Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.mft
File:                     boP2het7ai-EZLmXEpM41j9-7Wo.mft (raw, json)
Hash identifier:          hNhj8yxobB0b9peFYiTs+V8g74Hvicud4csHdsUbNwM=
Subject key identifier:   9E:EA:AD:A5:6B:7C:E8:60:D2:C8:01:C9:F1:2A:AE:43:16:48:B5:E2
Authority key identifier: 6E:83:F6:85:EB:7B:6A:2F:84:64:B9:97:12:93:38:D6:3F:7E:ED:6A
Certificate issuer:       /CN=6e83f685eb7b6a2f8464b997129338d63f7eed6a
Certificate serial:       019D37C0CBCC4BFBDEB26B518894F70D5B3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/boP2het7ai-EZLmXEpM41j9-7Wo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.mft
Manifest number:          188D
Signing time:             Sun 29 Mar 2026 04:01:15 +0000
Manifest this update:     Sun 29 Mar 2026 04:01:15 +0000
Manifest next update:     Mon 30 Mar 2026 04:01:15 +0000
Files and hashes:         1: Jb2gO1BQcML39rnxFGep61phXGU.roa (hash: 8e9M6TIpgOCh+hUbFPaNx/cdQqfZysi89tk+qyctjYM=)
                          2: boP2het7ai-EZLmXEpM41j9-7Wo.crl (hash: 0kFMNW9Hj1X3xo5UUdopZHLNlSL0QxL6OU9cQqxSCFk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/boP2het7ai-EZLmXEpM41j9-7Wo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 04:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:c0:cb:cc:4b:fb:de:b2:6b:51:88:94:f7:0d:5b:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e83f685eb7b6a2f8464b997129338d63f7eed6a
        Validity
            Not Before: Mar 29 04:01:15 2026 GMT
            Not After : Mar 30 04:01:15 2026 GMT
        Subject: CN=9eeaada56b7ce860d2c801c9f12aae431648b5e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:14:6b:c8:ff:55:e1:0a:6e:87:c8:35:1e:46:
                    03:de:9b:f2:b4:9e:f5:69:63:be:bd:33:ca:c0:43:
                    ed:2a:8d:3c:d0:4b:e4:c1:8e:c2:0e:99:99:5f:fb:
                    d5:4f:d0:6e:ec:75:6a:9c:ac:ac:e9:48:3c:d4:e4:
                    57:1e:62:e0:5e:40:35:d2:b5:98:56:28:50:8b:5b:
                    b1:10:ce:14:5a:19:9d:08:91:7f:8d:2d:ba:12:db:
                    75:f1:5e:5a:82:b9:95:fe:70:b0:16:7a:58:14:e2:
                    93:c1:d7:60:f7:9c:05:b2:98:d8:f2:52:2f:b2:71:
                    ad:bf:8a:b1:ee:21:a0:e2:39:e9:c3:df:66:88:e5:
                    d8:89:62:03:40:ee:c5:c9:0e:38:d6:f2:10:55:64:
                    d1:8d:75:f8:6d:51:81:0e:da:49:32:61:db:02:aa:
                    85:3c:1c:d7:64:19:23:ff:3e:8b:78:ba:65:25:96:
                    ce:e9:d8:98:ec:ea:5c:21:41:e4:20:06:3c:7e:54:
                    13:a2:e9:ab:44:60:76:e3:e5:74:1c:1e:33:ec:11:
                    85:36:55:57:3c:52:2e:b4:96:2a:7e:52:c7:b0:39:
                    28:05:84:99:ed:f1:27:25:55:03:6e:e6:89:b9:e6:
                    ec:48:2c:6f:6e:9a:18:f7:93:a9:97:14:62:89:a9:
                    54:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:EA:AD:A5:6B:7C:E8:60:D2:C8:01:C9:F1:2A:AE:43:16:48:B5:E2
            X509v3 Authority Key Identifier:
                keyid:6E:83:F6:85:EB:7B:6A:2F:84:64:B9:97:12:93:38:D6:3F:7E:ED:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/boP2het7ai-EZLmXEpM41j9-7Wo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:b9:b3:d6:a7:4b:aa:69:bc:48:cb:38:17:ea:cd:7d:51:2c:
         82:6e:02:0d:f3:95:1e:57:fe:07:54:05:4d:05:7f:60:d2:8d:
         69:3b:94:69:a6:a5:73:0e:92:8a:04:68:db:a7:b9:a1:5d:48:
         a2:24:c6:22:5d:8b:16:fb:ff:0f:de:aa:bb:4f:a6:df:2d:7f:
         9f:9e:8c:43:13:88:9c:66:77:07:3e:70:38:09:c9:3b:f4:0d:
         a7:24:74:73:96:3f:44:71:97:76:08:30:57:26:6c:f8:7c:79:
         de:b0:69:61:41:80:eb:1f:4f:62:0c:88:47:e9:91:16:ff:30:
         95:a6:d7:e4:53:1f:d5:4e:e6:34:23:b2:ac:eb:1a:f9:c4:3c:
         64:36:d7:00:04:60:2f:e8:31:18:aa:a0:4b:4d:d9:af:7e:1d:
         72:c4:18:b7:32:8e:ed:bd:8c:fa:06:f4:bb:cb:de:e5:e1:4f:
         8d:60:31:b9:72:48:f8:48:12:cd:47:de:70:f0:cf:3c:32:3e:
         a1:aa:25:d2:6f:49:c4:c2:bb:ac:d0:9c:3a:b4:cd:c5:7e:9b:
         af:6a:25:98:74:3d:0e:ba:b4:66:2b:22:2e:0f:8d:09:6b:1e:
         61:ee:2b:69:f2:d4:4c:8c:dd:ed:73:6b:58:d2:51:64:0a:01:
         e8:3e:61:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:59:34 2026 by rpki-client