Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.mft
File:                     cWAmJ2eaSYC3DYreV48UGS-v65U.mft (raw, json)
Hash identifier:          m9zsltaZ+eGCXUvQdoQOAPfbSwgxpqVgsg4Ki7GkvRs=
Subject key identifier:   0E:D0:EB:81:6F:09:C6:35:D0:76:8E:18:90:3A:82:04:E6:BF:EA:28
Authority key identifier: 71:60:26:27:67:9A:49:80:B7:0D:8A:DE:57:8F:14:19:2F:AF:EB:95
Certificate issuer:       /CN=71602627679a4980b70d8ade578f14192fafeb95
Certificate serial:       019D3940F11881EFDE61E7E514949418CBA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cWAmJ2eaSYC3DYreV48UGS-v65U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.mft
Manifest number:          188F
Signing time:             Sun 29 Mar 2026 11:00:50 +0000
Manifest this update:     Sun 29 Mar 2026 11:00:50 +0000
Manifest next update:     Mon 30 Mar 2026 11:00:50 +0000
Files and hashes:         1: 1MNzVKC9htvcNDGJvI7xuyGACNU.roa (hash: 5RJpFE83PkUMhvbMNjs3KYN+COX8IjLxqtTzJmRO/6c=)
                          2: LO4YOUMQSFJh66TMDDMwnUwbqCo.roa (hash: dmbwDSHT1tN2CWO1W2a6nb7MTfEav+JXvlh9Nn0z+XQ=)
                          3: cWAmJ2eaSYC3DYreV48UGS-v65U.crl (hash: OWy6Htw+Ez8OzQby0Y3RZnERKXMPWgPsY9I91OLX6Ag=)
                          4: fnKKRoWAVJZeKiOvGQPgr3LCZIs.roa (hash: JHOAXHnAaTWFlsyraZAXCqYuOsM3xPfPaJdjfqdyKlM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cWAmJ2eaSYC3DYreV48UGS-v65U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 08:48:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:40:f1:18:81:ef:de:61:e7:e5:14:94:94:18:cb:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71602627679a4980b70d8ade578f14192fafeb95
        Validity
            Not Before: Mar 29 11:00:50 2026 GMT
            Not After : Mar 30 11:00:50 2026 GMT
        Subject: CN=0ed0eb816f09c635d0768e18903a8204e6bfea28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:07:04:b7:40:3d:44:57:7e:67:e0:5d:60:37:
                    0f:5c:9a:e6:0e:53:6b:c0:29:eb:28:18:72:04:d7:
                    34:0b:09:b8:49:52:ab:e6:b3:af:fd:f2:f0:b3:ad:
                    9a:a0:97:22:e3:df:ff:27:37:a3:c0:d3:e3:77:fe:
                    52:84:9f:be:40:f6:42:f2:4c:39:26:63:89:8e:01:
                    7c:80:9d:3a:7f:97:a0:3d:96:da:8e:fc:9f:13:49:
                    c0:8c:12:32:82:de:4e:14:e6:e0:3c:ff:ba:0e:d7:
                    db:3f:24:56:76:e2:1a:65:20:03:c0:dc:52:58:aa:
                    79:a0:5e:c7:c2:12:00:39:af:12:3d:af:b9:b1:56:
                    53:8a:14:3d:9a:70:18:9f:5e:b8:2d:23:27:ce:8e:
                    a3:8a:81:02:6d:7c:2e:a8:05:2f:d7:80:2b:b7:9e:
                    cd:c0:b1:5e:1a:bc:f1:b5:1d:ad:a4:10:11:9c:07:
                    ac:64:68:fc:12:4f:02:40:ed:7a:18:39:01:26:2d:
                    9a:37:97:02:61:5f:ad:0b:57:c6:b1:cb:28:a8:ad:
                    3c:f7:31:63:da:f7:c9:56:94:aa:48:16:b4:4b:57:
                    dd:01:ee:a0:b9:5b:53:a9:8b:66:f3:61:5d:35:47:
                    45:59:5e:77:b0:ba:8f:b7:06:9f:52:9c:fb:64:a6:
                    b8:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:D0:EB:81:6F:09:C6:35:D0:76:8E:18:90:3A:82:04:E6:BF:EA:28
            X509v3 Authority Key Identifier:
                keyid:71:60:26:27:67:9A:49:80:B7:0D:8A:DE:57:8F:14:19:2F:AF:EB:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cWAmJ2eaSYC3DYreV48UGS-v65U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:d6:2c:ad:17:c5:55:c8:ac:3f:66:2a:d3:83:53:6a:05:a8:
         4d:20:d9:63:43:11:ad:c2:c7:74:bb:33:7c:43:be:6f:1c:35:
         68:1d:14:91:0a:6b:69:db:91:18:c1:60:c2:f4:d9:28:ab:ff:
         0d:14:62:52:c8:1b:10:ae:2a:e3:48:3e:a0:71:c2:61:24:42:
         00:45:d7:e6:fb:21:eb:82:a0:67:e5:d2:00:c6:b7:b6:f3:5b:
         fd:42:49:60:90:05:de:ce:c8:f1:27:cd:d7:2a:c0:f9:e4:fc:
         fa:31:2f:2b:b8:e8:e4:81:ad:32:c4:4b:fa:7a:c5:57:4c:d6:
         6b:d8:a6:79:67:7e:a3:1a:b4:94:b2:8b:c9:d6:3d:9c:b6:0b:
         f4:b3:2c:0e:94:db:c2:b2:fa:7d:d1:03:5d:c2:70:f9:ec:a5:
         89:a9:10:bd:bf:e1:c4:28:69:d4:1a:e7:b1:af:53:8a:7c:89:
         8c:b4:3b:93:aa:e2:c8:52:ea:05:d1:06:8d:0b:20:e5:94:8f:
         83:f0:49:32:0a:76:72:ba:a1:d7:69:d1:aa:3e:16:4b:93:5b:
         d6:c1:ef:bc:82:9e:fa:88:71:37:49:4e:5a:9a:b4:83:30:4a:
         0e:33:19:7d:92:3a:df:c9:cc:7e:a8:5c:d9:b1:d6:4e:4a:6b:
         0e:48:33:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:10:11 2026 by rpki-client