Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/b711d7-ea06-4e42-98f7-63a4caedb38e/1/FAd8W3ds23z3vDXWtELjZ3arDG4.mft
File:                     FAd8W3ds23z3vDXWtELjZ3arDG4.mft (raw, json)
Hash identifier:          m9rewGrlb4LVzVLdsnrqMtsJjmu+AdhZaLGUUHNS3iw=
Subject key identifier:   29:4B:B0:93:1B:23:1E:A1:31:8F:87:12:E3:53:FC:72:E1:3C:58:C6
Authority key identifier: 14:07:7C:5B:77:6C:DB:7C:F7:BC:35:D6:B4:42:E3:67:76:AB:0C:6E
Certificate issuer:       /CN=14077c5b776cdb7cf7bc35d6b442e36776ab0c6e
Certificate serial:       019D386587390A8CF8676046EFE13E384139
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FAd8W3ds23z3vDXWtELjZ3arDG4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/b711d7-ea06-4e42-98f7-63a4caedb38e/1/FAd8W3ds23z3vDXWtELjZ3arDG4.mft
Manifest number:          188C
Signing time:             Sun 29 Mar 2026 07:01:10 +0000
Manifest this update:     Sun 29 Mar 2026 07:01:10 +0000
Manifest next update:     Mon 30 Mar 2026 07:01:10 +0000
Files and hashes:         1: FAd8W3ds23z3vDXWtELjZ3arDG4.crl (hash: 3uI/sTMM9nFU8KTLrrXlldpz07XDAyEKC2kQRcpZxkg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/b711d7-ea06-4e42-98f7-63a4caedb38e/1/FAd8W3ds23z3vDXWtELjZ3arDG4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/b711d7-ea06-4e42-98f7-63a4caedb38e/1/FAd8W3ds23z3vDXWtELjZ3arDG4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FAd8W3ds23z3vDXWtELjZ3arDG4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:65:87:39:0a:8c:f8:67:60:46:ef:e1:3e:38:41:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14077c5b776cdb7cf7bc35d6b442e36776ab0c6e
        Validity
            Not Before: Mar 29 07:01:10 2026 GMT
            Not After : Mar 30 07:01:10 2026 GMT
        Subject: CN=294bb0931b231ea1318f8712e353fc72e13c58c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:77:10:a2:9d:ad:75:36:b4:b1:c8:ab:78:4b:
                    e8:b1:7c:3d:0c:5a:29:6d:a7:95:60:ad:3f:81:79:
                    8b:ae:d6:af:53:4d:90:16:13:13:18:5d:9e:4e:9b:
                    cf:f7:93:91:b5:4d:8e:cf:5e:2c:6b:45:2f:2a:a6:
                    94:3b:91:bd:8a:7c:f3:30:d5:56:36:ad:a0:f5:7b:
                    75:79:a3:6d:f4:46:ff:e1:68:86:f0:85:11:4b:cb:
                    bd:74:2f:e2:b1:dc:73:83:7a:02:5e:dd:33:da:97:
                    52:ac:09:da:38:2f:75:c1:f9:25:5b:29:d9:39:b5:
                    a4:5b:22:2e:f0:b3:8b:e7:23:96:29:8c:21:1a:43:
                    f1:22:6e:ca:55:e0:cf:ec:4f:75:60:0e:da:1a:21:
                    af:3c:af:25:ef:0b:e5:cf:c0:e1:25:44:21:de:b1:
                    d1:4d:38:f5:6f:59:54:5a:9c:98:8c:98:f7:c8:ab:
                    01:1b:cd:f9:20:bd:51:4f:e1:38:60:f7:ba:5b:8c:
                    79:50:73:ce:00:19:30:4b:9d:23:9a:fc:1d:e3:45:
                    35:74:eb:85:9e:eb:0e:74:0c:b1:db:24:e0:fd:10:
                    c0:f1:7d:9d:cd:15:e3:e9:f0:49:52:67:2c:f8:69:
                    5d:4f:23:46:1d:d8:65:0b:34:eb:14:7c:5f:a5:b1:
                    65:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:4B:B0:93:1B:23:1E:A1:31:8F:87:12:E3:53:FC:72:E1:3C:58:C6
            X509v3 Authority Key Identifier:
                keyid:14:07:7C:5B:77:6C:DB:7C:F7:BC:35:D6:B4:42:E3:67:76:AB:0C:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FAd8W3ds23z3vDXWtELjZ3arDG4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b711d7-ea06-4e42-98f7-63a4caedb38e/1/FAd8W3ds23z3vDXWtELjZ3arDG4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b711d7-ea06-4e42-98f7-63a4caedb38e/1/FAd8W3ds23z3vDXWtELjZ3arDG4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:02:05:2f:ae:a1:b4:fd:5e:49:49:3c:36:ce:57:65:dc:58:
         5d:98:7a:d6:e6:34:2c:70:c8:94:b1:97:fd:61:7a:84:c9:b2:
         b6:bc:16:21:df:6b:70:fe:36:4a:2b:6f:7e:c7:0e:4e:1c:e6:
         64:b2:cd:ea:ae:90:0f:09:d1:f0:92:cc:61:a7:10:45:88:74:
         2e:f8:c8:f9:d7:b2:08:e6:27:16:62:84:06:c6:62:12:48:d8:
         b4:e2:58:4e:59:27:19:dd:fe:2d:bf:fa:cd:0d:7a:cf:e4:da:
         02:94:ad:7a:d6:57:78:0c:c4:1b:d4:1e:33:ee:90:3d:85:0f:
         e3:ee:07:64:3f:7b:d7:83:10:4a:2c:8a:db:87:94:95:48:18:
         c2:41:52:a9:5a:4d:55:ae:aa:29:b4:ab:da:59:f4:63:47:29:
         c7:e2:ae:d2:98:43:da:41:fb:6b:99:7d:24:fa:45:2c:86:53:
         ef:14:b8:47:1f:0b:7c:7d:9e:e8:8b:3e:3b:55:07:25:b0:01:
         3c:d4:ed:66:94:89:c0:21:74:06:49:cc:da:56:b2:71:f3:a7:
         9c:d1:b3:2b:34:fd:28:e4:0a:34:a1:a4:a1:24:9f:20:b2:4d:
         cf:87:00:46:b9:79:a8:80:d1:c6:43:53:ef:69:a6:49:7f:30:
         fe:ed:1a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:54:43 2026 by rpki-client