Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/255149-8c4b-4cd8-919f-77bb532228b4/1/c46JPc00f32rX3DTUfj84d6qZdE.mft
File:                     c46JPc00f32rX3DTUfj84d6qZdE.mft (raw, json)
Hash identifier:          Q57zuVw7ctZB4m5UeHe3jkY+Mgj0v5KUO+0nYMPXwf4=
Subject key identifier:   08:B5:C8:09:7A:B2:12:FE:CE:1B:F3:0B:8C:B1:5E:44:ED:50:6E:22
Authority key identifier: 73:8E:89:3D:CD:34:7F:7D:AB:5F:70:D3:51:F8:FC:E1:DE:AA:65:D1
Certificate issuer:       /CN=738e893dcd347f7dab5f70d351f8fce1deaa65d1
Certificate serial:       019D389C5AB9DF6BBB32BE98C70793BCC303
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c46JPc00f32rX3DTUfj84d6qZdE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/255149-8c4b-4cd8-919f-77bb532228b4/1/c46JPc00f32rX3DTUfj84d6qZdE.mft
Manifest number:          188D
Signing time:             Sun 29 Mar 2026 08:01:03 +0000
Manifest this update:     Sun 29 Mar 2026 08:01:03 +0000
Manifest next update:     Mon 30 Mar 2026 08:01:03 +0000
Files and hashes:         1: c46JPc00f32rX3DTUfj84d6qZdE.crl (hash: Esy7Zd/gq+jaHuWd/HFHGWrchwgscHLwwAbAFZN8/qI=)
                          2: kY9tmhKeqBmNGdHcsEgpfNUwWzs.roa (hash: ufSkSo79tZguXWEec9VmuCg/qUTf+OMSW2NwdEun2aI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/255149-8c4b-4cd8-919f-77bb532228b4/1/c46JPc00f32rX3DTUfj84d6qZdE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/255149-8c4b-4cd8-919f-77bb532228b4/1/c46JPc00f32rX3DTUfj84d6qZdE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c46JPc00f32rX3DTUfj84d6qZdE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:9c:5a:b9:df:6b:bb:32:be:98:c7:07:93:bc:c3:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=738e893dcd347f7dab5f70d351f8fce1deaa65d1
        Validity
            Not Before: Mar 29 08:01:03 2026 GMT
            Not After : Mar 30 08:01:03 2026 GMT
        Subject: CN=08b5c8097ab212fece1bf30b8cb15e44ed506e22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e8:a0:ce:e8:72:59:b2:f6:b6:85:f8:7d:56:
                    03:5f:6c:59:bf:fb:ef:5a:14:c5:77:8c:82:78:66:
                    e4:4c:f6:f5:0c:94:57:15:c1:b4:f4:80:7e:d0:f9:
                    eb:8c:e4:2c:d2:94:36:00:bb:dd:5b:11:22:c3:b0:
                    18:12:f4:0a:dc:9e:d2:22:18:51:43:af:a7:eb:11:
                    11:a2:56:ad:44:13:7f:f0:09:90:37:5e:d4:ae:96:
                    b9:24:bd:02:50:0c:e6:cc:68:26:25:01:ce:36:d4:
                    e7:33:70:f1:0f:39:a5:ab:35:93:7f:70:dd:0d:d5:
                    60:a2:81:b3:31:d6:c4:0d:c3:98:7e:69:4c:25:9d:
                    33:99:5e:43:8e:9a:14:56:3c:3a:58:e6:ad:1b:84:
                    be:55:23:30:c7:0f:25:60:3f:b6:15:24:d8:e3:ac:
                    59:06:0a:1b:91:63:1c:ba:b5:ed:cb:0c:9e:e6:db:
                    5b:8a:d7:cb:bc:4a:08:a0:07:14:b9:ab:bb:1b:82:
                    82:d4:8d:77:51:84:5b:ee:2f:7c:20:c8:85:91:a9:
                    e9:42:cc:93:cd:02:ae:90:76:f1:fd:18:89:f0:b0:
                    ae:e6:72:46:55:eb:1f:3b:78:f6:42:83:99:48:3a:
                    7e:44:54:90:3a:1e:a6:22:b7:ea:88:20:9f:1b:d3:
                    c1:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:B5:C8:09:7A:B2:12:FE:CE:1B:F3:0B:8C:B1:5E:44:ED:50:6E:22
            X509v3 Authority Key Identifier:
                keyid:73:8E:89:3D:CD:34:7F:7D:AB:5F:70:D3:51:F8:FC:E1:DE:AA:65:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c46JPc00f32rX3DTUfj84d6qZdE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/255149-8c4b-4cd8-919f-77bb532228b4/1/c46JPc00f32rX3DTUfj84d6qZdE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/255149-8c4b-4cd8-919f-77bb532228b4/1/c46JPc00f32rX3DTUfj84d6qZdE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:2b:70:d3:47:ca:62:9a:3e:dd:57:66:ad:46:84:24:f3:a0:
         ca:d8:8b:52:da:0c:b3:93:66:ff:50:a2:0c:14:4e:a2:ad:13:
         08:51:86:59:24:82:ea:02:f2:e7:a8:b5:0a:e4:d4:fa:ff:57:
         c2:9c:f2:31:4f:4b:b4:c5:6e:47:48:6d:a2:78:27:92:bc:b9:
         84:6b:b1:82:23:c4:0d:88:63:f3:96:8e:af:4e:94:1e:0c:5f:
         76:4d:e7:34:e4:67:6c:7d:39:6e:1d:fb:0a:4a:f9:1f:d8:ad:
         97:73:05:3f:a6:f1:65:86:11:52:f0:41:6a:0f:44:64:68:d1:
         ea:40:d9:60:f3:e9:a2:c6:31:98:1e:f8:e2:d9:3a:e9:1a:d6:
         69:95:7a:eb:6e:4f:2d:9a:34:f0:49:e9:99:73:a5:b0:95:b4:
         a5:36:bc:bc:35:fa:d6:6c:53:e1:93:6a:2e:f6:b6:0b:b1:f3:
         c7:a5:1c:3b:94:44:07:ae:0f:23:ff:13:f8:3c:e5:d6:dc:43:
         11:7a:d5:ea:66:72:8b:a0:e3:0d:59:c9:a4:53:cd:9e:28:5e:
         05:c0:bf:c6:7c:1b:ee:ec:ad:b9:dd:89:c4:76:86:cb:a6:de:
         e9:ec:e3:76:19:21:2e:fe:e9:50:fc:20:24:e2:4d:51:25:13:
         8b:b2:f5:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:32 2026 by rpki-client