Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d528d3-2a93-460c-926d-40d15f36ea43/1/skFYMFfyBWPJOCuJTx_OrKVfvaM.mft
File:                     skFYMFfyBWPJOCuJTx_OrKVfvaM.mft (raw, json)
Hash identifier:          r1Te/7aBpHP2n2cj1v+Vz7NjUh5MVn3EH8AB4QS/LxY=
Subject key identifier:   E8:AE:4F:97:26:5E:98:D6:89:D6:AE:77:C6:FC:B3:73:CC:95:C6:88
Authority key identifier: B2:41:58:30:57:F2:05:63:C9:38:2B:89:4F:1F:CE:AC:A5:5F:BD:A3
Certificate issuer:       /CN=b241583057f20563c9382b894f1fceaca55fbda3
Certificate serial:       019D37C045131EF6882537F860776BF4197E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/skFYMFfyBWPJOCuJTx_OrKVfvaM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/d528d3-2a93-460c-926d-40d15f36ea43/1/skFYMFfyBWPJOCuJTx_OrKVfvaM.mft
Manifest number:          188B
Signing time:             Sun 29 Mar 2026 04:00:40 +0000
Manifest this update:     Sun 29 Mar 2026 04:00:40 +0000
Manifest next update:     Mon 30 Mar 2026 04:00:40 +0000
Files and hashes:         1: skFYMFfyBWPJOCuJTx_OrKVfvaM.crl (hash: NsI9ZuL46RZLSBMES1VvE6tGFUn8KBQS/AoBEwjN2tQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/d528d3-2a93-460c-926d-40d15f36ea43/1/skFYMFfyBWPJOCuJTx_OrKVfvaM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/d528d3-2a93-460c-926d-40d15f36ea43/1/skFYMFfyBWPJOCuJTx_OrKVfvaM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/skFYMFfyBWPJOCuJTx_OrKVfvaM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 04:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:c0:45:13:1e:f6:88:25:37:f8:60:77:6b:f4:19:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b241583057f20563c9382b894f1fceaca55fbda3
        Validity
            Not Before: Mar 29 04:00:40 2026 GMT
            Not After : Mar 30 04:00:40 2026 GMT
        Subject: CN=e8ae4f97265e98d689d6ae77c6fcb373cc95c688
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:23:a1:47:e2:56:50:6d:0a:ba:4f:b8:b0:fa:
                    35:9f:d1:b7:eb:76:bb:92:43:c9:0a:a2:81:a1:fb:
                    20:7f:79:49:1c:9e:31:aa:a8:4d:fc:02:a4:d6:91:
                    a7:ae:69:d5:5d:72:cd:7d:d0:71:f7:08:30:2b:0a:
                    e5:c7:1c:48:bb:cb:2d:82:a9:86:72:2b:3f:bf:4e:
                    00:43:f4:f3:66:b1:14:6c:b7:5c:b2:df:81:30:f5:
                    7b:6c:cc:31:a8:f9:07:19:94:86:ff:e7:61:fd:87:
                    50:58:ba:76:e8:f2:71:1d:58:fd:87:32:a1:2f:52:
                    60:f0:8a:79:ce:04:7d:c6:d7:2c:62:85:8d:38:4c:
                    01:54:ec:06:ba:c4:5c:7f:53:28:47:a6:be:ba:ba:
                    21:4a:3d:e6:23:ab:07:5e:05:84:2e:09:0b:e3:bb:
                    ab:d1:8f:50:01:5d:c1:f8:41:36:0a:cf:a7:cb:4d:
                    67:0a:8c:eb:93:78:65:21:21:8e:3a:a5:a8:95:4e:
                    f5:47:b7:62:b4:ae:28:a0:42:25:a1:96:bd:43:aa:
                    b9:8f:7a:c1:19:1d:d5:64:79:86:31:1a:36:7b:ee:
                    b0:b2:b8:8a:a1:5f:c6:25:75:12:a7:d5:e4:68:12:
                    28:81:95:fc:56:02:ad:f3:45:36:29:9f:54:55:16:
                    c4:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:AE:4F:97:26:5E:98:D6:89:D6:AE:77:C6:FC:B3:73:CC:95:C6:88
            X509v3 Authority Key Identifier:
                keyid:B2:41:58:30:57:F2:05:63:C9:38:2B:89:4F:1F:CE:AC:A5:5F:BD:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/skFYMFfyBWPJOCuJTx_OrKVfvaM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d528d3-2a93-460c-926d-40d15f36ea43/1/skFYMFfyBWPJOCuJTx_OrKVfvaM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d528d3-2a93-460c-926d-40d15f36ea43/1/skFYMFfyBWPJOCuJTx_OrKVfvaM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:4d:0b:66:40:76:02:e6:da:09:4c:81:82:55:fd:56:97:f9:
         31:65:6a:bd:cd:5d:ca:04:2b:c4:be:57:d9:51:ff:99:51:81:
         ce:7d:4f:1d:62:30:b1:06:15:56:62:3f:98:35:a8:d6:91:a8:
         04:4e:6a:ae:73:1e:95:ec:20:af:30:6b:c9:74:db:04:45:6d:
         7e:66:89:03:32:27:4c:9c:3f:52:10:e8:8e:6f:0b:bc:92:29:
         1c:0e:65:58:95:d2:79:27:21:d4:d1:f6:fc:8e:74:4d:44:8e:
         e3:ed:03:d7:83:24:9f:a2:d3:54:ab:79:29:2d:0e:9b:f4:4f:
         8b:9c:ab:0b:58:17:87:32:c4:8b:d2:87:6b:5d:84:5d:95:d0:
         68:9e:2c:79:20:fc:67:fa:4c:f8:4e:37:fd:c5:25:f4:d6:c2:
         55:62:74:7c:0b:cd:a5:71:67:38:0c:d2:3f:d9:c5:32:ee:85:
         7c:c0:95:1b:21:93:45:0e:7d:0e:2e:93:24:d7:a3:3b:b1:28:
         46:24:66:98:9d:93:9c:6d:2b:0a:1b:a4:49:b1:ff:59:52:ae:
         c8:52:94:8d:9a:60:c8:b9:f9:13:e4:db:4e:51:f6:0f:67:11:
         a2:0f:ee:24:dc:6a:9d:4e:cb:5d:43:17:4f:6c:84:05:a2:48:
         0f:2c:00:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:21 2026 by rpki-client