Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/9c1b14-e3a9-4d92-be7a-b13d2fed1dc6/1/Zojw8bXTQWcAaSAnF9Y8BUBGT_U.mft
File:                     Zojw8bXTQWcAaSAnF9Y8BUBGT_U.mft (raw, json)
Hash identifier:          UxyTKoQmfbQ2NGvdMURIlP7B5nYVDa9cISOLfJ+rAT8=
Subject key identifier:   F0:93:14:19:F4:30:9F:39:C3:DF:1C:42:9C:F1:86:F5:DD:84:CB:C6
Authority key identifier: 66:88:F0:F1:B5:D3:41:67:00:69:20:27:17:D6:3C:05:40:46:4F:F5
Certificate issuer:       /CN=6688f0f1b5d341670069202717d63c0540464ff5
Certificate serial:       019D3866764739303D915B3513DDCF834F44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zojw8bXTQWcAaSAnF9Y8BUBGT_U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/9c1b14-e3a9-4d92-be7a-b13d2fed1dc6/1/Zojw8bXTQWcAaSAnF9Y8BUBGT_U.mft
Manifest number:          188B
Signing time:             Sun 29 Mar 2026 07:02:12 +0000
Manifest this update:     Sun 29 Mar 2026 07:02:12 +0000
Manifest next update:     Mon 30 Mar 2026 07:02:12 +0000
Files and hashes:         1: Zojw8bXTQWcAaSAnF9Y8BUBGT_U.crl (hash: Guw13Wac3a7o0n6COkyQZfs13PIe1/NgAlQHXajpSgE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/9c1b14-e3a9-4d92-be7a-b13d2fed1dc6/1/Zojw8bXTQWcAaSAnF9Y8BUBGT_U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/9c1b14-e3a9-4d92-be7a-b13d2fed1dc6/1/Zojw8bXTQWcAaSAnF9Y8BUBGT_U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zojw8bXTQWcAaSAnF9Y8BUBGT_U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:66:76:47:39:30:3d:91:5b:35:13:dd:cf:83:4f:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6688f0f1b5d341670069202717d63c0540464ff5
        Validity
            Not Before: Mar 29 07:02:12 2026 GMT
            Not After : Mar 30 07:02:12 2026 GMT
        Subject: CN=f0931419f4309f39c3df1c429cf186f5dd84cbc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:8c:b2:6f:96:08:40:a6:27:4d:ec:79:ac:6c:
                    d0:d2:0e:ef:56:33:26:96:44:a6:64:48:eb:e8:5a:
                    42:34:ab:e1:d3:01:19:4a:f6:08:d8:3d:d8:40:ec:
                    b0:b4:d9:26:55:40:99:73:b7:10:d1:7b:fc:81:ef:
                    f6:a4:fe:d0:1a:10:a5:0f:6c:dd:8c:8f:eb:30:c8:
                    b9:db:93:cd:e1:df:9c:2d:68:63:30:31:d6:94:af:
                    30:6c:23:ea:e4:0e:a7:79:35:77:51:0d:b1:62:3d:
                    14:27:61:ab:fd:c1:c8:ca:5d:54:d1:4d:52:6d:6b:
                    03:5d:51:e2:14:91:96:41:8a:fd:88:49:48:14:ee:
                    23:65:e7:d5:7c:0a:af:55:9f:9d:94:3a:9d:bf:bb:
                    a6:6d:82:d6:1a:6d:57:93:64:53:4c:d6:d2:01:7a:
                    20:c7:f4:56:b3:14:0d:1a:f3:72:2b:ae:58:ed:dc:
                    4a:49:fa:52:c4:e7:64:10:f4:82:c2:9c:db:e2:b9:
                    02:0a:b5:84:39:b3:fa:80:39:8f:20:b5:19:c8:0a:
                    99:54:76:18:45:b4:ab:1f:56:f1:47:47:9b:11:6c:
                    09:d7:d6:2e:3f:62:29:c7:e0:c1:0e:c3:b4:a1:d9:
                    e1:13:71:60:8d:31:e7:a8:9e:1f:86:cc:a6:a1:18:
                    7d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:93:14:19:F4:30:9F:39:C3:DF:1C:42:9C:F1:86:F5:DD:84:CB:C6
            X509v3 Authority Key Identifier:
                keyid:66:88:F0:F1:B5:D3:41:67:00:69:20:27:17:D6:3C:05:40:46:4F:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zojw8bXTQWcAaSAnF9Y8BUBGT_U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/9c1b14-e3a9-4d92-be7a-b13d2fed1dc6/1/Zojw8bXTQWcAaSAnF9Y8BUBGT_U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/9c1b14-e3a9-4d92-be7a-b13d2fed1dc6/1/Zojw8bXTQWcAaSAnF9Y8BUBGT_U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:6a:34:ca:90:2c:d0:60:9c:8f:00:e4:31:fc:73:14:02:ea:
         f9:06:0f:7e:47:5f:37:5a:18:64:0e:ed:b3:23:88:8f:15:40:
         2c:6b:22:9e:4a:6f:7a:84:6c:e6:63:48:94:24:a4:25:e1:2d:
         f2:83:da:4d:06:91:9f:dc:4d:03:fc:3c:2a:d0:a9:ea:7e:66:
         21:83:4a:df:ea:9c:84:3c:88:97:75:42:d5:a0:58:d8:b2:fe:
         6d:6e:d8:86:11:f7:12:77:1a:ef:37:d5:11:cb:0d:d5:57:f5:
         2a:13:a0:82:41:c9:91:c7:98:54:1b:97:32:5c:eb:8d:fd:95:
         ac:21:98:4b:19:ef:f3:c8:6c:ac:5c:bd:0c:f4:b1:2a:ae:ab:
         b8:d9:3c:d5:3e:9d:fb:db:60:28:ab:4b:24:bf:b4:ec:6a:33:
         85:47:d6:7a:a0:8f:6e:50:2b:db:60:55:5e:8d:a3:ec:a2:10:
         4b:f6:16:2b:f6:4d:9e:55:cc:a5:c1:28:a3:ff:42:0b:4b:83:
         33:f4:dd:1a:46:31:a7:68:6d:3e:db:94:01:fa:80:a2:54:76:
         8d:b8:64:f7:61:c4:d3:c5:56:b5:ae:f9:c9:9b:ad:66:86:1b:
         01:84:31:1f:e3:0a:4c:9a:c6:e9:58:9e:46:55:5d:57:2e:84:
         9f:b8:da:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:46 2026 by rpki-client