Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/0DBG0Wz8ORsCi4h0N3POAFz5ex0.mft
File:                     0DBG0Wz8ORsCi4h0N3POAFz5ex0.mft (raw, json)
Hash identifier:          ZFF886Se4aBo+FYAgL/fmu3MLPP3N0MQFhJ0ozgRhgc=
Subject key identifier:   33:7E:AC:11:99:0D:31:C8:7B:B6:DF:D2:AB:96:2A:CA:7B:C5:BE:75
Authority key identifier: D0:30:46:D1:6C:FC:39:1B:02:8B:88:74:37:73:CE:00:5C:F9:7B:1D
Certificate issuer:       /CN=d03046d16cfc391b028b88743773ce005cf97b1d
Certificate serial:       019D371B86BAE1BF5C6ECEB537E1AE091D3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0DBG0Wz8ORsCi4h0N3POAFz5ex0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/0DBG0Wz8ORsCi4h0N3POAFz5ex0.mft
Manifest number:          188D
Signing time:             Sun 29 Mar 2026 01:00:43 +0000
Manifest this update:     Sun 29 Mar 2026 01:00:43 +0000
Manifest next update:     Mon 30 Mar 2026 01:00:43 +0000
Files and hashes:         1: 0DBG0Wz8ORsCi4h0N3POAFz5ex0.crl (hash: bvXMvAUc9IUQrVyMWZBJGwWMTnc9N2Fkr8IvGoO5kNM=)
                          2: 6sIpurMyf7U7cVjfDtGf65yWDwA.roa (hash: cZnmgrrB6eUg5rHF2CdbgLHSyI5RnOe61koYU+5dDnA=)
                          3: NZSg7hN5dj36ijrS0iZ916AKsoM.roa (hash: VS2r3z5DpXErRLlghndtWldrsOM22Uv0cqCOqDvPp5M=)
                          4: _EXzGZ6mIohQTkOQklm2HctGpf0.roa (hash: d5WVsZmAqKJyYsnjGKZS29R+h6TCBV39mM8GYttnuxM=)
                          5: aTt1lDOQ__4_BOzrJWRmWq2_g_I.roa (hash: v57HfwpPj2JAqIcZD1AamnQQx8/Wn9ebUoCosyKqGs8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/0DBG0Wz8ORsCi4h0N3POAFz5ex0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/0DBG0Wz8ORsCi4h0N3POAFz5ex0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0DBG0Wz8ORsCi4h0N3POAFz5ex0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 01:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:1b:86:ba:e1:bf:5c:6e:ce:b5:37:e1:ae:09:1d:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d03046d16cfc391b028b88743773ce005cf97b1d
        Validity
            Not Before: Mar 29 01:00:43 2026 GMT
            Not After : Mar 30 01:00:43 2026 GMT
        Subject: CN=337eac11990d31c87bb6dfd2ab962aca7bc5be75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e7:fb:b3:1f:54:2a:d1:b0:d9:51:80:f8:70:
                    e0:4a:63:02:9a:57:d4:b6:b9:9d:c4:16:8c:3f:d8:
                    f7:62:88:f5:68:0d:87:6a:75:85:6e:03:22:2f:15:
                    8c:1c:e1:d7:82:d0:6e:af:26:43:f5:d4:9e:a3:8b:
                    31:3d:09:06:36:fc:c2:5c:10:91:14:f1:9b:df:3c:
                    a6:c7:33:cc:7d:05:1b:51:92:13:4f:35:36:d4:a3:
                    2b:4f:43:08:6d:11:ef:c8:2f:e1:d2:7b:4b:51:e1:
                    9e:86:e0:2c:be:45:03:0c:8f:e9:bf:98:36:d4:c8:
                    bd:10:d8:26:76:3a:54:f2:ff:6e:c8:f1:e0:3a:85:
                    b9:70:ca:e1:33:c1:ac:91:d8:be:0e:3a:77:8a:8d:
                    72:35:70:d1:cc:01:8a:99:cb:89:36:24:8f:83:2f:
                    76:32:0a:f3:50:a4:f1:b1:c0:5a:b7:83:4f:f3:8a:
                    29:39:fd:de:6c:17:60:a1:de:32:f6:51:a1:48:c3:
                    1d:d5:f3:31:1f:07:38:ee:73:c1:17:03:72:6b:d2:
                    fd:eb:41:11:54:d3:93:e7:f9:4f:2d:92:72:8c:13:
                    36:40:d6:32:0c:6c:60:b1:31:00:58:6a:5c:bc:dc:
                    9b:30:73:a3:09:a8:2f:b0:7d:0d:96:32:ab:16:6f:
                    bf:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:7E:AC:11:99:0D:31:C8:7B:B6:DF:D2:AB:96:2A:CA:7B:C5:BE:75
            X509v3 Authority Key Identifier:
                keyid:D0:30:46:D1:6C:FC:39:1B:02:8B:88:74:37:73:CE:00:5C:F9:7B:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0DBG0Wz8ORsCi4h0N3POAFz5ex0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/0DBG0Wz8ORsCi4h0N3POAFz5ex0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/0DBG0Wz8ORsCi4h0N3POAFz5ex0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:fe:10:43:1e:ba:ac:1d:f3:35:07:85:70:e1:cc:33:0f:a9:
         22:40:7e:01:4e:f5:de:22:e8:d7:25:9d:14:60:59:36:df:f7:
         92:f8:46:f1:6a:76:dd:d7:dc:ca:dd:48:8f:0a:13:9f:ab:d3:
         54:dd:ce:05:b0:48:25:cc:79:06:07:b2:a2:3a:76:e9:04:fa:
         7b:fb:9d:57:73:49:86:d4:ac:a0:2f:df:8f:24:84:f9:b9:0e:
         c6:d5:58:da:d4:e3:46:2a:24:65:ea:62:0d:bf:e4:78:18:a9:
         6e:94:df:be:1f:35:81:7e:39:f4:66:a3:a9:61:92:24:91:f8:
         8e:64:59:07:39:cb:d7:e0:69:f2:a1:ac:62:f2:d2:fd:86:67:
         9d:88:8c:9f:0b:16:da:f6:26:fc:91:7f:cc:e4:69:fc:98:0e:
         b2:b8:92:66:5f:61:2a:9d:4f:cd:8a:f5:d3:e6:81:75:52:89:
         45:99:80:98:20:c9:26:b9:f3:f0:1d:8c:f8:d1:04:e5:67:92:
         03:3a:fa:56:81:7a:51:01:25:df:1f:58:82:34:79:86:3d:38:
         93:38:32:eb:10:4d:1f:42:f0:cc:3b:f2:dc:47:8b:ad:fc:44:
         8b:8c:83:41:01:93:32:2b:02:3d:f5:e7:eb:76:8c:9e:2b:52:
         0d:11:99:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:12 2026 by rpki-client