Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.mft
File:                     JOmh8SqE1TJSY3_4XW646xY2OT4.mft (raw, json)
Hash identifier:          2mxJboIjqzKmANVn71QORZ7kN7FM4jiRpkWbyRTVkLQ=
Subject key identifier:   A6:96:2C:01:AC:8A:CF:9E:EB:2F:B6:06:2C:49:0D:7F:5D:94:45:73
Authority key identifier: 24:E9:A1:F1:2A:84:D5:32:52:63:7F:F8:5D:6E:B8:EB:16:36:39:3E
Certificate issuer:       /CN=24e9a1f12a84d53252637ff85d6eb8eb1636393e
Certificate serial:       019D38D3E03A63247EE0DE9B592472D0E639
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JOmh8SqE1TJSY3_4XW646xY2OT4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.mft
Manifest number:          188C
Signing time:             Sun 29 Mar 2026 09:01:42 +0000
Manifest this update:     Sun 29 Mar 2026 09:01:42 +0000
Manifest next update:     Mon 30 Mar 2026 09:01:42 +0000
Files and hashes:         1: JOmh8SqE1TJSY3_4XW646xY2OT4.crl (hash: +IGJSb/8QdIDeUbqhggRm6Lovj+mWiR+Gv+hG2FhMp4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JOmh8SqE1TJSY3_4XW646xY2OT4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:d3:e0:3a:63:24:7e:e0:de:9b:59:24:72:d0:e6:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24e9a1f12a84d53252637ff85d6eb8eb1636393e
        Validity
            Not Before: Mar 29 09:01:42 2026 GMT
            Not After : Mar 30 09:01:42 2026 GMT
        Subject: CN=a6962c01ac8acf9eeb2fb6062c490d7f5d944573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:15:42:5d:a9:53:5b:40:8f:c3:40:2b:67:a1:
                    5c:00:d6:cf:a6:fb:73:0a:f3:ed:09:ce:7a:cd:45:
                    49:32:ca:30:88:18:74:81:33:90:b2:0f:74:b1:bb:
                    25:02:c8:5d:31:ea:2a:e3:3a:13:36:4b:81:e6:5c:
                    82:e8:68:ab:ba:f8:16:51:0e:53:02:a7:ca:8d:8e:
                    89:58:b2:0e:ed:6b:11:01:a5:63:82:92:c2:34:10:
                    36:55:84:fd:39:3f:02:6b:a1:e9:7f:55:2e:3e:46:
                    0f:10:49:32:0f:71:08:7d:92:0f:6b:9e:9a:e1:9f:
                    75:45:d2:3b:b3:e6:e1:7e:cb:a1:a1:e1:8b:cb:e7:
                    e7:b2:8a:9a:3a:76:ac:0b:e9:89:82:e7:c6:d5:9a:
                    42:d7:5c:01:fa:0e:2f:bd:39:a1:d5:e6:04:ae:1f:
                    91:ae:03:14:03:7b:8f:94:ce:23:b7:82:52:75:df:
                    d8:c4:23:12:f4:51:f6:f4:4c:e6:2e:b6:b4:b3:2e:
                    f0:e0:4e:bb:cd:21:d2:38:61:cb:bd:c1:38:b1:9e:
                    9a:f6:e8:09:e3:92:ed:a8:60:ea:7e:b1:6f:81:29:
                    00:bd:60:3f:0d:05:90:59:47:60:60:05:0e:1f:39:
                    fd:a8:5e:65:3e:19:40:77:93:23:f2:35:23:be:75:
                    31:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:96:2C:01:AC:8A:CF:9E:EB:2F:B6:06:2C:49:0D:7F:5D:94:45:73
            X509v3 Authority Key Identifier:
                keyid:24:E9:A1:F1:2A:84:D5:32:52:63:7F:F8:5D:6E:B8:EB:16:36:39:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOmh8SqE1TJSY3_4XW646xY2OT4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:f9:4f:80:79:28:a1:79:40:3f:b0:f4:c4:62:07:77:90:9c:
         1e:50:b8:a1:06:12:45:da:56:8f:8a:b7:de:df:ab:c9:89:d8:
         0b:03:52:35:4d:71:14:b8:a2:3c:25:e6:32:db:85:31:31:d8:
         54:24:ba:d0:35:57:40:19:3c:97:f1:47:dd:df:12:47:23:8a:
         a2:4d:2a:28:98:65:35:8c:da:f3:31:1c:fc:11:4c:7f:df:ac:
         a6:27:a5:17:bf:ef:4b:88:fc:a0:79:85:f6:3a:a1:89:9c:ba:
         f4:de:b8:ad:9a:ed:8a:c2:c4:4e:62:cd:97:fb:79:a2:8d:a6:
         1d:a0:91:ed:74:eb:a4:e9:4f:e9:c9:15:9d:f1:1c:cd:4d:c5:
         59:a3:9e:77:8d:15:7a:66:02:c9:9d:06:bb:9a:90:59:fa:ca:
         9d:4b:46:cc:b1:7c:2a:19:45:69:c7:af:a4:61:43:be:95:42:
         c3:4a:51:10:fc:bd:1b:1e:45:ca:2f:21:39:e1:75:98:54:0a:
         61:8d:33:22:9e:e3:38:01:ab:91:42:90:5a:e4:f9:9a:92:9b:
         83:b9:8d:1c:0a:6a:46:c9:0e:8b:02:60:a6:7e:f6:86:68:31:
         90:07:4e:e4:59:20:d2:b3:d9:a9:2d:5f:43:7a:23:22:0c:95:
         92:8c:6b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:28 2026 by rpki-client