Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/8acc4b-e0a2-4d21-b864-990307d203c8/1/Obi08Elz83zGn7fCNGj5U_FJQg4.mft
File:                     Obi08Elz83zGn7fCNGj5U_FJQg4.mft (raw, json)
Hash identifier:          hqnmf5mYQv8yBBlIyRamwT+BUPDGJOdIWUX+EFRiPLw=
Subject key identifier:   FF:D9:C7:F0:5F:22:E4:B2:C8:FA:E8:08:65:6F:98:A6:23:FB:F8:6A
Authority key identifier: 39:B8:B4:F0:49:73:F3:7C:C6:9F:B7:C2:34:68:F9:53:F1:49:42:0E
Certificate issuer:       /CN=39b8b4f04973f37cc69fb7c23468f953f149420e
Certificate serial:       019D3752671CBF63347294CA907E234DC28B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Obi08Elz83zGn7fCNGj5U_FJQg4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/8acc4b-e0a2-4d21-b864-990307d203c8/1/Obi08Elz83zGn7fCNGj5U_FJQg4.mft
Manifest number:          188F
Signing time:             Sun 29 Mar 2026 02:00:40 +0000
Manifest this update:     Sun 29 Mar 2026 02:00:40 +0000
Manifest next update:     Mon 30 Mar 2026 02:00:40 +0000
Files and hashes:         1: AJvahEEqtSZqRsCz5wURmumRzYc.roa (hash: c3wSVS47p9kC1Yvy6xlsE2dP8Wc3/54qv1aJh3wxi0s=)
                          2: Obi08Elz83zGn7fCNGj5U_FJQg4.crl (hash: mMZxENOKATyZPmVtM/53IRZyrVsaH8OK708UHHhtvxM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/8acc4b-e0a2-4d21-b864-990307d203c8/1/Obi08Elz83zGn7fCNGj5U_FJQg4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/8acc4b-e0a2-4d21-b864-990307d203c8/1/Obi08Elz83zGn7fCNGj5U_FJQg4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Obi08Elz83zGn7fCNGj5U_FJQg4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 02:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:52:67:1c:bf:63:34:72:94:ca:90:7e:23:4d:c2:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39b8b4f04973f37cc69fb7c23468f953f149420e
        Validity
            Not Before: Mar 29 02:00:40 2026 GMT
            Not After : Mar 30 02:00:40 2026 GMT
        Subject: CN=ffd9c7f05f22e4b2c8fae808656f98a623fbf86a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:43:71:4a:6f:ea:6a:f0:4e:a6:71:d8:42:dc:
                    c3:10:ce:7b:c9:51:60:85:79:68:1b:f7:f5:db:ca:
                    bb:d0:04:ce:e2:39:9e:f3:f6:85:5f:54:4e:b7:5e:
                    d6:4e:7a:0d:36:17:e5:ab:a1:8b:5f:d5:c0:93:41:
                    61:c0:50:76:ac:29:b2:17:a8:f3:b2:0a:b2:b2:1e:
                    4a:42:f1:2a:5b:04:de:05:bf:57:3b:f7:d7:06:3d:
                    f2:e7:cc:11:d4:ab:14:84:82:cc:f2:13:b7:86:b3:
                    28:35:be:bc:bf:e7:ad:97:32:31:3c:3a:29:3a:ae:
                    9d:d9:ce:ff:14:b2:a9:c5:35:54:b7:ab:ac:46:b0:
                    dc:a0:df:7b:bb:3b:9c:df:9b:87:4b:63:ea:9a:cb:
                    a2:bd:7c:a2:ff:57:20:1c:a1:84:71:9c:14:18:35:
                    ab:37:80:68:24:1c:48:c1:ef:8c:6a:65:ab:1f:db:
                    0d:b5:63:97:8f:42:6c:c6:b9:16:2f:5d:f4:33:60:
                    1e:76:1c:d2:f4:5c:9b:37:b2:8f:c1:aa:31:41:17:
                    08:57:aa:82:8f:22:ed:11:46:89:22:95:21:08:f8:
                    31:4a:d4:ba:5a:3c:92:d0:a0:c6:04:bc:1c:6a:e8:
                    11:de:de:1d:b9:d9:5c:3c:78:84:ea:fb:20:f4:51:
                    65:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:D9:C7:F0:5F:22:E4:B2:C8:FA:E8:08:65:6F:98:A6:23:FB:F8:6A
            X509v3 Authority Key Identifier:
                keyid:39:B8:B4:F0:49:73:F3:7C:C6:9F:B7:C2:34:68:F9:53:F1:49:42:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Obi08Elz83zGn7fCNGj5U_FJQg4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8acc4b-e0a2-4d21-b864-990307d203c8/1/Obi08Elz83zGn7fCNGj5U_FJQg4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8acc4b-e0a2-4d21-b864-990307d203c8/1/Obi08Elz83zGn7fCNGj5U_FJQg4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:83:0b:67:5c:63:c0:e6:3b:5b:03:27:9a:2f:99:94:f1:36:
         25:2c:fa:6f:76:69:ef:e4:66:b7:0a:20:00:6f:32:32:c4:54:
         ca:29:07:8d:be:4a:b4:23:20:8d:d1:6d:39:84:fc:ab:51:e7:
         41:48:a3:95:28:d3:b9:e4:e7:84:62:89:53:14:a0:2c:ad:38:
         47:cd:72:4e:bd:59:91:17:61:9c:83:47:29:bd:98:30:c9:db:
         de:9d:55:dd:cf:87:77:a9:4d:1e:08:ac:2e:9b:55:df:8f:05:
         ef:4f:da:18:6e:c2:20:eb:7f:08:c9:90:97:9a:72:c4:17:12:
         bc:ba:e0:13:e2:57:f1:1b:89:ba:58:3e:fa:62:f2:39:8e:5a:
         4c:b4:aa:0b:c0:b8:b3:ee:f4:47:06:80:11:8f:1a:79:dd:a1:
         4b:50:b9:35:85:a3:17:0d:1f:52:d2:b0:67:23:b8:65:0b:6a:
         b8:52:1d:3c:57:0b:b2:c0:6e:48:62:f1:56:fa:bc:e0:48:0f:
         c5:0e:e1:a7:f2:9e:72:2a:f4:bf:2c:44:81:84:b2:b3:b9:16:
         27:b9:1e:e3:74:15:bb:96:18:6a:7a:f8:86:5c:36:14:a4:37:
         7b:8d:5d:2f:2f:25:11:50:50:14:44:95:63:70:9c:c5:bb:c2:
         29:60:07:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:44:36 2026 by rpki-client