Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft
File:                     Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft (raw, json)
Hash identifier:          af6Q3MzGGAXP9gB/n8GkEwc/CKN5W0rrf3Qg/4zcC6A=
Subject key identifier:   53:35:0A:9A:4E:0A:11:22:93:D3:35:30:A4:2F:81:5F:23:12:57:C1
Authority key identifier: 23:1E:28:35:9C:18:0E:A6:C4:88:A9:8C:A3:AF:77:B5:BB:79:3D:EE
Certificate issuer:       /CN=231e28359c180ea6c488a98ca3af77b5bb793dee
Certificate serial:       019D31875E87EBEC41C19A1B820F51A70C5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ix4oNZwYDqbEiKmMo693tbt5Pe4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft
Manifest number:          188C
Signing time:             Fri 27 Mar 2026 23:00:48 +0000
Manifest this update:     Fri 27 Mar 2026 23:00:48 +0000
Manifest next update:     Sat 28 Mar 2026 23:00:48 +0000
Files and hashes:         1: Ix4oNZwYDqbEiKmMo693tbt5Pe4.crl (hash: POFk9zyOc+TbRGcQgRz5xCBNWgxFkmjvpBTz8ANv3c8=)
                          2: eMGDdbWRH5Z7Ggcz_C-UuWgytSA.roa (hash: yeQz6KJsUVMwbssIQpUY/HsteXeV6YTAPt+B2xHK1j8=)
                          3: jgrgGJ7rf2LX0XINO9c30QdaUWA.roa (hash: A76RxsC50O0v/gwBJ9yUpgGn/DjKbkzrJUvq58cmXPs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ix4oNZwYDqbEiKmMo693tbt5Pe4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Mar 2026 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:31:87:5e:87:eb:ec:41:c1:9a:1b:82:0f:51:a7:0c:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=231e28359c180ea6c488a98ca3af77b5bb793dee
        Validity
            Not Before: Mar 27 23:00:48 2026 GMT
            Not After : Mar 28 23:00:48 2026 GMT
        Subject: CN=53350a9a4e0a112293d33530a42f815f231257c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e7:55:bd:e4:8b:91:eb:0d:74:a3:81:46:9f:
                    7d:6d:15:0d:76:fb:e0:fe:d3:77:74:96:b6:dc:ca:
                    cc:ca:de:bb:3e:31:b3:38:75:1f:3e:9b:4b:38:b3:
                    c7:62:9f:c7:be:4f:26:7a:1d:20:98:93:32:8b:38:
                    6a:7f:c3:5a:64:d2:be:67:ff:bc:55:f3:8d:53:d3:
                    4a:7f:ed:f7:50:b4:9f:3f:b2:ee:77:d8:5d:20:71:
                    0b:91:c2:31:46:c0:0d:ac:7a:3d:d4:d4:34:32:43:
                    77:41:36:2c:64:b3:c8:d0:38:8c:62:c8:ee:e1:5a:
                    c8:d0:08:56:2b:de:c0:b6:2c:c8:1e:8a:61:b5:c9:
                    94:0b:21:39:a4:ab:28:a7:5a:b8:ac:17:e7:05:b8:
                    d6:81:36:21:d1:db:53:7e:f6:de:14:6e:0b:f3:3c:
                    2d:7b:c3:30:59:26:5a:02:d7:eb:c9:1f:e3:6a:35:
                    e8:e2:9f:88:65:7c:b6:f9:2a:cc:d7:3d:3e:54:67:
                    bc:d9:73:e7:29:76:5d:2c:f4:30:c5:bf:77:e2:f1:
                    fd:d7:3e:54:47:7f:e6:fe:4a:d0:ae:e2:12:56:b9:
                    93:86:22:1c:f8:62:4a:cb:96:fc:4f:b6:55:11:04:
                    0c:fc:af:f1:ec:d6:a0:df:81:b7:c3:39:62:2f:63:
                    3a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:35:0A:9A:4E:0A:11:22:93:D3:35:30:A4:2F:81:5F:23:12:57:C1
            X509v3 Authority Key Identifier:
                keyid:23:1E:28:35:9C:18:0E:A6:C4:88:A9:8C:A3:AF:77:B5:BB:79:3D:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ix4oNZwYDqbEiKmMo693tbt5Pe4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:d5:93:6d:6a:0d:40:db:e6:23:20:80:6e:0e:f6:4e:39:b0:
         36:6a:bb:8d:f3:70:24:d8:50:34:3c:85:9a:8e:44:e3:3c:72:
         1f:ed:0a:41:79:36:4b:6c:29:87:1e:a1:36:bf:61:7d:e2:bb:
         79:fd:bd:2a:db:60:3d:37:e3:a6:af:eb:d3:11:1c:3a:d0:0a:
         25:a2:7e:f5:c3:6e:72:2e:a1:26:07:90:b6:ed:ba:34:cb:fc:
         a2:67:8e:df:2d:c2:11:b3:9b:be:80:c0:09:3c:62:4c:a4:7d:
         f1:1f:75:81:80:1d:a6:75:52:5d:09:7b:0d:fe:ae:3e:61:a4:
         d4:90:61:7d:db:68:3b:14:62:2c:cc:b2:ce:a6:f2:8a:47:b4:
         d2:35:4e:a7:38:17:9a:47:ca:8b:37:14:2a:d8:58:46:ef:78:
         fb:6b:c6:f4:79:fb:be:ac:f0:97:05:56:9a:63:b1:cd:00:6f:
         ee:9c:5b:59:dc:a8:d2:e8:3f:d1:97:eb:c9:19:1f:b2:34:c8:
         63:f0:80:ab:6f:f2:e5:3a:13:00:9a:96:85:dc:14:5f:37:2c:
         ef:20:0f:f3:e3:36:a6:d0:75:4e:e6:1e:c2:f3:01:b4:db:ec:
         24:91:56:41:2c:bf:15:50:3d:f0:52:ce:b9:b7:38:58:af:36:
         34:cb:38:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 04:32:10 2026 by rpki-client