Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/9383b5-7083-4cc3-9e69-97f6f2a39626/1/FvAucKZVP_DGZROe5VZxyGBlgIE.mft
File:                     FvAucKZVP_DGZROe5VZxyGBlgIE.mft (raw, json)
Hash identifier:          p+evPf2mJcqzfIDkgSvdrK4o1ARXVblEdlr7ua3AENs=
Subject key identifier:   73:27:D8:BD:11:C9:EA:01:FF:A1:D6:1D:67:81:79:56:E5:E0:12:CF
Authority key identifier: 16:F0:2E:70:A6:55:3F:F0:C6:65:13:9E:E5:56:71:C8:60:65:80:81
Certificate issuer:       /CN=16f02e70a6553ff0c665139ee55671c860658081
Certificate serial:       019D3977C69D0748275B1A08197191259B10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FvAucKZVP_DGZROe5VZxyGBlgIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/9383b5-7083-4cc3-9e69-97f6f2a39626/1/FvAucKZVP_DGZROe5VZxyGBlgIE.mft
Manifest number:          188B
Signing time:             Sun 29 Mar 2026 12:00:44 +0000
Manifest this update:     Sun 29 Mar 2026 12:00:44 +0000
Manifest next update:     Mon 30 Mar 2026 12:00:44 +0000
Files and hashes:         1: FvAucKZVP_DGZROe5VZxyGBlgIE.crl (hash: I8bVUsr+VN4Tllt6JUf6q83tpJdsQLv3qhKPWgvIB3g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/9383b5-7083-4cc3-9e69-97f6f2a39626/1/FvAucKZVP_DGZROe5VZxyGBlgIE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/9383b5-7083-4cc3-9e69-97f6f2a39626/1/FvAucKZVP_DGZROe5VZxyGBlgIE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FvAucKZVP_DGZROe5VZxyGBlgIE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:77:c6:9d:07:48:27:5b:1a:08:19:71:91:25:9b:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16f02e70a6553ff0c665139ee55671c860658081
        Validity
            Not Before: Mar 29 12:00:44 2026 GMT
            Not After : Mar 30 12:00:44 2026 GMT
        Subject: CN=7327d8bd11c9ea01ffa1d61d67817956e5e012cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:34:9f:30:07:10:4e:61:9a:70:a7:95:18:b0:
                    40:1e:1d:4b:de:29:ec:ee:93:45:8e:09:7a:e4:89:
                    88:b5:52:10:b0:fe:88:09:b0:58:cd:91:c7:0a:fc:
                    ee:2c:a6:f9:d4:9d:3f:43:7e:02:4b:44:e2:31:72:
                    10:fd:b4:66:9b:f2:1c:9e:6e:81:38:78:4a:84:be:
                    8a:d3:7f:96:4e:31:6a:cf:de:99:44:0c:16:a7:88:
                    43:e2:77:33:60:38:84:5c:a3:ac:ff:42:a3:37:8c:
                    0e:bb:ba:59:85:30:e2:94:a9:6d:45:da:9e:49:5a:
                    08:e4:f0:8b:4f:5a:5a:9f:09:47:83:28:b5:02:40:
                    96:2c:01:3b:b2:36:1b:0d:36:5a:e0:73:ea:0e:b7:
                    68:ec:84:75:9d:80:3f:ab:fb:19:34:4e:f7:06:40:
                    d6:1c:47:4d:19:83:14:89:4a:1f:16:40:1d:25:c2:
                    db:21:51:3d:c7:69:d7:ab:77:f1:1e:62:b0:c3:e6:
                    fb:7f:1d:25:84:fa:70:7a:8e:71:3c:34:93:5f:19:
                    b9:2e:a0:d4:71:4c:cf:24:7e:74:77:25:94:55:ad:
                    fb:e6:d0:dc:6c:8b:e1:6e:3f:a7:9e:1e:c4:de:db:
                    29:03:72:30:9f:94:cc:5c:4c:97:28:44:b7:79:04:
                    55:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:27:D8:BD:11:C9:EA:01:FF:A1:D6:1D:67:81:79:56:E5:E0:12:CF
            X509v3 Authority Key Identifier:
                keyid:16:F0:2E:70:A6:55:3F:F0:C6:65:13:9E:E5:56:71:C8:60:65:80:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FvAucKZVP_DGZROe5VZxyGBlgIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/9383b5-7083-4cc3-9e69-97f6f2a39626/1/FvAucKZVP_DGZROe5VZxyGBlgIE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/9383b5-7083-4cc3-9e69-97f6f2a39626/1/FvAucKZVP_DGZROe5VZxyGBlgIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:b8:de:42:2f:fa:a0:56:fd:f1:38:aa:b9:31:97:bc:ee:62:
         40:40:e6:33:7a:7d:39:9b:61:87:1b:54:70:77:e0:16:68:89:
         df:5d:6c:cf:b5:5f:f3:8b:cc:e8:d9:bd:9d:9b:86:3f:e0:05:
         3f:bc:57:17:e8:c6:e6:11:e3:87:39:eb:c0:e3:20:5c:ea:f4:
         18:0e:0c:d2:f7:a3:9a:7c:d4:9b:31:c2:92:68:57:cc:d2:b6:
         b0:9b:f4:1a:bb:b9:74:86:6f:7e:1a:e8:64:76:b9:cb:70:ed:
         a5:74:3e:e4:e0:f2:64:0b:94:cc:6c:1a:08:ae:a2:9d:6e:63:
         c3:fa:58:80:8b:5c:67:39:92:13:57:57:a9:72:9c:64:9b:27:
         40:df:a1:42:27:b3:19:3f:28:95:a0:94:d8:d6:53:2e:00:0e:
         ae:34:a0:c1:d4:7f:5c:95:b0:fc:7b:d5:d4:f4:fa:29:94:d5:
         6e:12:7a:92:82:64:f6:b7:62:5c:90:46:d5:c8:ab:30:33:2a:
         cf:6a:4d:d4:f6:47:32:c9:1e:c4:7d:19:da:ff:6e:90:ef:30:
         e1:95:5d:e8:23:1e:83:79:55:1d:6f:af:71:86:47:a2:6d:1a:
         fe:b9:4c:86:4f:8f:aa:ae:9f:44:f5:5b:05:c5:88:04:84:19:
         eb:37:f3:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:00:39 2026 by rpki-client