Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/282974-37fb-4d85-92bf-7098a7a52c7e/1/imo0EVg-JhQzSS5QR88xxGw9LB0.mft
File:                     imo0EVg-JhQzSS5QR88xxGw9LB0.mft (raw, json)
Hash identifier:          sJVELT8qfZ7STzl/Ez0NDzzUXN5gIxmENS1q6UWjb4c=
Subject key identifier:   DA:98:FA:1E:02:A4:8C:FC:F1:A9:FE:CE:7B:A0:7A:14:79:EF:59:F4
Authority key identifier: 8A:6A:34:11:58:3E:26:14:33:49:2E:50:47:CF:31:C4:6C:3D:2C:1D
Certificate issuer:       /CN=8a6a3411583e261433492e5047cf31c46c3d2c1d
Certificate serial:       019D37C0DF5732F49A14258FEFBC5ADFEAC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/imo0EVg-JhQzSS5QR88xxGw9LB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/282974-37fb-4d85-92bf-7098a7a52c7e/1/imo0EVg-JhQzSS5QR88xxGw9LB0.mft
Manifest number:          188C
Signing time:             Sun 29 Mar 2026 04:01:20 +0000
Manifest this update:     Sun 29 Mar 2026 04:01:20 +0000
Manifest next update:     Mon 30 Mar 2026 04:01:20 +0000
Files and hashes:         1: imo0EVg-JhQzSS5QR88xxGw9LB0.crl (hash: t4nWdz+F76iCbhyRXCosl3cMQ09iiE8YI0waot3rwEY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/282974-37fb-4d85-92bf-7098a7a52c7e/1/imo0EVg-JhQzSS5QR88xxGw9LB0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/282974-37fb-4d85-92bf-7098a7a52c7e/1/imo0EVg-JhQzSS5QR88xxGw9LB0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/imo0EVg-JhQzSS5QR88xxGw9LB0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 04:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:c0:df:57:32:f4:9a:14:25:8f:ef:bc:5a:df:ea:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a6a3411583e261433492e5047cf31c46c3d2c1d
        Validity
            Not Before: Mar 29 04:01:20 2026 GMT
            Not After : Mar 30 04:01:20 2026 GMT
        Subject: CN=da98fa1e02a48cfcf1a9fece7ba07a1479ef59f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0d:ea:91:0d:72:de:fd:2d:12:5c:f3:99:2e:
                    5d:36:e9:78:fc:43:88:3d:1e:51:29:cd:a6:8f:2e:
                    a9:4f:94:62:f9:04:49:fc:04:da:7c:53:48:3f:86:
                    72:4c:5c:f3:d5:14:f3:71:0d:8a:d6:25:c8:11:52:
                    d4:ec:af:89:ef:d4:90:35:09:11:f0:fc:78:20:75:
                    66:dc:5e:bb:52:f9:9f:af:a8:ca:30:da:ac:4e:a8:
                    61:6c:b3:83:e0:1c:29:80:5c:3c:0f:28:cc:c6:51:
                    dc:e3:4f:72:51:9e:e5:db:76:0c:0f:ac:4a:73:cd:
                    b3:1b:de:66:73:fd:52:31:6d:7c:92:25:f9:2e:a1:
                    42:42:5f:d4:4c:c6:dc:d0:5a:1c:6e:5e:04:44:10:
                    96:c5:b9:bb:25:ba:18:c2:49:fa:96:3a:95:fc:de:
                    88:f5:5c:a8:a4:0b:9e:c1:5b:aa:a7:a7:1b:c4:7d:
                    eb:d3:4d:8c:1f:8a:a7:43:40:8e:20:8d:0c:8f:41:
                    2c:4b:1a:66:cb:a8:dd:fb:84:d1:d3:20:f7:33:40:
                    fa:10:08:4f:ec:0b:90:54:1a:8a:44:0e:48:97:d5:
                    57:e6:a7:e7:d0:56:c5:da:b6:a0:3f:ba:79:02:8d:
                    32:32:ad:16:ba:a6:03:4e:bc:d5:4a:89:3b:8d:26:
                    a7:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:98:FA:1E:02:A4:8C:FC:F1:A9:FE:CE:7B:A0:7A:14:79:EF:59:F4
            X509v3 Authority Key Identifier:
                keyid:8A:6A:34:11:58:3E:26:14:33:49:2E:50:47:CF:31:C4:6C:3D:2C:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imo0EVg-JhQzSS5QR88xxGw9LB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/282974-37fb-4d85-92bf-7098a7a52c7e/1/imo0EVg-JhQzSS5QR88xxGw9LB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/282974-37fb-4d85-92bf-7098a7a52c7e/1/imo0EVg-JhQzSS5QR88xxGw9LB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:d2:c8:ef:8f:37:ac:57:3a:07:2e:72:30:13:03:0b:1f:bf:
         2a:75:8c:70:b9:e3:ec:a5:0f:fb:82:1b:f7:34:d4:d0:8d:a6:
         31:5f:71:a0:0b:c7:ab:dd:78:44:95:6a:2d:01:c3:76:1c:09:
         23:d7:98:08:98:e5:83:67:5e:19:3a:85:b2:e6:5e:00:0f:c7:
         e4:58:c6:85:b9:b3:37:2d:79:80:22:ee:52:d4:6b:d8:47:f4:
         e7:8f:5d:36:7f:a6:a1:1d:78:10:9c:4d:ef:ef:a0:ab:bb:c9:
         2b:ca:66:fd:28:8a:85:82:6e:62:d0:7f:5a:cd:09:f6:37:5a:
         39:a1:8b:ac:e7:3b:08:2f:c2:79:54:e9:67:bc:97:e7:2a:d4:
         6a:48:d9:e5:69:7b:88:a2:ad:0e:1e:66:74:fd:45:fd:c8:f4:
         80:5b:d8:69:0c:ea:dc:e7:70:36:ca:9e:24:85:9f:9d:e4:90:
         76:82:d8:d5:50:64:46:57:ab:67:94:8c:72:45:db:a5:41:06:
         cd:66:51:56:fd:f3:9d:8d:23:27:12:12:e0:0c:be:51:3e:0b:
         ef:ff:da:a4:63:61:ae:2b:4b:c2:17:7c:41:e7:22:ef:56:57:
         31:66:2e:75:a9:1f:6a:a4:f7:61:2d:b8:36:b8:24:92:ca:e2:
         8f:03:10:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:27 2026 by rpki-client