Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4668d1-22a4-432e-81fc-284e9bcf82c5/1/rARWSrE5dm8d7mSLNaChi702IQk.mft
File:                     rARWSrE5dm8d7mSLNaChi702IQk.mft (raw, json)
Hash identifier:          UzKHRT1yWu5AlqLiukGHt7+RnrzXpZsOcuWfivrUqHI=
Subject key identifier:   40:69:76:1E:6E:53:70:B6:27:5B:24:63:04:91:39:C2:0E:F3:5A:E2
Authority key identifier: AC:04:56:4A:B1:39:76:6F:1D:EE:64:8B:35:A0:A1:8B:BD:36:21:09
Certificate issuer:       /CN=ac04564ab139766f1dee648b35a0a18bbd362109
Certificate serial:       019D389C67574CD3B9FA9CD7AABADD671410
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rARWSrE5dm8d7mSLNaChi702IQk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/4668d1-22a4-432e-81fc-284e9bcf82c5/1/rARWSrE5dm8d7mSLNaChi702IQk.mft
Manifest number:          188C
Signing time:             Sun 29 Mar 2026 08:01:07 +0000
Manifest this update:     Sun 29 Mar 2026 08:01:07 +0000
Manifest next update:     Mon 30 Mar 2026 08:01:07 +0000
Files and hashes:         1: rARWSrE5dm8d7mSLNaChi702IQk.crl (hash: eKPl85sDaMRAMWu0MluTse/qHM6Gpo6fUoQwL4ALaR0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/4668d1-22a4-432e-81fc-284e9bcf82c5/1/rARWSrE5dm8d7mSLNaChi702IQk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/4668d1-22a4-432e-81fc-284e9bcf82c5/1/rARWSrE5dm8d7mSLNaChi702IQk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rARWSrE5dm8d7mSLNaChi702IQk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:9c:67:57:4c:d3:b9:fa:9c:d7:aa:ba:dd:67:14:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac04564ab139766f1dee648b35a0a18bbd362109
        Validity
            Not Before: Mar 29 08:01:07 2026 GMT
            Not After : Mar 30 08:01:07 2026 GMT
        Subject: CN=4069761e6e5370b6275b2463049139c20ef35ae2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:cb:a6:3b:b6:63:f9:f4:13:fe:e1:de:0e:7d:
                    05:01:ce:e8:72:f5:21:46:da:9f:eb:a8:8f:78:55:
                    34:a2:bc:9e:04:80:8e:99:7a:09:f2:dc:01:db:6a:
                    50:62:ba:a2:71:f4:f7:d2:fc:16:b9:cf:d7:6b:5b:
                    c8:a6:5f:07:2f:c9:a2:67:27:fe:3e:09:8f:ec:6c:
                    7e:a4:10:ca:f9:08:c3:09:63:a3:df:f0:71:ce:8f:
                    c9:96:87:ea:8a:d5:72:4b:56:cd:e9:61:7a:5e:51:
                    74:61:c8:a1:96:64:ad:2f:ee:03:3c:5a:40:1b:64:
                    34:d2:80:93:f0:b0:a9:db:96:38:15:93:05:88:89:
                    7f:d6:f3:62:15:a9:65:a5:01:94:97:89:98:cb:ac:
                    7f:3f:3d:2c:37:c5:dc:89:56:39:64:b8:29:56:28:
                    24:b5:f4:c4:c0:aa:95:4c:a4:40:26:d4:75:ab:3b:
                    98:5b:4f:9b:14:2b:ce:76:0d:80:4b:eb:1e:90:38:
                    b6:61:95:ee:0c:cb:a9:ce:6d:f5:5f:02:7a:9b:49:
                    48:d8:67:54:bb:97:5d:cf:b4:92:cb:e3:c3:79:2a:
                    51:9d:7f:78:04:2c:47:ef:3f:1a:bd:35:80:1a:96:
                    f2:65:27:25:01:f6:0b:eb:92:b8:f3:5b:0f:30:0a:
                    c3:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:69:76:1E:6E:53:70:B6:27:5B:24:63:04:91:39:C2:0E:F3:5A:E2
            X509v3 Authority Key Identifier:
                keyid:AC:04:56:4A:B1:39:76:6F:1D:EE:64:8B:35:A0:A1:8B:BD:36:21:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rARWSrE5dm8d7mSLNaChi702IQk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4668d1-22a4-432e-81fc-284e9bcf82c5/1/rARWSrE5dm8d7mSLNaChi702IQk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4668d1-22a4-432e-81fc-284e9bcf82c5/1/rARWSrE5dm8d7mSLNaChi702IQk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:47:23:c4:6c:8f:2e:9f:e9:25:9c:ae:88:99:39:7b:14:92:
         f2:55:2e:81:0f:e9:5c:07:60:d6:61:ab:3a:a1:9d:8a:6e:27:
         1d:d1:9c:e7:c2:6b:36:53:ab:6f:1a:7d:97:c1:31:93:8c:40:
         9f:ac:70:09:e8:3f:60:8e:b7:43:90:f7:39:ce:93:64:04:1f:
         4e:af:16:63:ee:1b:60:7e:61:fc:04:67:fa:46:64:2b:d2:ae:
         fc:74:7f:c8:e8:56:0d:73:98:e5:49:f6:b5:4d:4a:75:50:12:
         a4:b5:58:a7:e9:74:1a:86:8b:36:b2:e9:80:b9:96:69:2e:ed:
         8f:0b:28:de:fc:7d:26:aa:f5:c2:27:9f:74:49:28:3b:51:b2:
         d7:e3:e1:bb:51:ca:47:ef:d8:68:c3:aa:dd:0b:a9:4b:64:37:
         5f:92:27:ff:c1:7f:6e:f1:45:ce:c0:a8:54:6c:92:b3:30:4d:
         50:ad:df:c1:4c:4a:74:ea:3a:9a:d8:d6:23:d0:b4:a0:43:f3:
         e7:fd:71:cd:9e:c7:31:fa:05:69:23:5a:89:cd:d8:1f:89:24:
         36:b2:53:39:e2:05:c3:7b:60:a9:f1:25:13:7c:1e:36:44:ae:
         1d:81:87:3d:ab:2c:ed:07:29:b0:b8:4e:4d:ac:ab:44:80:d2:
         a5:32:fc:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:48:00 2026 by rpki-client