Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/dc0be1-adb8-4220-b4bd-1076242b3072/1/9wWSyQtMskXlRxjXxXmbR9QZpoQ.mft
File:                     9wWSyQtMskXlRxjXxXmbR9QZpoQ.mft (raw, json)
Hash identifier:          AFJlSrpCZEv0iKfA1VrgVrrB97PD9Pml+5cHqWxUdc8=
Subject key identifier:   0F:8F:9B:AC:AC:F5:7A:AF:FF:FB:D9:3E:13:B7:70:F1:EA:3E:4C:C6
Authority key identifier: F7:05:92:C9:0B:4C:B2:45:E5:47:18:D7:C5:79:9B:47:D4:19:A6:84
Certificate issuer:       /CN=f70592c90b4cb245e54718d7c5799b47d419a684
Certificate serial:       019D39AF16AFE2E2721FF5C6B13EE7547F7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9wWSyQtMskXlRxjXxXmbR9QZpoQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/dc0be1-adb8-4220-b4bd-1076242b3072/1/9wWSyQtMskXlRxjXxXmbR9QZpoQ.mft
Manifest number:          188E
Signing time:             Sun 29 Mar 2026 13:01:09 +0000
Manifest this update:     Sun 29 Mar 2026 13:01:09 +0000
Manifest next update:     Mon 30 Mar 2026 13:01:09 +0000
Files and hashes:         1: 9wWSyQtMskXlRxjXxXmbR9QZpoQ.crl (hash: rIJ0g1LMlwZBy/rZNAB4umWSpU/4U5HDs21C4pyj4Ac=)
                          2: R0EFhHKRWmwfAHiJovxs4U8RwFg.asa (hash: v7Xa5f9qcTv5pbYAux3GgLoelyR7CSkPz3xgAUXrZ1w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/dc0be1-adb8-4220-b4bd-1076242b3072/1/9wWSyQtMskXlRxjXxXmbR9QZpoQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/dc0be1-adb8-4220-b4bd-1076242b3072/1/9wWSyQtMskXlRxjXxXmbR9QZpoQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9wWSyQtMskXlRxjXxXmbR9QZpoQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 13:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:af:16:af:e2:e2:72:1f:f5:c6:b1:3e:e7:54:7f:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f70592c90b4cb245e54718d7c5799b47d419a684
        Validity
            Not Before: Mar 29 13:01:09 2026 GMT
            Not After : Mar 30 13:01:09 2026 GMT
        Subject: CN=0f8f9bacacf57aaffffbd93e13b770f1ea3e4cc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:68:b7:78:de:8a:3a:a0:1c:bb:17:ae:58:ce:
                    1e:e5:5a:00:7e:f2:ef:fb:ac:fc:08:23:c2:49:65:
                    af:75:f2:e4:0f:2e:24:29:ef:9e:ed:a7:6c:07:29:
                    8a:64:ed:eb:91:c2:f9:d9:fe:48:66:67:c0:c2:da:
                    9b:f5:c0:33:20:52:e6:61:1e:77:56:f9:24:e8:a1:
                    97:ca:a0:bb:82:a3:fb:78:51:f1:3c:bf:9f:eb:6b:
                    ba:ed:ce:7b:87:2c:f0:a9:71:83:65:42:12:52:1f:
                    11:36:ac:c0:af:86:d2:e0:31:4d:43:47:bc:f6:85:
                    61:49:56:b0:b0:1b:f7:66:1f:e2:5c:62:43:56:77:
                    83:02:6a:16:b4:0a:9f:54:2e:9b:4b:00:f8:6e:f7:
                    66:0d:df:a4:9a:5a:1c:83:d5:50:b1:54:53:82:38:
                    32:a8:c1:15:e4:9c:ea:73:59:db:95:a5:0b:b2:3d:
                    dd:a0:05:e2:75:f1:34:f3:f5:5a:4e:9d:18:18:fe:
                    dc:4b:89:68:0a:45:c1:f2:e1:43:87:d2:35:6a:98:
                    32:c6:ad:89:67:75:b7:6e:7a:52:f6:79:a9:41:d4:
                    4e:eb:95:c6:d1:c6:fd:c4:64:fe:11:7b:74:fa:bc:
                    bb:28:3f:42:09:05:b3:bc:d2:02:a2:ad:9e:30:c1:
                    00:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:8F:9B:AC:AC:F5:7A:AF:FF:FB:D9:3E:13:B7:70:F1:EA:3E:4C:C6
            X509v3 Authority Key Identifier:
                keyid:F7:05:92:C9:0B:4C:B2:45:E5:47:18:D7:C5:79:9B:47:D4:19:A6:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9wWSyQtMskXlRxjXxXmbR9QZpoQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/dc0be1-adb8-4220-b4bd-1076242b3072/1/9wWSyQtMskXlRxjXxXmbR9QZpoQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/dc0be1-adb8-4220-b4bd-1076242b3072/1/9wWSyQtMskXlRxjXxXmbR9QZpoQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:04:3a:5f:0f:1c:f2:1f:2a:47:62:7f:60:36:35:58:08:ab:
         46:8b:8d:e8:6e:8e:04:fd:43:2e:9a:7c:05:8c:4a:94:99:68:
         1a:70:62:c6:a0:52:ad:41:4b:a9:3d:67:38:03:70:fd:89:e6:
         a7:5a:35:d9:80:c2:7c:db:64:10:2f:ae:83:60:38:29:d9:6f:
         97:b5:91:63:d7:6a:0b:b5:13:68:96:c9:5b:37:15:4d:22:79:
         e4:a5:64:2f:35:d9:55:a8:f0:8c:52:e0:a5:3c:29:60:62:43:
         57:04:b4:bb:b9:54:6c:dc:60:37:65:00:34:04:6f:17:c9:56:
         07:c4:da:b3:d3:0b:a3:30:06:50:16:b4:f8:06:c8:1f:43:b0:
         ad:e4:60:c4:41:2a:db:a5:8e:5c:49:af:07:d4:0c:42:c3:28:
         e4:ef:76:9a:a3:58:bf:61:77:b6:ee:77:4a:34:51:b4:d7:16:
         f8:53:de:cb:47:82:6e:ea:10:bc:dd:e6:7b:63:ea:c6:1c:0e:
         34:5b:df:7c:de:40:d6:69:dd:7b:81:0e:bf:d9:23:49:c1:18:
         8b:aa:43:67:db:9b:54:74:07:96:5e:6b:b2:10:8c:f5:c6:04:
         b9:83:34:68:d4:54:fd:66:e1:bd:b0:f3:e8:6c:94:a3:c6:d5:
         8f:4e:97:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:02:03 2026 by rpki-client