c:
         71:53:30:97:14:fc:07:58:bb:e4:54:f8:13:70:e2:ca:cc:4c:
         f7:5f:c1:82:cd:a1:d0:2e:15:3d:ad:77:bc:83:be:71:b9:a0:
         9b:b0:2a:72:c8:c6:87:ce:8d:a4:b3:0b:54:4c:8b:bd:a3:87:
         db:f8:f3:17:98:f5:4d:fb:2e:34:9e:37:66:2e:86:b7:8f:61:
         64:97:79:1b:29:c6:76:91:2c:0d:a8:a4:ba:fc:12:68:6f:76:
         07:31:36:62:4f:7e:61:28:37:99:c5:69:4c:24:7e:0e:14:b0:
         9c:bd:5c:41:4f:d6:79:4c:18:dc:ac:60:7b:6c:b8:04:a9:13:
         2e:0d:7e:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:14 2026 by rpki-client