Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/4012a4-3d58-4dd0-80b4-be317b531c2e/1/6oJ7lVbVQNpTa4BGxl_5WwbuSWM.mft
File:                     6oJ7lVbVQNpTa4BGxl_5WwbuSWM.mft (raw, json)
Hash identifier:          7Wqza+uCqUgLAaGRQfEBtxQHCm9PryVkcDyquYdzJ0U=
Subject key identifier:   28:A9:A6:E4:92:E1:8A:4C:5E:4E:49:DA:31:BA:11:FD:F7:A6:63:AC
Authority key identifier: EA:82:7B:95:56:D5:40:DA:53:6B:80:46:C6:5F:F9:5B:06:EE:49:63
Certificate issuer:       /CN=ea827b9556d540da536b8046c65ff95b06ee4963
Certificate serial:       019D371B266C4DEC8E7C4DD398AB888691F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6oJ7lVbVQNpTa4BGxl_5WwbuSWM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/4012a4-3d58-4dd0-80b4-be317b531c2e/1/6oJ7lVbVQNpTa4BGxl_5WwbuSWM.mft
Manifest number:          188F
Signing time:             Sun 29 Mar 2026 01:00:19 +0000
Manifest this update:     Sun 29 Mar 2026 01:00:19 +0000
Manifest next update:     Mon 30 Mar 2026 01:00:19 +0000
Files and hashes:         1: 6oJ7lVbVQNpTa4BGxl_5WwbuSWM.crl (hash: OB29P5fE7PpyVGBnkZQ/RqL1aK0rOdi74NNqbWUeHas=)
                          2: 9uLCR93AsvcbHhfo_LRBoViZJEw.roa (hash: 6EciUB7X3+hHMgVRkJbEMXyOPOOet2xSMxTp/Z+84Lo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/4012a4-3d58-4dd0-80b4-be317b531c2e/1/6oJ7lVbVQNpTa4BGxl_5WwbuSWM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/4012a4-3d58-4dd0-80b4-be317b531c2e/1/6oJ7lVbVQNpTa4BGxl_5WwbuSWM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6oJ7lVbVQNpTa4BGxl_5WwbuSWM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 01:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:1b:26:6c:4d:ec:8e:7c:4d:d3:98:ab:88:86:91:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea827b9556d540da536b8046c65ff95b06ee4963
        Validity
            Not Before: Mar 29 01:00:19 2026 GMT
            Not After : Mar 30 01:00:19 2026 GMT
        Subject: CN=28a9a6e492e18a4c5e4e49da31ba11fdf7a663ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fc:15:30:a5:73:eb:d1:3f:ae:63:eb:d4:4b:
                    f9:40:50:84:16:2c:87:87:2e:1e:b3:ce:1a:bb:48:
                    64:05:71:5a:20:07:21:19:73:00:bd:2e:75:22:9e:
                    fe:05:b7:05:1d:13:0b:ff:17:46:5b:30:3d:42:63:
                    25:97:4d:8c:aa:92:23:b4:3d:eb:42:8c:6a:b1:8d:
                    bc:65:b4:28:d9:ae:d7:a8:8e:bf:ab:20:4e:e9:d9:
                    ed:c8:0d:11:7e:5a:29:8f:18:78:14:a6:b3:e5:1f:
                    c6:c2:84:42:26:c9:04:d3:e0:fb:9c:91:10:fc:64:
                    23:ce:55:32:e1:e4:3e:10:d1:b1:fa:29:78:c0:31:
                    44:8e:cb:1f:86:38:4d:55:c9:37:bb:d5:f0:b9:cd:
                    56:8d:2a:b8:4b:5f:36:7e:d5:26:61:c5:ad:31:af:
                    e9:c2:72:42:1a:6c:86:48:0a:dc:f3:bc:ea:3a:f3:
                    d7:33:d3:c1:1b:1c:48:51:c1:f8:b3:e6:3a:13:6c:
                    c4:0e:07:23:a9:72:a8:89:0a:2f:17:0e:b8:ba:14:
                    96:9a:5e:2f:20:77:2d:0f:af:ce:ee:d4:1c:ea:d4:
                    c3:e7:32:e1:ed:94:c1:e2:2d:25:9e:04:c6:7b:07:
                    c6:c6:1a:b9:78:52:bd:e0:8f:cc:cf:85:62:8d:80:
                    33:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:A9:A6:E4:92:E1:8A:4C:5E:4E:49:DA:31:BA:11:FD:F7:A6:63:AC
            X509v3 Authority Key Identifier:
                keyid:EA:82:7B:95:56:D5:40:DA:53:6B:80:46:C6:5F:F9:5B:06:EE:49:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6oJ7lVbVQNpTa4BGxl_5WwbuSWM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4012a4-3d58-4dd0-80b4-be317b531c2e/1/6oJ7lVbVQNpTa4BGxl_5WwbuSWM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4012a4-3d58-4dd0-80b4-be317b531c2e/1/6oJ7lVbVQNpTa4BGxl_5WwbuSWM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:01:71:c5:84:9a:db:43:ce:07:53:8b:d4:ea:96:c5:ab:8a:
         4c:2b:49:e5:1e:ac:ec:d3:8f:6d:7f:26:76:a8:ec:e4:be:26:
         c6:c6:c9:98:27:66:3d:0f:e6:0a:06:0e:fa:47:93:17:18:44:
         8f:3e:fa:4f:f6:11:a6:7d:8d:7e:0c:16:e1:79:bb:bb:f8:44:
         35:0e:4e:79:d2:50:08:68:68:55:4c:05:4b:3b:17:83:80:c5:
         da:4f:00:78:46:d1:4b:75:94:48:07:54:5d:d5:21:79:7e:40:
         64:29:12:28:d8:aa:96:93:e2:e1:9b:e7:d9:da:37:35:10:31:
         bb:dd:20:94:0c:63:5c:04:e8:da:23:0c:f8:70:eb:d3:ec:5b:
         73:0b:e9:cf:df:05:80:ef:77:1f:0a:c7:eb:f4:5e:6b:e1:a2:
         d8:fe:cb:a1:3f:1f:05:ed:d3:bd:02:0a:6e:dc:1e:12:1e:ce:
         fe:3c:31:7f:1b:76:dc:db:74:c4:6f:d5:72:74:33:c5:44:18:
         07:c5:68:7f:59:88:fa:8e:29:fa:d5:30:83:b3:89:2d:3c:f9:
         66:73:41:f9:50:46:d1:b2:15:a7:22:a7:11:2d:96:e5:cf:f3:
         1f:2a:fe:5d:4a:17:e1:ad:eb:5e:f6:f3:da:1d:78:8b:b4:cc:
         c3:d2:b1:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:21 2026 by rpki-client