Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
File:                     89SUuLJxr7fGLxOX9xLPLc02QYU.mft (raw, json)
Hash identifier:          JwG2My3s3pL/+l2NZsR4ceZIYzppqZD55pYbOZfMmk4=
Subject key identifier:   E2:E9:6B:4A:90:ED:79:B3:9F:B5:D5:18:AE:6B:84:B9:BB:D4:CB:32
Authority key identifier: F3:D4:94:B8:B2:71:AF:B7:C6:2F:13:97:F7:12:CF:2D:CD:36:41:85
Certificate issuer:       /CN=f3d494b8b271afb7c62f1397f712cf2dcd364185
Certificate serial:       019D2D3CA982551E55EEC9C08E2CC04ABDFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/89SUuLJxr7fGLxOX9xLPLc02QYU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
Manifest number:          188D
Signing time:             Fri 27 Mar 2026 03:00:43 +0000
Manifest this update:     Fri 27 Mar 2026 03:00:43 +0000
Manifest next update:     Sat 28 Mar 2026 03:00:43 +0000
Files and hashes:         1: 89SUuLJxr7fGLxOX9xLPLc02QYU.crl (hash: RmYF5kbpCJtchYv8zrqqCaUHA2N055ib7VJ9HjKCSGA=)
                          2: mhvprDFBImPl7iFEWW3FxFWOZ6g.roa (hash: YcvQtGrqc9rsfbkzmvXWNEdP5V2+qw1zO++Zl2+6+Eo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/89SUuLJxr7fGLxOX9xLPLc02QYU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Mar 2026 03:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2d:3c:a9:82:55:1e:55:ee:c9:c0:8e:2c:c0:4a:bd:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3d494b8b271afb7c62f1397f712cf2dcd364185
        Validity
            Not Before: Mar 27 03:00:43 2026 GMT
            Not After : Mar 28 03:00:43 2026 GMT
        Subject: CN=e2e96b4a90ed79b39fb5d518ae6b84b9bbd4cb32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:71:62:c6:2d:82:7e:4d:22:8a:b9:fd:93:02:
                    e5:1a:85:75:33:dc:3e:c0:a1:25:b0:d3:29:82:e0:
                    55:61:cd:83:bf:2b:34:56:f1:90:d7:a2:50:8b:b4:
                    cb:6a:a0:1c:c6:01:82:32:6f:7f:69:b0:b3:08:9b:
                    d6:cf:1f:84:ee:c1:5d:b1:8a:17:4e:81:31:b2:06:
                    72:bc:08:cc:ac:86:74:a1:f7:af:54:ab:1e:47:bf:
                    a3:f4:c3:c3:39:ce:a5:bd:dc:be:eb:19:90:8b:f3:
                    9a:fd:18:c3:09:00:d6:2a:1a:97:27:3c:3e:db:c6:
                    5a:6a:47:08:6c:39:61:8a:02:2d:59:f3:94:de:92:
                    55:b0:35:c5:6b:10:63:aa:d4:69:f2:be:51:49:80:
                    1f:86:e6:18:56:2d:96:cb:00:99:03:77:55:7b:00:
                    41:6d:71:bb:b5:76:6a:91:c4:04:21:a3:03:ac:04:
                    14:ff:ff:3f:ca:d2:0c:d0:ce:03:1e:35:a3:64:b2:
                    f8:2c:be:58:f6:97:43:d3:08:a7:26:b2:99:90:76:
                    ce:10:c4:60:52:46:4e:3a:69:5c:1f:a6:c7:c7:a0:
                    de:ce:2c:96:70:96:f0:ee:94:fe:07:7f:c9:d4:a8:
                    eb:26:cb:ba:1e:3b:0b:00:64:85:19:4f:eb:3c:06:
                    ad:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:E9:6B:4A:90:ED:79:B3:9F:B5:D5:18:AE:6B:84:B9:BB:D4:CB:32
            X509v3 Authority Key Identifier:
                keyid:F3:D4:94:B8:B2:71:AF:B7:C6:2F:13:97:F7:12:CF:2D:CD:36:41:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/89SUuLJxr7fGLxOX9xLPLc02QYU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:d0:d8:59:d2:87:68:60:8b:d2:a5:4f:23:dd:6b:c3:a7:53:
         70:f0:e3:e8:ae:31:ca:99:ea:64:7c:50:c8:cd:fb:8c:e6:62:
         e9:43:8a:43:df:95:02:8e:b0:f4:38:86:38:e7:0c:64:02:91:
         79:cc:6b:8c:46:bd:41:7c:2f:5f:77:b4:81:62:ad:d4:30:5d:
         36:ac:3e:c7:55:a9:08:62:61:ae:8e:17:db:56:c3:a4:fb:dc:
         e6:95:8b:91:5a:96:d5:71:ef:56:f7:1b:74:eb:04:d3:cd:ba:
         03:d4:7a:ae:2f:a9:fb:81:4d:09:d9:91:2e:1d:d6:40:b4:a9:
         c8:17:8a:63:b0:c4:76:e5:0b:56:11:cd:42:29:38:2c:a8:88:
         0e:0c:22:38:88:56:c7:b9:d0:06:ab:d8:5f:6b:2f:52:f5:6c:
         70:75:d4:7e:d2:40:8e:7e:97:ab:36:8e:01:4d:53:1f:a6:ee:
         ea:25:19:9e:64:f4:4e:02:68:f9:f1:45:35:be:b9:7e:8c:19:
         2e:28:4a:a7:78:a8:55:c0:64:ce:1c:bd:40:df:14:73:f1:86:
         39:3b:cc:b3:64:fd:db:0e:a5:b6:c4:e3:61:7c:1e:7d:e0:73:
         99:3f:9e:4b:49:ce:dd:40:44:a3:9e:94:7b:63:f3:38:1d:69:
         7a:11:7f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 13:57:37 2026 by rpki-client