Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/aa4c3d-f272-47f6-a9cf-84a233369386/1/L6jmV-6uB4PaFKPaLKdN3sFd0wg.mft
File:                     L6jmV-6uB4PaFKPaLKdN3sFd0wg.mft (raw, json)
Hash identifier:          1ysQ3Ta/9fxiXj4xw9TzaXge2sz40SHiphhB7lmdGM0=
Subject key identifier:   53:A7:50:60:4A:5A:DA:DE:3A:B6:B8:71:34:4D:E6:D3:2C:10:D1:69
Authority key identifier: 2F:A8:E6:57:EE:AE:07:83:DA:14:A3:DA:2C:A7:4D:DE:C1:5D:D3:08
Certificate issuer:       /CN=2fa8e657eeae0783da14a3da2ca74ddec15dd308
Certificate serial:       019D37C00D8295D06094D04F0E4A98C22BD3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L6jmV-6uB4PaFKPaLKdN3sFd0wg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/aa4c3d-f272-47f6-a9cf-84a233369386/1/L6jmV-6uB4PaFKPaLKdN3sFd0wg.mft
Manifest number:          188F
Signing time:             Sun 29 Mar 2026 04:00:26 +0000
Manifest this update:     Sun 29 Mar 2026 04:00:26 +0000
Manifest next update:     Mon 30 Mar 2026 04:00:26 +0000
Files and hashes:         1: L6jmV-6uB4PaFKPaLKdN3sFd0wg.crl (hash: v/ZqofoxCsuVZ9YEKdU05gtbWdWVxDdwg9UJ5H3mLtM=)
                          2: XWGt8zvOb_kyT4bEnqa0uouBMAQ.roa (hash: ESSg/Q2R5xzvrkRwDMiUY8zSunMkng9nL/T25F+EMmc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/aa4c3d-f272-47f6-a9cf-84a233369386/1/L6jmV-6uB4PaFKPaLKdN3sFd0wg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/aa4c3d-f272-47f6-a9cf-84a233369386/1/L6jmV-6uB4PaFKPaLKdN3sFd0wg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L6jmV-6uB4PaFKPaLKdN3sFd0wg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 04:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:c0:0d:82:95:d0:60:94:d0:4f:0e:4a:98:c2:2b:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fa8e657eeae0783da14a3da2ca74ddec15dd308
        Validity
            Not Before: Mar 29 04:00:26 2026 GMT
            Not After : Mar 30 04:00:26 2026 GMT
        Subject: CN=53a750604a5adade3ab6b871344de6d32c10d169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e1:60:e2:d5:db:dd:86:66:9b:40:67:88:9e:
                    bc:e9:18:05:49:1c:ce:c9:bc:6d:a8:f7:29:c4:39:
                    14:67:93:20:6d:08:eb:b3:c3:37:9a:b3:b3:35:96:
                    bd:ed:6a:7f:38:3f:11:86:7c:ba:ac:d0:26:40:b5:
                    32:35:8c:6e:7e:f6:80:e1:bd:d5:65:20:24:ca:b7:
                    b2:c5:b0:8f:5d:55:b0:37:44:80:55:a2:2a:3c:23:
                    77:69:82:eb:a5:5e:79:23:5a:8c:c5:1e:25:84:8e:
                    2c:c6:d0:b7:c9:5f:b2:f0:f4:1e:fd:81:57:24:76:
                    e7:ad:17:02:6a:1c:12:54:90:4e:f1:2e:8d:ed:b2:
                    b3:58:f2:30:d2:81:da:24:11:a3:cd:3f:a6:04:b1:
                    97:6f:f5:3e:73:7f:2e:f4:6b:5c:92:64:55:c5:26:
                    ef:bb:30:6a:e2:db:98:11:eb:64:44:45:9f:df:7b:
                    f0:5d:b0:03:b3:67:15:af:bb:d0:6c:2d:67:1b:b5:
                    b8:95:90:29:e8:28:0b:65:b7:cf:e8:50:43:86:79:
                    23:83:ff:1c:0f:e9:a1:0c:b3:ab:cc:a6:e1:ea:a6:
                    44:8d:f9:b3:97:08:13:83:1e:cf:dc:61:cc:38:86:
                    e8:8e:83:47:37:a3:e6:ea:4d:71:df:00:73:5e:b8:
                    f6:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:A7:50:60:4A:5A:DA:DE:3A:B6:B8:71:34:4D:E6:D3:2C:10:D1:69
            X509v3 Authority Key Identifier:
                keyid:2F:A8:E6:57:EE:AE:07:83:DA:14:A3:DA:2C:A7:4D:DE:C1:5D:D3:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6jmV-6uB4PaFKPaLKdN3sFd0wg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/aa4c3d-f272-47f6-a9cf-84a233369386/1/L6jmV-6uB4PaFKPaLKdN3sFd0wg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/aa4c3d-f272-47f6-a9cf-84a233369386/1/L6jmV-6uB4PaFKPaLKdN3sFd0wg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:cf:c0:be:3c:7d:18:17:36:f8:cc:0f:54:32:66:eb:69:d1:
         1d:da:f0:c7:f9:83:86:e9:75:14:64:76:5e:22:f2:eb:31:c6:
         aa:d8:80:72:75:71:f4:a3:e1:df:0b:4f:27:86:db:a4:16:b6:
         d4:e9:e6:d3:df:ac:fc:bb:3b:be:03:82:83:d0:45:25:d6:0b:
         2e:8e:2a:b0:b6:81:e6:3b:6c:16:9a:be:eb:6e:28:73:e8:9e:
         94:12:e9:da:f6:90:69:c3:3f:3f:6b:79:ce:7e:e0:23:b7:5c:
         1c:66:8e:85:ad:ab:8d:c5:1a:6b:32:ac:93:b9:f2:1f:2d:a7:
         b5:9e:db:01:0c:65:c3:98:73:dc:68:74:38:4d:23:48:40:15:
         9b:f9:b5:a1:e5:de:2f:c3:c4:e7:f0:f2:c0:83:0b:56:d9:2a:
         54:28:3c:68:92:29:f9:fe:fa:05:78:01:99:a1:99:64:ae:fd:
         27:22:65:a8:fa:b3:ae:17:a1:7c:16:8e:2d:6c:71:4f:8c:6a:
         95:38:56:06:18:31:77:da:f4:3e:ee:d6:0c:13:59:45:06:f0:
         7e:70:86:37:42:d7:f0:cb:7d:ac:2a:7f:8e:ea:57:cc:7a:65:
         cb:33:1a:ff:28:f8:52:2a:67:18:9c:aa:b0:5b:b3:27:06:83:
         62:f7:a9:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:54:11 2026 by rpki-client