Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/32b4a2-2b2f-4f6a-9b48-c1f3b9ede4db/1/eL0cbGiKF1q8jVmPvNEH_KUlS94.mft
File:                     eL0cbGiKF1q8jVmPvNEH_KUlS94.mft (raw, json)
Hash identifier:          aPTYIBy6B3kSl8Op7ykAXVPN9xA5Y8x9dpsZcshZ6JU=
Subject key identifier:   67:90:5C:03:3B:4F:04:A8:B5:D0:91:45:9D:7A:C1:C4:7B:94:06:95
Authority key identifier: 78:BD:1C:6C:68:8A:17:5A:BC:8D:59:8F:BC:D1:07:FC:A5:25:4B:DE
Certificate issuer:       /CN=78bd1c6c688a175abc8d598fbcd107fca5254bde
Certificate serial:       019D37C10424A2B6C26936A2F39AAEE4E59B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eL0cbGiKF1q8jVmPvNEH_KUlS94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/32b4a2-2b2f-4f6a-9b48-c1f3b9ede4db/1/eL0cbGiKF1q8jVmPvNEH_KUlS94.mft
Manifest number:          188F
Signing time:             Sun 29 Mar 2026 04:01:29 +0000
Manifest this update:     Sun 29 Mar 2026 04:01:29 +0000
Manifest next update:     Mon 30 Mar 2026 04:01:29 +0000
Files and hashes:         1: QLrva8cnLmPH0hjKUEwdPyYxrik.roa (hash: ZbeD2fd9caY5fcARM6Ra4GSlJm2ocmtIyBY6lWiGmwc=)
                          2: eL0cbGiKF1q8jVmPvNEH_KUlS94.crl (hash: qf/6egtWY4yr7ZsWV1pvxVwo4KsEgsO6hVqsbmu1lVs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/32b4a2-2b2f-4f6a-9b48-c1f3b9ede4db/1/eL0cbGiKF1q8jVmPvNEH_KUlS94.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/32b4a2-2b2f-4f6a-9b48-c1f3b9ede4db/1/eL0cbGiKF1q8jVmPvNEH_KUlS94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eL0cbGiKF1q8jVmPvNEH_KUlS94.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 04:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:c1:04:24:a2:b6:c2:69:36:a2:f3:9a:ae:e4:e5:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78bd1c6c688a175abc8d598fbcd107fca5254bde
        Validity
            Not Before: Mar 29 04:01:29 2026 GMT
            Not After : Mar 30 04:01:29 2026 GMT
        Subject: CN=67905c033b4f04a8b5d091459d7ac1c47b940695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:76:1e:20:d4:14:76:a1:16:ee:50:f3:0d:7d:
                    65:23:6c:90:4e:fc:c7:89:f7:6d:cf:5a:ff:73:3f:
                    bf:6a:dd:b0:e7:d2:9a:a1:a9:c4:98:29:c1:88:9a:
                    16:fc:48:65:91:33:da:8b:ce:58:08:f0:ac:48:7f:
                    ea:dc:d3:0e:3b:bf:09:f3:be:bc:2f:54:e7:5f:06:
                    18:1d:b7:15:10:f4:6f:9c:29:79:61:05:4e:67:9e:
                    97:9a:f0:90:8c:02:9e:94:91:e5:d8:27:07:6a:cc:
                    a6:a1:a4:19:30:61:43:34:5c:48:99:53:5c:77:5d:
                    e8:50:27:19:54:9a:48:6d:99:67:69:7c:40:ff:62:
                    35:48:7c:b7:6d:7d:cf:e6:c8:17:eb:99:f2:3b:45:
                    55:4d:93:8e:1f:bb:2e:55:92:60:3e:9c:59:1c:24:
                    ef:99:d4:6d:00:18:6d:6b:10:1b:0c:d2:df:ce:a8:
                    72:70:26:39:ae:8b:97:3c:c6:fc:3f:2d:05:3b:59:
                    07:a6:15:c1:50:22:3b:8f:cc:7f:31:4b:07:a3:93:
                    11:58:a1:27:0b:6b:0a:6d:3c:0a:d0:36:a8:48:33:
                    3e:13:0b:38:20:e9:76:01:ba:26:78:e9:d5:fc:47:
                    94:b1:0a:6d:8a:14:4b:d3:8b:06:0d:e9:d5:45:22:
                    4d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:90:5C:03:3B:4F:04:A8:B5:D0:91:45:9D:7A:C1:C4:7B:94:06:95
            X509v3 Authority Key Identifier:
                keyid:78:BD:1C:6C:68:8A:17:5A:BC:8D:59:8F:BC:D1:07:FC:A5:25:4B:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eL0cbGiKF1q8jVmPvNEH_KUlS94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/32b4a2-2b2f-4f6a-9b48-c1f3b9ede4db/1/eL0cbGiKF1q8jVmPvNEH_KUlS94.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/32b4a2-2b2f-4f6a-9b48-c1f3b9ede4db/1/eL0cbGiKF1q8jVmPvNEH_KUlS94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:53:68:91:79:b6:65:f4:46:cc:b0:e4:38:1b:9d:92:db:a3:
         a9:d5:6e:6c:a5:19:f6:fa:03:a4:f6:09:21:84:06:bb:4a:3e:
         63:e0:ca:16:46:25:8c:80:f3:47:fd:fe:75:57:f8:6d:89:f9:
         55:86:a0:10:f4:bc:19:b5:d9:cd:1f:31:66:87:c5:20:f8:3f:
         b5:da:d0:ff:1d:16:ab:6a:54:8f:2f:fa:7c:a6:50:dd:5f:19:
         bc:2d:24:39:8f:23:b9:c0:dd:f0:71:20:ea:84:71:ce:ff:c4:
         17:f7:3a:3c:86:ad:34:ba:66:b0:00:b2:d8:cb:35:03:2a:b3:
         d8:01:d7:7b:d4:37:4d:9d:cc:d7:2f:84:c7:7b:98:10:38:9e:
         3d:44:aa:ff:4c:da:5c:8a:fa:74:ae:19:17:eb:16:3a:fe:2a:
         86:f9:38:2c:59:9b:0a:7b:45:95:e3:ae:d2:ae:91:4a:7a:ad:
         d3:14:a3:a1:00:e4:ee:bc:b4:3e:90:51:01:fa:2e:3f:a9:4b:
         67:e8:80:ff:d7:f5:bd:1a:ef:a8:25:9d:87:bf:c0:6c:4c:bf:
         42:37:07:8d:20:37:82:3e:f1:64:cb:84:ae:29:9a:b1:8c:84:
         cc:01:5c:d4:c2:8a:e5:7e:ce:a6:30:3d:cf:19:b5:84:10:29:
         e3:50:65:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:00 2026 by rpki-client