Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/e96646-0c91-49b1-a140-e3924f78d842/1/eMsgO7wtvRRktUK3qtyZrUA_UQ8.mft
File:                     eMsgO7wtvRRktUK3qtyZrUA_UQ8.mft (raw, json)
Hash identifier:          qksXKNmSDqSrfdyffxcKgIEF9/jjDSEFpXvPAddSUX0=
Subject key identifier:   14:62:E6:55:CF:78:CD:77:4D:58:69:94:BB:CB:DC:B7:5A:6A:38:99
Authority key identifier: 78:CB:20:3B:BC:2D:BD:14:64:B5:42:B7:AA:DC:99:AD:40:3F:51:0F
Certificate issuer:       /CN=78cb203bbc2dbd1464b542b7aadc99ad403f510f
Certificate serial:       019D3865E97A3FF344D7F6A62989297F498C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eMsgO7wtvRRktUK3qtyZrUA_UQ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/e96646-0c91-49b1-a140-e3924f78d842/1/eMsgO7wtvRRktUK3qtyZrUA_UQ8.mft
Manifest number:          188C
Signing time:             Sun 29 Mar 2026 07:01:36 +0000
Manifest this update:     Sun 29 Mar 2026 07:01:36 +0000
Manifest next update:     Mon 30 Mar 2026 07:01:36 +0000
Files and hashes:         1: eMsgO7wtvRRktUK3qtyZrUA_UQ8.crl (hash: iq5uzukGeaTXpJZSzwruKm4dCjHenEved+Qzpm8HKgo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/e96646-0c91-49b1-a140-e3924f78d842/1/eMsgO7wtvRRktUK3qtyZrUA_UQ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/e96646-0c91-49b1-a140-e3924f78d842/1/eMsgO7wtvRRktUK3qtyZrUA_UQ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eMsgO7wtvRRktUK3qtyZrUA_UQ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:65:e9:7a:3f:f3:44:d7:f6:a6:29:89:29:7f:49:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78cb203bbc2dbd1464b542b7aadc99ad403f510f
        Validity
            Not Before: Mar 29 07:01:36 2026 GMT
            Not After : Mar 30 07:01:36 2026 GMT
        Subject: CN=1462e655cf78cd774d586994bbcbdcb75a6a3899
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:54:02:eb:52:29:df:f6:ea:47:83:39:67:59:
                    c7:63:b3:86:63:41:36:d7:cc:bf:ec:f7:dd:7e:40:
                    21:70:94:32:3b:fd:04:1d:f8:5a:21:dc:ca:be:2d:
                    04:75:e7:32:00:d7:bc:55:c0:b6:1b:1e:22:30:bb:
                    3c:c8:07:d0:1e:38:31:a7:ad:48:a6:f3:ff:a5:34:
                    41:0f:c5:f7:8c:49:2a:ef:46:f3:d1:e4:2c:fa:96:
                    f3:9c:98:05:a1:9d:68:70:f1:88:84:18:6c:08:82:
                    05:39:f3:ce:ca:80:2d:00:89:1d:4a:56:d8:6f:b0:
                    dc:01:c5:8f:92:13:40:b3:b5:91:ac:26:ec:ad:b7:
                    6d:31:3d:23:98:2a:ce:75:78:5d:eb:4b:3e:18:ca:
                    bf:01:ac:27:cc:45:2a:a4:ac:87:ca:8a:e0:3c:e8:
                    52:c3:be:ed:e3:70:0d:b7:75:ca:20:20:7d:d7:22:
                    7c:fa:b0:bd:36:6f:09:d5:e7:1c:bd:0a:4e:da:21:
                    d9:6a:74:cd:e6:72:2c:2a:3d:33:35:33:63:1a:43:
                    6e:bb:b7:00:f0:80:57:1e:8e:d6:15:7f:76:a3:45:
                    92:63:3d:3c:a8:ab:41:5f:f4:55:a7:1c:9b:82:8f:
                    6f:6e:2a:87:10:8a:4f:df:cb:4f:26:1d:a1:95:61:
                    1d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:62:E6:55:CF:78:CD:77:4D:58:69:94:BB:CB:DC:B7:5A:6A:38:99
            X509v3 Authority Key Identifier:
                keyid:78:CB:20:3B:BC:2D:BD:14:64:B5:42:B7:AA:DC:99:AD:40:3F:51:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eMsgO7wtvRRktUK3qtyZrUA_UQ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e96646-0c91-49b1-a140-e3924f78d842/1/eMsgO7wtvRRktUK3qtyZrUA_UQ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e96646-0c91-49b1-a140-e3924f78d842/1/eMsgO7wtvRRktUK3qtyZrUA_UQ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:b9:49:60:14:a7:2c:a8:ba:6a:f2:7f:be:2c:0f:6c:b8:93:
         de:83:79:74:52:a2:5e:e9:b1:3a:b9:55:2f:01:44:7e:58:c5:
         f0:6d:9c:81:5c:ab:03:45:1f:d3:45:6e:27:85:c0:8f:38:b3:
         23:7f:43:d9:5f:62:7d:1a:06:da:f1:b4:47:1b:65:2e:0c:77:
         9a:d8:ea:26:b8:15:b2:77:a9:08:d1:d2:b2:85:2b:f6:0e:14:
         53:ff:bd:e2:1b:d0:9e:9f:01:ad:6f:07:3f:d1:50:ec:38:3d:
         ec:1c:57:62:44:c7:8a:46:8a:9d:44:ca:f0:4a:45:79:4c:e2:
         b7:35:f9:c8:28:2d:d5:a6:c5:f2:40:07:19:73:f1:66:7e:ad:
         7b:11:1c:1c:50:eb:4b:a9:a5:6d:3f:ef:83:5e:bd:08:e5:f3:
         15:98:13:97:f8:20:47:33:7c:c2:1b:49:21:54:72:97:61:6e:
         16:7e:02:b2:70:27:bd:2d:3d:51:58:5a:5f:75:fd:55:e4:39:
         80:b3:dc:a5:0f:cf:24:0d:9b:d6:fd:ae:49:11:e8:46:f7:8b:
         ac:e3:c0:1e:90:1c:22:ee:d3:84:e8:36:91:92:a7:62:1a:73:
         9a:1a:95:17:01:b4:77:14:6c:3a:3d:c6:5f:f4:e7:cf:cb:12:
         28:81:2d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:56:10 2026 by rpki-client