Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d819a7-e2ab-4050-afcd-4d9561f8b967/1/B6WU0muI6GkdHYGGAjtp6_GNH-k.mft
File:                     B6WU0muI6GkdHYGGAjtp6_GNH-k.mft (raw, json)
Hash identifier:          Hn+Hr5uw/leJn/zhUIjesxvXXXsI91rVaJrD8XJ2oPo=
Subject key identifier:   0D:23:ED:0E:70:5B:08:26:EA:FE:3E:EC:6E:D9:C5:F5:DE:92:66:6D
Authority key identifier: 07:A5:94:D2:6B:88:E8:69:1D:1D:81:86:02:3B:69:EB:F1:8D:1F:E9
Certificate issuer:       /CN=07a594d26b88e8691d1d8186023b69ebf18d1fe9
Certificate serial:       019D382E561E75A57985E178B6F6C85CE609
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6WU0muI6GkdHYGGAjtp6_GNH-k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/d819a7-e2ab-4050-afcd-4d9561f8b967/1/B6WU0muI6GkdHYGGAjtp6_GNH-k.mft
Manifest number:          188D
Signing time:             Sun 29 Mar 2026 06:00:53 +0000
Manifest this update:     Sun 29 Mar 2026 06:00:53 +0000
Manifest next update:     Mon 30 Mar 2026 06:00:53 +0000
Files and hashes:         1: B6WU0muI6GkdHYGGAjtp6_GNH-k.crl (hash: xUZ2cpSZaznOgn2H1oa3bCuOP5PA5SrdN2QRj8EJvYY=)
                          2: dao3SWGJzmepZe0dSnkxYr7fl80.roa (hash: uVlf5UoF7g9PK+9JqyskFv6IV1mCuEzrCLxi9t1Xg1k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/d819a7-e2ab-4050-afcd-4d9561f8b967/1/B6WU0muI6GkdHYGGAjtp6_GNH-k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/d819a7-e2ab-4050-afcd-4d9561f8b967/1/B6WU0muI6GkdHYGGAjtp6_GNH-k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B6WU0muI6GkdHYGGAjtp6_GNH-k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:2e:56:1e:75:a5:79:85:e1:78:b6:f6:c8:5c:e6:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a594d26b88e8691d1d8186023b69ebf18d1fe9
        Validity
            Not Before: Mar 29 06:00:53 2026 GMT
            Not After : Mar 30 06:00:53 2026 GMT
        Subject: CN=0d23ed0e705b0826eafe3eec6ed9c5f5de92666d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:38:d5:6e:90:95:ef:28:d8:fc:e9:34:89:e7:
                    13:f3:43:c1:0c:fa:59:19:a6:26:3b:3d:47:4d:18:
                    b1:03:f2:44:ba:2a:6a:f6:5d:35:65:15:2e:5c:52:
                    4f:42:22:0c:b5:66:2f:8b:49:2f:6f:44:33:e8:02:
                    2f:8f:b6:a6:90:d8:14:a1:0f:3f:3b:dd:8a:13:5b:
                    90:7a:08:40:7e:f7:6a:6a:46:67:40:5a:88:2d:46:
                    2e:3c:6f:e2:f0:42:c2:5a:09:d0:e3:a2:9c:5b:19:
                    fe:12:22:9d:dc:92:c9:b5:13:8c:74:75:91:3e:56:
                    ab:5d:44:7d:5d:78:3d:9d:d7:57:c3:1b:d5:57:31:
                    11:2c:fc:a0:39:d0:cb:01:f3:ec:e7:2f:16:d6:b1:
                    a9:00:85:66:f7:91:4b:78:b9:9c:7f:69:ca:12:14:
                    3c:c3:79:ec:28:33:7a:2b:2f:dc:36:03:e5:2a:68:
                    e5:c6:32:e6:43:af:08:18:88:f4:31:1a:65:7c:a5:
                    45:5b:0c:c3:d0:99:ba:60:a9:7d:d0:d3:d6:80:98:
                    2e:86:ff:07:c0:00:37:e6:f5:dc:cd:d6:fb:2e:ed:
                    ad:fb:7f:1f:5f:a1:9a:b3:5c:2c:0b:56:61:b6:49:
                    d1:2b:63:8f:ec:4c:cb:e2:c8:a3:ab:dd:06:8a:31:
                    2a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:23:ED:0E:70:5B:08:26:EA:FE:3E:EC:6E:D9:C5:F5:DE:92:66:6D
            X509v3 Authority Key Identifier:
                keyid:07:A5:94:D2:6B:88:E8:69:1D:1D:81:86:02:3B:69:EB:F1:8D:1F:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6WU0muI6GkdHYGGAjtp6_GNH-k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d819a7-e2ab-4050-afcd-4d9561f8b967/1/B6WU0muI6GkdHYGGAjtp6_GNH-k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d819a7-e2ab-4050-afcd-4d9561f8b967/1/B6WU0muI6GkdHYGGAjtp6_GNH-k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:9e:ab:dc:10:91:2b:ea:7d:51:d1:d5:d6:3f:25:44:b6:5a:
         33:29:7e:74:2f:d1:f0:b8:ea:1e:80:b4:11:5f:16:f1:f3:7e:
         c1:0a:6d:5e:61:ae:9b:19:41:3e:ab:e6:50:34:6d:72:62:3b:
         77:6d:55:b0:0a:fe:55:0b:9c:1f:62:22:4c:0c:3f:f4:5b:2b:
         6f:97:3e:4a:90:70:4e:72:93:6d:03:e6:e7:0f:0e:4d:b8:1a:
         e3:18:95:3c:a2:ca:dd:87:34:34:b9:e6:39:22:9b:51:78:81:
         09:c1:ae:eb:f3:cc:d3:cb:50:84:0e:1e:f7:9a:b9:04:b0:59:
         6b:02:48:c0:5b:65:70:ec:db:46:fe:f6:f0:eb:a5:fe:06:ab:
         a9:05:9e:0f:a7:3d:cf:af:22:41:f7:0a:10:ea:ee:5f:61:94:
         9b:8a:27:85:3b:c3:d9:ae:84:a8:2a:ab:d5:ea:a2:ac:e5:41:
         f7:a5:6f:ad:4b:b2:5d:67:d4:74:73:41:a2:c7:cd:5f:db:86:
         31:60:e3:24:ee:4a:1e:d7:f2:4c:c2:2a:48:01:60:7a:a5:e0:
         02:c6:0e:68:f4:de:6a:4b:2a:a1:8d:99:0a:ac:8f:4e:6a:6c:
         7d:73:13:fa:a2:55:0d:a7:06:f2:db:1e:59:02:5c:d3:d0:c7:
         e7:0c:52:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:47 2026 by rpki-client