Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.mft
File:                     c8vBR-rdgVSBUfNRDi3gnYaKxsw.mft (raw, json)
Hash identifier:          6iNH7Gb0HzE6W8pfnGuHae++qVaHBdNmPhjChtIfjBM=
Subject key identifier:   F6:B0:B4:39:FB:76:13:F0:DB:CA:7F:F4:CA:D5:8F:D0:0C:46:B0:10
Authority key identifier: 73:CB:C1:47:EA:DD:81:54:81:51:F3:51:0E:2D:E0:9D:86:8A:C6:CC
Certificate issuer:       /CN=73cbc147eadd81548151f3510e2de09d868ac6cc
Certificate serial:       019D389C056CED0DE92D6D456E5AABD17682
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c8vBR-rdgVSBUfNRDi3gnYaKxsw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.mft
Manifest number:          188F
Signing time:             Sun 29 Mar 2026 08:00:42 +0000
Manifest this update:     Sun 29 Mar 2026 08:00:42 +0000
Manifest next update:     Mon 30 Mar 2026 08:00:42 +0000
Files and hashes:         1: c8vBR-rdgVSBUfNRDi3gnYaKxsw.crl (hash: F+3mTgVNSBjBIgHxnzN8oXY+UMTyR91GVIh6krs7jIg=)
                          2: fy0xLRcedKrdOz_tcqW1Wz9EYV8.roa (hash: UicbF6HqFzNjuTONdGcIiDeIjerH1Ziz3AoeI+o7LaE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c8vBR-rdgVSBUfNRDi3gnYaKxsw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:9c:05:6c:ed:0d:e9:2d:6d:45:6e:5a:ab:d1:76:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73cbc147eadd81548151f3510e2de09d868ac6cc
        Validity
            Not Before: Mar 29 08:00:42 2026 GMT
            Not After : Mar 30 08:00:42 2026 GMT
        Subject: CN=f6b0b439fb7613f0dbca7ff4cad58fd00c46b010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b9:9e:fa:4d:ad:30:53:ae:ea:a0:7d:7e:48:
                    8e:73:16:af:25:50:2b:bf:b9:80:3e:11:50:fd:cd:
                    e8:08:60:f7:49:16:f8:63:8a:76:33:51:c7:d3:da:
                    ea:91:c3:ea:b8:79:07:73:17:8c:60:68:f6:b8:96:
                    d4:d8:d3:8b:56:67:f2:37:7e:1d:f7:53:38:d1:07:
                    f1:95:73:f9:e2:4a:d5:21:58:ed:07:38:ac:63:bf:
                    11:ca:69:20:0e:6d:d7:69:cf:d3:48:36:a8:cf:f2:
                    ab:2e:b5:5a:cd:5b:74:fd:cb:e6:f9:df:4c:b7:cd:
                    24:11:02:cc:ae:87:53:06:3b:36:06:c6:c6:d6:04:
                    0c:4d:2e:6d:bf:04:90:87:4b:96:f5:bc:67:db:c4:
                    3d:e8:f5:36:af:80:61:a9:0b:b7:a6:02:cf:f8:09:
                    4a:38:49:73:a3:6b:bb:f6:02:92:58:16:67:a2:fd:
                    c5:e4:2c:ba:9d:1a:3c:f5:9a:09:d2:b7:db:e1:df:
                    62:2c:3a:b6:cc:1c:74:1e:77:55:5a:44:ce:73:7e:
                    c3:76:f6:14:dd:12:63:fe:44:c1:6c:b0:e4:73:e1:
                    41:67:de:0a:5a:61:db:6a:0a:0c:b7:a5:45:b6:17:
                    24:42:33:d0:59:27:97:9d:d6:e5:76:74:88:71:80:
                    02:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:B0:B4:39:FB:76:13:F0:DB:CA:7F:F4:CA:D5:8F:D0:0C:46:B0:10
            X509v3 Authority Key Identifier:
                keyid:73:CB:C1:47:EA:DD:81:54:81:51:F3:51:0E:2D:E0:9D:86:8A:C6:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8vBR-rdgVSBUfNRDi3gnYaKxsw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:e2:a2:64:3e:00:b1:7d:87:a2:55:ae:8a:21:eb:dd:76:1a:
         96:fe:93:ad:fa:b0:50:17:d4:97:ee:e2:c0:9a:20:c9:26:08:
         18:9a:3d:8f:75:56:07:c5:fe:b6:da:96:5a:b6:1f:5a:1a:df:
         c5:92:73:3f:fc:c7:32:7f:23:60:3f:8e:ed:f4:2a:8c:24:7a:
         8a:79:27:b6:74:a2:28:62:d7:61:e6:e2:b6:18:77:5a:ce:c7:
         26:82:6d:6b:1a:4e:d6:99:b1:31:4b:bb:87:17:9f:28:97:b8:
         ed:c3:6b:08:3b:27:1e:9b:56:b8:fe:27:02:c0:e7:87:e3:7a:
         74:80:44:9a:7e:d2:2c:d0:e7:d5:35:b9:7d:8d:0f:5a:1c:88:
         db:6c:e4:36:2d:5a:23:23:1d:ef:73:16:77:8e:b6:44:dc:ac:
         42:ae:9d:69:fc:eb:f2:ac:cc:87:19:a1:cb:67:5f:58:53:35:
         6e:56:b6:b4:26:df:76:d2:e5:85:d8:c3:1b:f3:f6:c0:69:24:
         57:82:80:9e:df:9e:da:37:6b:47:87:72:c4:f0:a2:c2:dd:8f:
         53:12:71:cf:7c:18:a4:18:99:6c:2b:29:d7:8d:4a:71:72:e3:
         12:f9:2b:21:55:11:ec:1b:1b:06:83:2d:03:a6:6b:6f:73:27:
         ff:9a:01:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:12 2026 by rpki-client