Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft
File:                     1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft (raw, json)
Hash identifier:          dayBJVPTsQL9jprgzFCOBWWfUWZ4W/uMeo1yoc6eLpk=
Subject key identifier:   6A:AA:6D:77:C2:A7:24:CC:47:97:5F:D5:6A:D5:B5:F6:32:92:40:0C
Authority key identifier: D5:4B:82:D7:19:14:40:02:05:1D:A0:F8:8C:76:8D:E4:40:AC:20:BD
Certificate issuer:       /CN=d54b82d719144002051da0f88c768de440ac20bd
Certificate serial:       019D38D3761D235D3BD202869B056610795D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1UuC1xkUQAIFHaD4jHaN5ECsIL0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft
Manifest number:          188C
Signing time:             Sun 29 Mar 2026 09:01:15 +0000
Manifest this update:     Sun 29 Mar 2026 09:01:15 +0000
Manifest next update:     Mon 30 Mar 2026 09:01:15 +0000
Files and hashes:         1: 1UuC1xkUQAIFHaD4jHaN5ECsIL0.crl (hash: LFIDtK9KiMwVnXpDnO7sS7wj+8N0ByCrfLLYrut3LNs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1UuC1xkUQAIFHaD4jHaN5ECsIL0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:d3:76:1d:23:5d:3b:d2:02:86:9b:05:66:10:79:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d54b82d719144002051da0f88c768de440ac20bd
        Validity
            Not Before: Mar 29 09:01:15 2026 GMT
            Not After : Mar 30 09:01:15 2026 GMT
        Subject: CN=6aaa6d77c2a724cc47975fd56ad5b5f63292400c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:8f:a4:76:25:fd:d4:5a:ea:76:93:f2:2d:9a:
                    fe:09:0d:26:e8:89:9f:34:8d:35:13:7d:7f:44:9e:
                    d0:63:d0:ea:d3:97:bc:d1:47:e5:08:9c:46:47:e2:
                    16:cd:2b:f0:80:63:b9:f5:1a:0a:59:79:75:af:79:
                    3c:43:ce:41:c9:47:ee:49:e5:8b:a6:01:74:c2:7d:
                    16:0c:b8:ee:69:c6:cd:d7:f7:14:3e:59:7c:f7:d9:
                    d7:19:4b:16:fd:1c:62:98:40:6e:97:2a:bd:af:a3:
                    cf:30:a7:32:ed:2e:b3:42:41:22:d1:1f:fb:08:02:
                    d4:b4:f3:cf:c9:cc:cf:5e:f2:c9:b6:87:0a:4f:8f:
                    b5:cd:38:e4:fd:e1:65:3c:7c:80:86:2d:a6:0d:73:
                    93:63:a2:65:9f:23:c7:ac:bd:c5:75:f4:63:96:18:
                    af:6a:60:80:4f:91:65:6e:ce:93:bb:63:46:f0:17:
                    6c:65:e9:e6:20:9e:28:02:57:db:03:43:79:fe:d4:
                    e1:23:93:9f:f6:26:5f:ac:29:11:75:39:7a:0c:88:
                    28:4b:be:32:39:d4:e4:73:d3:8e:c1:c5:a2:f8:8f:
                    1c:5f:c7:28:b6:1c:b8:8a:6a:a1:08:63:4a:02:9a:
                    a6:c0:16:6f:3e:9b:f6:f1:c2:d2:8b:45:2f:cb:c4:
                    b5:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:AA:6D:77:C2:A7:24:CC:47:97:5F:D5:6A:D5:B5:F6:32:92:40:0C
            X509v3 Authority Key Identifier:
                keyid:D5:4B:82:D7:19:14:40:02:05:1D:A0:F8:8C:76:8D:E4:40:AC:20:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1UuC1xkUQAIFHaD4jHaN5ECsIL0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:ea:41:fa:f8:7a:49:64:cd:d1:84:b4:c3:95:26:b3:d6:82:
         ca:d1:92:a4:b6:aa:a9:2c:68:20:41:d2:28:8c:ed:75:15:2f:
         f7:57:de:e1:bb:50:6a:a2:54:77:58:44:01:25:2d:77:73:68:
         1f:37:e1:73:6a:f9:11:d6:7e:9d:ea:80:cf:c7:ba:05:ff:d1:
         d6:3b:7f:3a:d9:bc:d9:fa:41:be:50:69:e9:cb:62:7c:1a:93:
         fc:a2:bc:ee:33:a2:78:64:b0:28:1a:92:79:6e:9d:88:88:f9:
         8e:21:9b:42:bb:a8:b5:c0:0b:21:1e:1d:66:39:d1:2a:5f:e8:
         15:b6:ea:62:11:9a:a9:d5:a3:5b:37:7a:82:51:66:50:84:59:
         75:62:6b:b6:34:c3:03:24:d4:85:b2:de:22:17:20:2a:3e:37:
         ea:e3:09:b8:c8:7b:e6:3e:c0:68:78:7b:70:65:1c:15:03:b0:
         0d:0e:f7:83:35:07:46:8c:a3:fc:c5:16:9d:c1:db:6c:a1:66:
         a5:8e:ed:a6:75:9c:1a:79:f4:f1:05:ed:b5:0b:4c:a5:b5:de:
         b4:4a:13:bb:63:72:1d:96:03:e9:e2:ee:68:31:40:9e:a8:7d:
         cf:8b:4d:f9:6b:95:cb:22:80:b6:87:b7:a3:18:e8:7f:be:2b:
         b2:9b:b2:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:52 2026 by rpki-client