Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d88e87-62f9-475b-a84d-036e7efc9aca/1/gLonv9hqgQoXlX0fcm_hYNTrMiU.mft
File:                     gLonv9hqgQoXlX0fcm_hYNTrMiU.mft (raw, json)
Hash identifier:          l2eRoESDv5QIAEXI+59skBOPG+VvZBrcQHP9Uw4u1Ig=
Subject key identifier:   E5:FF:13:F0:E5:F1:D9:77:47:89:36:CD:11:A3:CE:8B:10:66:26:E5
Authority key identifier: 80:BA:27:BF:D8:6A:81:0A:17:95:7D:1F:72:6F:E1:60:D4:EB:32:25
Certificate issuer:       /CN=80ba27bfd86a810a17957d1f726fe160d4eb3225
Certificate serial:       019D37C02BEAE78447FDB0EDE34937C4B050
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gLonv9hqgQoXlX0fcm_hYNTrMiU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/d88e87-62f9-475b-a84d-036e7efc9aca/1/gLonv9hqgQoXlX0fcm_hYNTrMiU.mft
Manifest number:          188A
Signing time:             Sun 29 Mar 2026 04:00:34 +0000
Manifest this update:     Sun 29 Mar 2026 04:00:34 +0000
Manifest next update:     Mon 30 Mar 2026 04:00:34 +0000
Files and hashes:         1: gLonv9hqgQoXlX0fcm_hYNTrMiU.crl (hash: 2lVYLqoJZSQEL8DvS5VHm3Rvwnn3n80aa/Lu9J8VyJo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/d88e87-62f9-475b-a84d-036e7efc9aca/1/gLonv9hqgQoXlX0fcm_hYNTrMiU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/d88e87-62f9-475b-a84d-036e7efc9aca/1/gLonv9hqgQoXlX0fcm_hYNTrMiU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gLonv9hqgQoXlX0fcm_hYNTrMiU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 04:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:c0:2b:ea:e7:84:47:fd:b0:ed:e3:49:37:c4:b0:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80ba27bfd86a810a17957d1f726fe160d4eb3225
        Validity
            Not Before: Mar 29 04:00:34 2026 GMT
            Not After : Mar 30 04:00:34 2026 GMT
        Subject: CN=e5ff13f0e5f1d977478936cd11a3ce8b106626e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b0:ad:84:79:99:86:9d:fc:e2:01:67:d1:fb:
                    84:cf:f6:af:af:21:2f:2a:10:3e:0a:05:39:8d:57:
                    1e:36:3a:8b:6b:85:0b:ec:92:4a:0d:fd:1b:63:a0:
                    f3:31:a1:63:c8:0e:1d:b6:09:a0:3d:ed:54:ea:ea:
                    11:bf:96:7a:50:0b:31:ed:6a:cb:2f:39:98:a3:08:
                    21:94:b1:14:4d:18:2c:26:c2:1c:ab:09:1f:79:bc:
                    05:97:2c:67:13:68:b4:2d:e7:22:8f:cb:6b:91:a8:
                    25:a8:65:c3:17:ea:14:60:aa:00:0f:e5:ed:44:98:
                    72:26:b9:41:e8:2f:15:7d:37:f9:dc:4f:9a:e3:de:
                    32:37:7e:79:b5:fc:e5:35:98:66:08:a2:48:fc:39:
                    29:10:86:1b:44:57:1f:c5:24:bf:97:93:ba:18:0b:
                    99:10:87:79:aa:94:cf:3e:a3:9d:1e:41:e1:e3:2b:
                    64:46:56:57:47:88:a6:81:8d:2d:91:84:a5:c1:1e:
                    1e:e9:91:9d:f6:66:54:4e:1d:89:37:74:1b:1c:03:
                    64:7b:af:4e:f7:a9:be:d8:85:c4:f1:bf:cc:89:f7:
                    f3:31:95:d0:74:f1:0c:92:77:67:ca:42:f6:ce:29:
                    cf:4d:ea:cf:79:09:01:d2:a1:73:16:80:dc:5f:bb:
                    4d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:FF:13:F0:E5:F1:D9:77:47:89:36:CD:11:A3:CE:8B:10:66:26:E5
            X509v3 Authority Key Identifier:
                keyid:80:BA:27:BF:D8:6A:81:0A:17:95:7D:1F:72:6F:E1:60:D4:EB:32:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gLonv9hqgQoXlX0fcm_hYNTrMiU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d88e87-62f9-475b-a84d-036e7efc9aca/1/gLonv9hqgQoXlX0fcm_hYNTrMiU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d88e87-62f9-475b-a84d-036e7efc9aca/1/gLonv9hqgQoXlX0fcm_hYNTrMiU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:78:0f:11:4d:36:b9:2a:ae:bb:aa:43:8e:60:ca:5a:df:a4:
         0e:4b:c5:1a:9a:81:03:a6:6b:3d:15:1e:85:9a:6c:4b:94:4c:
         1b:05:5a:a1:70:0c:09:1b:d7:9e:f3:85:18:fb:5d:40:17:ea:
         ff:0e:d9:da:23:7d:7e:11:4d:30:12:6a:bd:8b:83:61:4c:be:
         dd:b7:c6:60:40:d9:fc:62:d0:ab:38:a0:32:cd:c4:3e:d9:4d:
         8a:78:5f:78:6e:b2:fb:c5:9f:5c:7b:70:ba:1d:4e:38:89:ca:
         2c:08:7e:99:79:7d:cb:2d:b4:d8:ec:fb:08:1d:19:96:c2:8f:
         b0:b3:ec:64:22:be:50:01:16:f6:23:dc:80:37:b1:70:a0:71:
         3b:ff:a7:9f:d8:32:1a:7f:20:e8:d0:22:ff:bc:c3:0b:80:5f:
         24:11:37:08:04:b8:87:cd:55:5a:b4:7c:29:10:01:24:83:c3:
         05:4c:67:f6:0a:7d:aa:9b:dd:05:b9:e5:67:91:31:54:d2:f3:
         a1:50:19:2e:b2:d7:e5:65:a5:ea:a1:14:0c:6e:15:2e:23:39:
         dc:7a:3f:39:89:fc:dc:62:cd:04:5b:d3:49:28:b6:50:58:a0:
         2b:00:4f:36:7a:5b:4e:17:14:30:21:07:3a:3b:c6:db:61:41:
         c1:06:3f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:33 2026 by rpki-client