Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/3123d0-7caa-4df3-ad23-aba4e643058e/1/RwFMkm6nbVZunoqW1YYdR1fIsOo.mft
File:                     RwFMkm6nbVZunoqW1YYdR1fIsOo.mft (raw, json)
Hash identifier:          VOhFCylIRukJyKmj62YDxjKOAy/GHw+XNw0vRH1QS0U=
Subject key identifier:   AD:CD:E2:E0:13:51:B8:97:D0:69:D3:3C:80:58:42:EB:6E:5E:0E:4D
Authority key identifier: 47:01:4C:92:6E:A7:6D:56:6E:9E:8A:96:D5:86:1D:47:57:C8:B0:EA
Certificate issuer:       /CN=47014c926ea76d566e9e8a96d5861d4757c8b0ea
Certificate serial:       019D386600502E1E18AA24E48A26E62E5142
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RwFMkm6nbVZunoqW1YYdR1fIsOo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/3123d0-7caa-4df3-ad23-aba4e643058e/1/RwFMkm6nbVZunoqW1YYdR1fIsOo.mft
Manifest number:          188E
Signing time:             Sun 29 Mar 2026 07:01:41 +0000
Manifest this update:     Sun 29 Mar 2026 07:01:41 +0000
Manifest next update:     Mon 30 Mar 2026 07:01:41 +0000
Files and hashes:         1: RwFMkm6nbVZunoqW1YYdR1fIsOo.crl (hash: GSdEB3MZ8Owluhvr+CUjIpPNLagGcTIF89d2F6klohc=)
                          2: urH6rk8GYO97cwlSARu90EqW7Kg.roa (hash: WutAek3iaZ5aMWtfaY/WGR7/6oagkMgMQuUa9cXQ4Wc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/3123d0-7caa-4df3-ad23-aba4e643058e/1/RwFMkm6nbVZunoqW1YYdR1fIsOo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/3123d0-7caa-4df3-ad23-aba4e643058e/1/RwFMkm6nbVZunoqW1YYdR1fIsOo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RwFMkm6nbVZunoqW1YYdR1fIsOo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:66:00:50:2e:1e:18:aa:24:e4:8a:26:e6:2e:51:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47014c926ea76d566e9e8a96d5861d4757c8b0ea
        Validity
            Not Before: Mar 29 07:01:41 2026 GMT
            Not After : Mar 30 07:01:41 2026 GMT
        Subject: CN=adcde2e01351b897d069d33c805842eb6e5e0e4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:67:b2:3c:42:5e:a1:b7:fb:ad:2f:d8:10:f8:
                    ee:63:c1:d3:54:74:f9:54:7f:07:5e:b1:c8:ae:16:
                    81:54:a2:1f:b4:6c:30:f7:97:4c:2d:4a:8e:5c:17:
                    57:fa:08:7f:45:ea:68:22:d6:26:1e:32:ad:22:7d:
                    6a:ae:07:8f:6e:f6:8f:4c:59:bd:6c:df:2e:f4:e7:
                    cd:0f:16:02:30:de:38:26:21:6b:52:c6:41:8a:2c:
                    a2:c4:4d:1e:8c:79:7f:70:9b:2f:ce:c2:3c:1f:98:
                    1f:1d:fc:4e:ff:30:c0:a3:e7:be:2d:41:75:cc:04:
                    66:36:81:ee:f2:4d:db:58:5e:67:c1:cf:f9:ff:53:
                    c8:1c:6b:80:86:b2:52:db:0b:c7:08:33:d9:cf:dc:
                    c7:fb:71:f7:17:47:2b:a8:41:e3:c7:a8:26:78:55:
                    6d:53:8e:f2:a2:2d:5e:de:7b:78:d8:55:29:41:15:
                    64:e2:22:23:78:61:5a:cf:73:60:ce:5a:84:44:7a:
                    12:25:34:ce:3a:84:6a:17:a6:63:40:bd:f8:e7:bf:
                    09:c8:1f:f5:51:aa:4e:33:4d:63:95:9a:af:37:e4:
                    9d:8c:6a:04:94:98:58:3f:40:c0:8f:bf:a0:31:81:
                    cf:2f:7d:51:9c:d3:0a:14:18:87:e9:be:fb:b5:16:
                    38:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:CD:E2:E0:13:51:B8:97:D0:69:D3:3C:80:58:42:EB:6E:5E:0E:4D
            X509v3 Authority Key Identifier:
                keyid:47:01:4C:92:6E:A7:6D:56:6E:9E:8A:96:D5:86:1D:47:57:C8:B0:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RwFMkm6nbVZunoqW1YYdR1fIsOo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3123d0-7caa-4df3-ad23-aba4e643058e/1/RwFMkm6nbVZunoqW1YYdR1fIsOo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3123d0-7caa-4df3-ad23-aba4e643058e/1/RwFMkm6nbVZunoqW1YYdR1fIsOo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:ca:7a:a5:60:bd:9a:4d:f2:bc:29:94:15:fa:20:89:69:e5:
         ee:50:6a:d0:ed:3a:2d:9d:d2:14:54:ab:51:8e:b1:40:d3:d6:
         4c:54:c7:c6:13:2b:69:4d:c2:70:8d:9a:05:63:c4:eb:9a:d2:
         ff:19:b8:29:f3:7c:32:60:74:5e:b1:52:78:a8:6b:33:29:60:
         a4:db:a5:b8:93:eb:09:cd:8d:ef:67:e4:d7:18:e1:b4:3f:23:
         48:74:6c:27:38:63:40:3b:ad:66:11:e9:f7:1d:ac:2a:5d:96:
         c2:4b:cd:5a:82:f2:53:1c:89:c9:c2:6d:48:c3:e3:12:f2:e6:
         ad:8c:36:8b:1d:af:7f:99:4d:56:86:96:18:00:e3:bc:99:0a:
         5d:7a:55:41:42:f0:5d:61:c5:53:49:2e:92:e1:63:bd:2e:92:
         8e:19:7c:92:fe:79:32:19:7b:03:d1:f4:14:07:30:e9:5b:4f:
         bb:8f:69:89:3a:0e:de:d0:48:a8:ea:4b:7d:e3:4a:ff:0f:ad:
         38:36:4c:65:1d:4e:49:d6:74:2f:3d:af:45:51:df:94:13:5d:
         0c:0b:e9:6e:8d:1c:35:a8:0a:7e:40:47:48:4f:e0:5c:a7:d8:
         cc:c0:59:c4:f6:93:8b:ff:7b:96:ce:7d:f5:9e:8c:7a:46:7e:
         32:37:90:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:20:29 2026 by rpki-client