Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/1H15x4qDBpl4Gz5DMb4JJZfDS5A.mft
File:                     1H15x4qDBpl4Gz5DMb4JJZfDS5A.mft (raw, json)
Hash identifier:          3G2zMvxtvvMXDLRHe6RfOi3CrCWcbyZLUKecFbBuxhI=
Subject key identifier:   B5:C5:A0:FB:50:44:4E:DA:E7:AD:FC:7C:12:AB:2C:83:54:0B:EE:5C
Authority key identifier: D4:7D:79:C7:8A:83:06:99:78:1B:3E:43:31:BE:09:25:97:C3:4B:90
Certificate issuer:       /CN=d47d79c78a830699781b3e4331be092597c34b90
Certificate serial:       019D382E43A30AD4753E6818117030BC3D01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1H15x4qDBpl4Gz5DMb4JJZfDS5A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/1H15x4qDBpl4Gz5DMb4JJZfDS5A.mft
Manifest number:          188F
Signing time:             Sun 29 Mar 2026 06:00:49 +0000
Manifest this update:     Sun 29 Mar 2026 06:00:49 +0000
Manifest next update:     Mon 30 Mar 2026 06:00:49 +0000
Files and hashes:         1: 1H15x4qDBpl4Gz5DMb4JJZfDS5A.crl (hash: SrvDB+xRUVSzQrMIyXAUGoNi+7T/zX6WXNOXLkVzseA=)
                          2: UjFwX21JbiqjDw7jVogurOY6vK0.roa (hash: StMP6W4VJaKc6UNnpuMnvzgEyfJwsKnjjavPWXE2/og=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/1H15x4qDBpl4Gz5DMb4JJZfDS5A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/1H15x4qDBpl4Gz5DMb4JJZfDS5A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1H15x4qDBpl4Gz5DMb4JJZfDS5A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 06:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:2e:43:a3:0a:d4:75:3e:68:18:11:70:30:bc:3d:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d47d79c78a830699781b3e4331be092597c34b90
        Validity
            Not Before: Mar 29 06:00:49 2026 GMT
            Not After : Mar 30 06:00:49 2026 GMT
        Subject: CN=b5c5a0fb50444edae7adfc7c12ab2c83540bee5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:04:c6:10:25:ec:71:d3:4d:a7:23:da:45:b0:
                    f0:a2:7a:b9:e6:96:35:0f:31:36:d3:46:c9:de:82:
                    2f:84:2e:d8:43:40:33:a8:fe:63:4e:22:8c:76:f2:
                    ca:ef:f9:77:93:df:6b:c4:1a:18:f9:4f:0f:c9:68:
                    84:a8:4b:d2:db:08:7b:cc:2d:4f:3c:74:80:13:68:
                    cf:b2:6d:d2:66:e3:c3:7b:04:69:d5:5c:79:4d:fa:
                    25:04:55:00:63:66:a5:c0:50:f0:d6:dc:06:5f:6d:
                    ce:39:89:44:58:fd:f6:f9:70:09:11:df:44:75:73:
                    e7:15:a4:85:ed:b3:cf:d2:62:8c:31:27:05:1a:64:
                    ef:27:2c:93:13:a4:38:1e:da:63:53:b2:a0:3f:01:
                    da:0f:1e:9f:73:ec:3e:e8:73:6a:ee:03:1e:29:8d:
                    80:2b:7f:0b:b1:7a:dd:2e:6b:10:d0:32:f5:09:0e:
                    c3:2e:cd:2a:9c:25:a5:86:c1:97:56:e6:ef:3b:5b:
                    4b:b1:13:9c:a6:a4:6a:89:20:95:4d:6b:c3:d6:b9:
                    f2:04:dd:bc:24:66:8e:e7:05:33:7c:c5:a5:09:81:
                    8a:32:63:5c:fb:9a:9d:44:96:f9:26:17:d2:bc:32:
                    cb:90:53:3c:39:21:59:97:d4:5b:d1:d8:66:72:43:
                    e5:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:C5:A0:FB:50:44:4E:DA:E7:AD:FC:7C:12:AB:2C:83:54:0B:EE:5C
            X509v3 Authority Key Identifier:
                keyid:D4:7D:79:C7:8A:83:06:99:78:1B:3E:43:31:BE:09:25:97:C3:4B:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1H15x4qDBpl4Gz5DMb4JJZfDS5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/1H15x4qDBpl4Gz5DMb4JJZfDS5A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/1H15x4qDBpl4Gz5DMb4JJZfDS5A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:fd:c8:eb:f6:19:52:b8:27:78:9d:a5:6e:86:ac:af:aa:46:
         0f:a4:17:b4:1e:0f:99:df:7b:a2:4d:fb:bc:44:45:13:a9:a9:
         94:3b:e7:41:b3:c1:88:80:c3:d9:42:0f:4a:2b:bc:05:17:72:
         75:58:63:f5:e9:f0:62:18:df:7b:62:bb:16:54:dd:f6:91:1c:
         a3:6a:b2:ab:f7:07:f1:f2:2e:22:18:8e:01:c8:38:d3:4a:6d:
         58:f0:52:38:81:94:83:8e:b6:53:96:34:12:09:99:32:07:22:
         0e:8b:d7:c5:f2:93:3e:5b:80:a0:ae:b9:3c:c9:52:1b:6b:8f:
         19:fe:b7:d5:06:e5:cf:c1:1a:f4:6a:68:1d:1d:b5:4f:e7:fa:
         b5:c6:03:92:02:7c:08:48:35:26:cd:dd:d2:75:f0:13:11:94:
         40:84:07:96:d6:ac:7c:e7:0f:2e:2b:1b:a4:7c:39:e3:d3:a2:
         1f:95:e5:c7:05:bd:8e:27:72:04:25:e3:6d:d1:40:ee:e5:24:
         5e:10:d1:25:b4:07:52:eb:96:f2:de:6f:51:6a:52:9e:2f:83:
         cd:c6:f6:c7:d7:53:16:18:ce:88:87:31:3d:03:af:91:10:51:
         87:40:36:b0:50:e6:49:d3:80:a6:94:da:bf:08:07:f2:87:0c:
         8f:b1:18:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:26:23 2026 by rpki-client