Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.mft
File:                     nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.mft (raw, json)
Hash identifier:          aSgWXZXtPtU3hR601s042MT/Wt7h6r10pm1mrXJDmVg=
Subject key identifier:   87:85:18:83:47:A5:88:50:FC:C4:40:76:31:07:C4:EA:4C:50:75:3C
Authority key identifier: 9D:8F:11:27:56:F1:45:8D:CF:3E:38:7A:4B:E8:90:F3:0E:A9:49:B3
Certificate issuer:       /CN=9d8f112756f1458dcf3e387a4be890f30ea949b3
Certificate serial:       019D37C104E3358CB0D137C1328D4AC06D70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.mft
Manifest number:          188E
Signing time:             Sun 29 Mar 2026 04:01:29 +0000
Manifest this update:     Sun 29 Mar 2026 04:01:29 +0000
Manifest next update:     Mon 30 Mar 2026 04:01:29 +0000
Files and hashes:         1: l0La-cqh0YtCqpb_P_ploY3jtxY.roa (hash: 96uWLiEvgAqq8mEo7+VReaVgrIrRgh/p9r34i4OMLOw=)
                          2: nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.crl (hash: Dq1Ke2Fop2X0aYeY1bjy6SUO4egf+K/785DcNLfTP2Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 04:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:c1:04:e3:35:8c:b0:d1:37:c1:32:8d:4a:c0:6d:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d8f112756f1458dcf3e387a4be890f30ea949b3
        Validity
            Not Before: Mar 29 04:01:29 2026 GMT
            Not After : Mar 30 04:01:29 2026 GMT
        Subject: CN=8785188347a58850fcc440763107c4ea4c50753c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6d:4a:39:3b:80:06:9a:9c:09:13:44:c4:d1:
                    4a:c9:8e:c8:28:00:ad:72:85:20:24:87:f3:e7:d4:
                    6a:5d:ad:44:1d:42:aa:fd:1e:4a:d9:a5:0f:49:b5:
                    81:0c:48:8b:18:72:11:c3:5b:32:8c:02:51:67:ff:
                    5f:38:51:3a:67:58:50:bf:cf:fd:38:86:b3:bb:5f:
                    84:7c:37:c8:c8:87:d6:57:66:51:70:c5:09:12:14:
                    b4:cc:0e:da:f3:c1:3a:bd:35:c9:f4:39:41:a1:20:
                    d0:3c:4f:3b:06:74:fc:0b:4f:7a:9c:c8:b3:c9:2c:
                    55:29:4b:c2:d9:4f:c5:d5:c8:7f:c3:12:96:f7:88:
                    33:20:fa:50:64:17:5a:fd:d6:08:0c:f2:cb:79:fb:
                    7e:3b:7a:ef:df:4a:80:48:a3:8f:c7:07:bd:06:ad:
                    d2:11:f9:8d:9f:bb:ba:1a:81:55:7e:f9:44:fb:bc:
                    fb:33:2f:7c:f1:79:e9:e6:9b:d4:1c:de:52:97:3c:
                    e5:fc:51:13:4c:0d:90:49:95:fc:53:85:18:9f:cd:
                    2e:30:e3:cc:c6:11:91:3c:73:e7:d2:79:ba:fe:3a:
                    f7:48:7f:5c:cc:be:a2:96:74:d4:2e:cb:68:73:34:
                    ed:52:5b:3e:65:9e:03:51:eb:87:a1:a1:2f:40:77:
                    6f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:85:18:83:47:A5:88:50:FC:C4:40:76:31:07:C4:EA:4C:50:75:3C
            X509v3 Authority Key Identifier:
                keyid:9D:8F:11:27:56:F1:45:8D:CF:3E:38:7A:4B:E8:90:F3:0E:A9:49:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:69:97:1d:44:e2:00:28:7e:80:54:68:10:94:22:ee:c2:7e:
         19:38:94:be:6e:c2:93:22:1b:fb:13:73:99:60:f1:78:d8:97:
         b3:b0:8f:54:20:48:7d:c9:ef:30:b9:c2:bc:96:94:cf:5e:53:
         0a:c6:79:24:2a:5b:6b:cb:2f:72:5e:d4:89:2d:44:f8:ef:79:
         cb:e8:c6:f2:92:3a:34:5b:c5:47:1f:96:68:b9:21:6c:73:a0:
         f9:55:15:b8:6d:7f:74:b7:11:f8:4c:fd:c1:d7:3c:59:12:42:
         14:9f:25:f0:ec:bf:12:da:0d:4c:bd:90:05:e1:3d:87:c5:b5:
         7f:ea:bf:bc:fc:5f:af:22:5c:9f:b4:35:0c:76:3d:89:00:e2:
         f3:81:17:66:91:8d:82:b4:4c:35:b0:61:63:a3:8a:f1:c8:b2:
         26:cc:79:bd:c3:78:68:fc:9b:e2:80:d5:f1:b0:1a:40:74:aa:
         3a:fe:55:6e:be:3e:cd:ea:10:ba:90:e2:f4:e0:29:ac:75:fd:
         34:10:7c:f1:62:7f:44:9b:70:82:6a:4e:5a:c0:a3:00:c0:91:
         97:6b:aa:f1:38:be:44:d9:36:5f:11:64:62:04:7d:78:96:46:
         88:24:71:71:2f:4b:6e:2a:0a:df:f8:fd:b4:ce:c1:c6:54:30:
         d3:b9:d9:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:22 2026 by rpki-client