Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.mft
File:                     w-hlabFpDJ3_dFy7Q4BbhYKwBa0.mft (raw, json)
Hash identifier:          Od/cwBEzZTr4EcwCLSQu9xtY9PL4PFW/+/kTBiodWzs=
Subject key identifier:   FE:9A:2C:8E:A9:F1:12:C0:01:DF:30:DD:74:00:F6:4E:32:6D:22:F1
Authority key identifier: C3:E8:65:69:B1:69:0C:9D:FF:74:5C:BB:43:80:5B:85:82:B0:05:AD
Certificate issuer:       /CN=c3e86569b1690c9dff745cbb43805b8582b005ad
Certificate serial:       019D303D76F306678E4DE5F0BBCCBF7E5F2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.mft
Manifest number:          188D
Signing time:             Fri 27 Mar 2026 17:00:27 +0000
Manifest this update:     Fri 27 Mar 2026 17:00:27 +0000
Manifest next update:     Sat 28 Mar 2026 17:00:27 +0000
Files and hashes:         1: 2cEiNOI5J5e5Lv24Xs7DVX8Bcdo.roa (hash: cybpkVwdsMajo+j6GQEPWPYPJtxhQXNnJjY27Ojj6kI=)
                          2: H-6m9OAus7SJdJgHPXm_EOjYjKw.roa (hash: gi8ow+847xYV+vC4uNruDQ8q4FPVqzKl6+lW3Re5puA=)
                          3: w-hlabFpDJ3_dFy7Q4BbhYKwBa0.crl (hash: TKkGDDy3Um6Nvpu5xsT0daxxHCo15btjEgzzzbdHEZk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Mar 2026 15:47:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:30:3d:76:f3:06:67:8e:4d:e5:f0:bb:cc:bf:7e:5f:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3e86569b1690c9dff745cbb43805b8582b005ad
        Validity
            Not Before: Mar 27 17:00:27 2026 GMT
            Not After : Mar 28 17:00:27 2026 GMT
        Subject: CN=fe9a2c8ea9f112c001df30dd7400f64e326d22f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:fe:87:2c:07:6c:65:d0:0e:b4:ff:49:e5:63:
                    8e:1a:81:3d:6d:ae:04:b4:95:3c:55:1c:a0:a3:2b:
                    a0:a3:5d:ed:ee:3d:58:44:be:66:81:7e:05:74:eb:
                    55:73:a5:e9:a4:08:73:3f:15:ba:ac:36:49:3e:c4:
                    8c:10:94:1d:37:29:a7:19:cd:a4:aa:43:54:ae:9e:
                    fd:09:f0:62:f3:e6:6c:48:38:86:b5:ff:58:07:60:
                    a1:00:88:e8:99:29:53:a8:05:ad:c1:dc:a1:30:ad:
                    2a:74:5b:f8:37:73:70:9e:11:9b:ea:f7:5c:10:4a:
                    d3:26:d9:2a:a9:01:9a:8c:2f:29:64:99:fe:84:dc:
                    f6:47:4d:c5:f7:48:ee:d9:10:11:d3:16:70:86:1a:
                    f4:15:cd:6d:52:99:10:30:3c:2b:3a:2a:46:0c:4a:
                    f7:0d:b2:85:25:87:31:0b:38:cb:37:7c:78:0a:02:
                    f8:d7:b1:1f:5f:b6:3c:85:52:55:fa:5c:d5:c6:c6:
                    ff:8d:79:a2:32:94:84:a8:bc:7f:a8:ba:a2:41:0f:
                    05:af:03:92:f5:49:94:78:ef:ea:99:b0:6c:c6:29:
                    99:44:fd:b9:d7:fb:22:45:b7:51:23:db:d0:18:ac:
                    ba:42:26:b7:be:fd:65:e6:cb:10:e7:14:09:2d:0a:
                    8b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:9A:2C:8E:A9:F1:12:C0:01:DF:30:DD:74:00:F6:4E:32:6D:22:F1
            X509v3 Authority Key Identifier:
                keyid:C3:E8:65:69:B1:69:0C:9D:FF:74:5C:BB:43:80:5B:85:82:B0:05:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:90:3d:14:d8:60:2c:3e:84:15:d4:43:bd:3e:2e:2f:9c:b3:
         c9:54:2d:f0:16:26:cd:2f:61:38:52:df:90:3c:bb:77:e8:81:
         8d:74:64:fc:49:e4:f0:b5:85:88:9e:f0:5b:a2:a8:b5:45:a0:
         6a:fd:f3:e7:44:b9:90:90:de:bb:d8:07:76:92:16:0b:bc:52:
         a4:e2:05:2f:4b:a0:eb:fa:93:26:e3:b6:5d:c1:1b:f2:45:5d:
         5a:2a:56:c0:5e:f8:10:1a:c9:a9:c2:ad:54:4f:3b:44:b1:60:
         5d:79:66:6b:d7:38:21:32:ed:85:ec:f4:e6:ec:04:c3:8b:05:
         45:c7:fb:20:55:fc:a6:fa:4d:7a:38:9a:0d:80:e8:19:c5:ea:
         25:01:23:38:07:97:24:a6:dd:15:68:ea:ba:a4:37:32:1a:74:
         27:d5:39:76:11:a2:80:5d:8e:22:86:18:cc:a2:d9:c4:32:60:
         42:63:2b:27:e5:0e:6e:ef:34:84:03:dc:2e:22:f6:8c:38:ed:
         82:5c:8f:df:de:e9:40:c2:22:3a:f2:16:07:37:98:c1:56:ba:
         6a:b4:d1:e0:c0:b4:28:6d:a2:c8:14:50:dd:a9:5c:b0:c5:46:
         55:08:29:94:b6:0f:66:06:af:c4:da:a1:01:24:d5:58:47:0d:
         b5:2a:77:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 22:24:19 2026 by rpki-client