Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.mft
File:                     g2Uo4VK23LoVcSQaxVvlvOARGLc.mft (raw, json)
Hash identifier:          icBY4XEYjbzi8PPMlVIew+l+0F/bRIX6ueCZwHlAstg=
Subject key identifier:   A6:35:33:25:92:3A:97:B9:BA:AA:E6:9F:92:C9:37:4A:25:62:58:83
Authority key identifier: 83:65:28:E1:52:B6:DC:BA:15:71:24:1A:C5:5B:E5:BC:E0:11:18:B7
Certificate issuer:       /CN=836528e152b6dcba1571241ac55be5bce01118b7
Certificate serial:       019D2E189BF71E083FC1EEFDBB969481F592
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g2Uo4VK23LoVcSQaxVvlvOARGLc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.mft
Manifest number:          188D
Signing time:             Fri 27 Mar 2026 07:00:57 +0000
Manifest this update:     Fri 27 Mar 2026 07:00:57 +0000
Manifest next update:     Sat 28 Mar 2026 07:00:57 +0000
Files and hashes:         1: 4vogBCHvVhbK8N2sbK3joTZSar8.roa (hash: pJFApZIgzEg6Z5G8+ARw6VHXe5cVu/+xIPiV86FoPSo=)
                          2: 7lhE6bzZhG0C5CmBmaI7HzYPl8s.roa (hash: ToooYHL477UW9eXXr8dqX98p19Eo18MQyb6sYa2XGsM=)
                          3: TsBKJ5VG1iOHqte2doC7OTdW_hw.roa (hash: KJo9UiYoALbrSsQU23bvnMkU2vT+dKNpE5NMA+Hvo6E=)
                          4: g2Uo4VK23LoVcSQaxVvlvOARGLc.crl (hash: 1vQgmNmAdb3lA4T26jVnvHxjFuniOt9C4DwHLaMxr2A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g2Uo4VK23LoVcSQaxVvlvOARGLc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Mar 2026 07:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2e:18:9b:f7:1e:08:3f:c1:ee:fd:bb:96:94:81:f5:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=836528e152b6dcba1571241ac55be5bce01118b7
        Validity
            Not Before: Mar 27 07:00:57 2026 GMT
            Not After : Mar 28 07:00:57 2026 GMT
        Subject: CN=a6353325923a97b9baaae69f92c9374a25625883
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9d:41:e4:79:13:dd:82:0b:e5:cd:96:1a:ad:
                    11:d6:29:a8:6f:73:63:4b:00:17:05:6b:29:dd:5c:
                    21:22:8f:39:ba:ce:84:00:72:d2:19:fd:a4:94:ee:
                    eb:c6:db:10:03:64:93:2c:64:9e:5b:53:3b:b9:ba:
                    eb:d5:e0:83:9a:3c:4d:71:19:5a:03:c4:36:98:25:
                    fd:6b:12:59:44:fb:e2:49:65:d2:9a:29:70:15:17:
                    dd:e3:b8:b6:16:91:dc:94:1c:38:f0:0f:c4:b8:dc:
                    da:2c:5f:d8:79:41:5c:cc:be:c1:3c:ef:fa:d1:e4:
                    cd:3d:14:ee:17:11:0d:b5:f8:93:53:0a:6c:ea:5e:
                    2f:ce:fc:9e:47:44:37:91:89:30:cf:f8:90:f3:7f:
                    98:d8:1c:f0:23:c5:49:65:ef:05:e8:eb:d3:a7:83:
                    05:0d:e3:c4:ef:4d:65:c5:4e:dd:a9:86:b0:cf:3b:
                    5f:b5:41:a5:ab:7c:78:eb:56:21:fa:3f:57:5f:fd:
                    7f:6a:61:d8:96:4d:68:15:2f:99:a7:93:3d:e0:d5:
                    de:cc:83:24:93:a3:22:ea:0d:35:38:e4:7a:37:72:
                    52:a8:32:ff:ef:15:2d:0c:52:bb:5a:c4:3f:1c:eb:
                    c1:b9:94:dc:ca:14:ad:be:13:8e:fa:9d:40:7e:5f:
                    d3:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:35:33:25:92:3A:97:B9:BA:AA:E6:9F:92:C9:37:4A:25:62:58:83
            X509v3 Authority Key Identifier:
                keyid:83:65:28:E1:52:B6:DC:BA:15:71:24:1A:C5:5B:E5:BC:E0:11:18:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2Uo4VK23LoVcSQaxVvlvOARGLc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:10:58:f1:09:df:ec:fd:e9:ab:87:b2:70:5c:c4:5a:a2:f1:
         c6:be:6e:5e:d0:1e:49:ac:11:03:ad:ff:a9:cf:9a:39:7a:dd:
         82:c2:e9:4d:0e:98:09:87:fa:bb:86:ed:ac:9e:58:67:9b:07:
         dd:65:cc:d6:e6:f8:42:21:b2:49:c3:3e:a2:30:2a:71:e5:d4:
         65:a3:36:56:16:26:b5:64:d4:d5:1d:11:1e:ce:0c:3c:03:a3:
         b7:1f:0c:bc:6f:ff:25:a8:fd:de:02:29:54:b8:89:44:6d:fe:
         12:e8:59:1b:fc:e0:a4:07:4d:b6:dd:51:bb:75:dd:f2:f9:be:
         2b:ac:9b:6e:45:ab:92:6c:11:6c:4f:33:9b:9f:37:e1:32:85:
         c4:11:3d:1a:a0:15:76:14:7f:81:cf:1b:dc:48:70:62:cb:d9:
         05:cb:ae:7d:1d:d6:a9:6d:6d:79:77:15:3d:55:40:83:86:89:
         8f:a2:8e:c3:12:4b:fc:90:24:41:c7:ce:19:1b:60:1f:e5:f1:
         43:0c:85:a6:18:42:33:cf:26:c8:7c:3b:e0:ed:ca:a8:c6:8a:
         a5:ff:c5:eb:da:08:7a:a6:73:17:4e:1f:6e:7c:1c:3b:c7:bc:
         79:a0:ac:29:e3:fb:46:9c:ec:d9:7f:77:ec:8c:d5:0b:f0:9e:
         29:45:d1:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 16:08:18 2026 by rpki-client