Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/9062e2-95ae-4656-b2ee-984a8eb51e45/1/Mss8BdaixRwv9S3Z3LnitVxASPk.mft
File:                     Mss8BdaixRwv9S3Z3LnitVxASPk.mft (raw, json)
Hash identifier:          xIe1KEPnlwBPkYBMkahKyBEM5Dw0SZHFuNpvWLLoaVI=
Subject key identifier:   2A:71:40:94:53:87:AE:30:65:F1:8D:F2:40:10:85:BA:67:80:D3:02
Authority key identifier: 32:CB:3C:05:D6:A2:C5:1C:2F:F5:2D:D9:DC:B9:E2:B5:5C:40:48:F9
Certificate issuer:       /CN=32cb3c05d6a2c51c2ff52dd9dcb9e2b55c4048f9
Certificate serial:       019D382E5251BF6AB1D4BFE06561252A41DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mss8BdaixRwv9S3Z3LnitVxASPk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/9062e2-95ae-4656-b2ee-984a8eb51e45/1/Mss8BdaixRwv9S3Z3LnitVxASPk.mft
Manifest number:          188D
Signing time:             Sun 29 Mar 2026 06:00:52 +0000
Manifest this update:     Sun 29 Mar 2026 06:00:52 +0000
Manifest next update:     Mon 30 Mar 2026 06:00:52 +0000
Files and hashes:         1: Mss8BdaixRwv9S3Z3LnitVxASPk.crl (hash: Y+9Jqtk1g3j63jRhXrXYYCMe/eoznoYz9W7XHdcxFCA=)
                          2: _XpiWaBqL5cj6EScDkmzFX-RtaE.roa (hash: ZNQwF+NRIfIvKu5cA90w0QKywG10reBbxUARljIXqqA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/9062e2-95ae-4656-b2ee-984a8eb51e45/1/Mss8BdaixRwv9S3Z3LnitVxASPk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/9062e2-95ae-4656-b2ee-984a8eb51e45/1/Mss8BdaixRwv9S3Z3LnitVxASPk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mss8BdaixRwv9S3Z3LnitVxASPk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 06:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:2e:52:51:bf:6a:b1:d4:bf:e0:65:61:25:2a:41:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32cb3c05d6a2c51c2ff52dd9dcb9e2b55c4048f9
        Validity
            Not Before: Mar 29 06:00:52 2026 GMT
            Not After : Mar 30 06:00:52 2026 GMT
        Subject: CN=2a7140945387ae3065f18df2401085ba6780d302
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:43:f4:b6:48:5c:6d:6c:6f:57:fe:b0:0e:28:
                    ca:6c:84:b5:8c:a2:12:6a:00:9c:2c:28:94:c1:3e:
                    64:8f:30:01:74:4e:a6:60:7f:5a:8b:b6:b3:b1:4a:
                    6f:d9:70:01:83:8e:8a:1c:4a:76:6c:5b:6e:b9:95:
                    53:67:f1:d7:f2:24:3f:18:e3:24:5c:7d:ab:0c:84:
                    5d:f0:d8:13:d1:85:aa:ad:6e:31:ae:43:a7:6f:18:
                    de:34:ba:af:a7:0b:86:54:7c:98:6f:a0:db:4e:3a:
                    ca:e5:f8:91:c3:40:30:7b:24:c2:6b:b5:07:3b:13:
                    82:91:a2:b5:ca:89:89:b7:d1:78:18:d7:74:ec:db:
                    18:3a:4b:0d:a5:3f:23:74:19:cd:e9:01:15:3b:02:
                    46:29:6a:f7:a6:1a:5d:62:c1:8c:0a:b7:88:71:17:
                    ae:80:d0:45:da:bf:b3:62:a2:8c:c4:74:3b:3b:c4:
                    52:f9:82:4a:4c:1f:60:0e:15:6b:11:12:c0:49:27:
                    c4:dc:da:2f:07:aa:64:52:1e:cd:8a:a9:0b:2c:62:
                    a9:9e:bd:e7:e5:18:ea:1d:18:ac:0a:78:3c:f5:ab:
                    be:50:bf:d7:d9:f0:e5:15:92:c9:1d:ed:44:f4:d3:
                    f1:61:74:92:cc:b1:29:6b:a5:b3:f3:b0:81:41:e6:
                    62:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:71:40:94:53:87:AE:30:65:F1:8D:F2:40:10:85:BA:67:80:D3:02
            X509v3 Authority Key Identifier:
                keyid:32:CB:3C:05:D6:A2:C5:1C:2F:F5:2D:D9:DC:B9:E2:B5:5C:40:48:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mss8BdaixRwv9S3Z3LnitVxASPk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/9062e2-95ae-4656-b2ee-984a8eb51e45/1/Mss8BdaixRwv9S3Z3LnitVxASPk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/9062e2-95ae-4656-b2ee-984a8eb51e45/1/Mss8BdaixRwv9S3Z3LnitVxASPk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:04:a1:14:7c:76:e4:0f:5b:dd:b9:4f:fb:81:a3:af:05:f4:
         e9:f1:f9:7c:4c:5b:64:5e:9e:6c:0c:0a:3c:dd:05:c1:af:22:
         13:ec:21:ed:b6:26:49:c2:23:fa:d2:d5:22:3a:4e:a4:75:ad:
         d6:ed:6f:94:07:a1:36:81:eb:76:2e:68:fe:40:ec:be:0e:8e:
         5c:79:b8:03:ee:f4:da:35:a8:ca:d3:03:fa:30:53:91:ac:fe:
         00:5b:57:01:af:a9:de:ac:cf:1c:12:19:58:0a:dc:00:b0:f1:
         a4:05:ac:47:db:9d:e0:53:31:c7:a8:c7:60:aa:8d:c1:d1:e1:
         e1:79:51:16:f1:62:27:af:e1:fe:97:00:9b:9b:22:e3:c3:f2:
         42:b2:5f:2b:84:d2:e4:aa:90:2c:54:e4:b1:14:57:2b:97:0e:
         8b:ba:80:1c:72:97:79:06:bb:56:0b:ff:c6:df:8b:44:b6:c9:
         7e:e9:61:41:2b:7f:6a:03:00:ab:bc:40:a1:15:49:37:76:45:
         d6:ec:3d:30:63:83:85:5b:a3:11:51:d4:b9:50:c7:3b:32:48:
         12:66:80:1a:f7:ce:e2:da:e0:56:5d:a4:9c:83:75:62:46:51:
         96:d8:46:7e:29:08:76:cd:43:3e:c4:c5:82:d4:2d:8f:f1:73:
         9f:cf:1b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:49 2026 by rpki-client