Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/6cb081-8a7d-4024-ae85-9c4cb3bd925e/1/vJ9arpo3Z27gp3Ev8xDdCwpvIsY.mft
File:                     vJ9arpo3Z27gp3Ev8xDdCwpvIsY.mft (raw, json)
Hash identifier:          9Odqzp73X/W8bMcCqFZ6l7mMBp01hAeZRsZ6WhQVLf0=
Subject key identifier:   F5:B5:A3:49:B5:B6:27:C1:96:DB:75:6E:AD:AC:D8:6E:2F:62:63:92
Authority key identifier: BC:9F:5A:AE:9A:37:67:6E:E0:A7:71:2F:F3:10:DD:0B:0A:6F:22:C6
Certificate issuer:       /CN=bc9f5aae9a37676ee0a7712ff310dd0b0a6f22c6
Certificate serial:       019D382DFA21AF36D26697C9E7260DCBF804
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vJ9arpo3Z27gp3Ev8xDdCwpvIsY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/6cb081-8a7d-4024-ae85-9c4cb3bd925e/1/vJ9arpo3Z27gp3Ev8xDdCwpvIsY.mft
Manifest number:          188B
Signing time:             Sun 29 Mar 2026 06:00:30 +0000
Manifest this update:     Sun 29 Mar 2026 06:00:30 +0000
Manifest next update:     Mon 30 Mar 2026 06:00:30 +0000
Files and hashes:         1: vJ9arpo3Z27gp3Ev8xDdCwpvIsY.crl (hash: oXMIaV4V7HOmAcKNOgFqSAURLd8JCdpV7VsXlA9FHtk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/6cb081-8a7d-4024-ae85-9c4cb3bd925e/1/vJ9arpo3Z27gp3Ev8xDdCwpvIsY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/6cb081-8a7d-4024-ae85-9c4cb3bd925e/1/vJ9arpo3Z27gp3Ev8xDdCwpvIsY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vJ9arpo3Z27gp3Ev8xDdCwpvIsY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 06:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:2d:fa:21:af:36:d2:66:97:c9:e7:26:0d:cb:f8:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc9f5aae9a37676ee0a7712ff310dd0b0a6f22c6
        Validity
            Not Before: Mar 29 06:00:30 2026 GMT
            Not After : Mar 30 06:00:30 2026 GMT
        Subject: CN=f5b5a349b5b627c196db756eadacd86e2f626392
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e4:89:2d:7e:a7:1f:47:cb:c2:3a:e1:77:70:
                    2f:e9:fe:f9:a1:cc:ec:bd:81:e8:73:b3:be:77:80:
                    73:9a:ba:0f:e1:80:27:34:cb:5c:12:04:dd:b2:5a:
                    a1:2f:db:4d:52:65:32:ba:d3:f2:f5:c6:77:06:cf:
                    ca:7a:6e:e0:92:93:25:04:3a:6d:90:9e:3d:14:a7:
                    e2:15:19:7f:af:18:9c:50:65:58:fc:ef:9c:c5:62:
                    0a:e3:46:69:77:28:52:83:85:13:90:b0:c3:3f:05:
                    b6:d6:f8:eb:88:20:99:d9:91:4a:19:59:d3:99:3c:
                    cc:78:23:38:58:21:c5:2f:86:0b:5b:a3:fd:3f:b6:
                    00:b5:8b:88:52:0d:1b:af:60:9f:ff:4e:e9:57:a0:
                    fe:00:ae:3a:b9:df:9a:a0:78:a2:0e:25:36:84:d1:
                    0b:5f:b8:26:37:99:5e:36:bd:b5:2b:8d:c0:d2:da:
                    57:f0:e7:2e:b9:a3:89:09:7c:57:00:20:7a:47:aa:
                    19:f0:0a:27:ba:6b:23:63:f1:3f:0c:31:e1:71:43:
                    d5:79:04:b3:ee:2b:14:20:06:b5:2b:49:c4:77:46:
                    c3:e3:8b:a5:b3:7b:4d:d8:d8:3d:ec:fe:76:50:23:
                    83:b1:00:a8:1b:95:b4:d6:d8:e4:a5:67:f6:22:11:
                    15:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:B5:A3:49:B5:B6:27:C1:96:DB:75:6E:AD:AC:D8:6E:2F:62:63:92
            X509v3 Authority Key Identifier:
                keyid:BC:9F:5A:AE:9A:37:67:6E:E0:A7:71:2F:F3:10:DD:0B:0A:6F:22:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJ9arpo3Z27gp3Ev8xDdCwpvIsY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6cb081-8a7d-4024-ae85-9c4cb3bd925e/1/vJ9arpo3Z27gp3Ev8xDdCwpvIsY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6cb081-8a7d-4024-ae85-9c4cb3bd925e/1/vJ9arpo3Z27gp3Ev8xDdCwpvIsY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:27:93:f4:06:c9:4c:ec:9d:fe:1c:82:e7:2b:94:50:1b:16:
         0e:83:10:61:b8:61:09:26:2c:ba:5f:f6:11:83:98:4b:50:ec:
         89:9c:3f:91:d5:3f:e8:47:8a:0e:6a:70:b1:45:54:ea:53:51:
         b0:1b:b6:76:56:9e:db:fa:ef:af:de:0b:ae:c7:1d:ad:b7:17:
         a8:33:c5:db:e8:d8:3f:13:db:ca:45:5c:14:1a:6e:cc:44:bc:
         e8:35:24:72:48:36:e0:3e:68:6b:7e:44:e9:19:4d:1b:e6:85:
         d5:f6:ff:86:89:da:29:09:29:5e:9a:cc:46:8b:10:03:7b:cd:
         08:63:3a:84:4f:fa:08:1e:d1:fe:64:74:d5:25:91:04:c9:d3:
         8d:be:ce:6f:8b:dc:cf:22:63:35:8f:0f:65:b0:c5:53:17:85:
         73:8b:46:ba:a4:b4:5f:9a:22:31:ac:c1:a4:57:d3:ce:77:34:
         d8:7b:86:af:9a:47:56:15:a6:10:32:08:39:33:fe:76:2b:f8:
         74:61:51:70:9d:86:c9:9c:5e:6f:78:72:e5:79:a9:95:0a:9f:
         0c:e0:74:13:11:ba:e5:5e:cf:9f:ee:ac:92:df:1a:e5:87:18:
         b4:64:80:a7:d9:6f:b1:10:c5:7a:4f:77:d6:d8:ac:c3:84:53:
         ff:3f:10:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:08 2026 by rpki-client