Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/abb62e-4b75-44c3-8fb3-18ccbc995bf8/1/uIog4vueEVBGObZ8_sCv6z8wZpA.mft
File:                     uIog4vueEVBGObZ8_sCv6z8wZpA.mft (raw, json)
Hash identifier:          3vFCUOaCdjZL6TjvcfCxm09Q3QHd4nuz858XGFW0AGc=
Subject key identifier:   AB:6B:DA:3F:17:29:35:EC:EE:D8:13:ED:7C:02:75:F1:B9:1B:9E:9D
Authority key identifier: B8:8A:20:E2:FB:9E:11:50:46:39:B6:7C:FE:C0:AF:EB:3F:30:66:90
Certificate issuer:       /CN=b88a20e2fb9e11504639b67cfec0afeb3f306690
Certificate serial:       019D3A54A100B2C56AED815464AAEEB814A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uIog4vueEVBGObZ8_sCv6z8wZpA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/abb62e-4b75-44c3-8fb3-18ccbc995bf8/1/uIog4vueEVBGObZ8_sCv6z8wZpA.mft
Manifest number:          188D
Signing time:             Sun 29 Mar 2026 16:01:57 +0000
Manifest this update:     Sun 29 Mar 2026 16:01:57 +0000
Manifest next update:     Mon 30 Mar 2026 16:01:57 +0000
Files and hashes:         1: uIog4vueEVBGObZ8_sCv6z8wZpA.crl (hash: Y4u6Zsc8+ZwQrWP4Swwxs6AZcGkDTa+kqVHywMWsZIM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/abb62e-4b75-44c3-8fb3-18ccbc995bf8/1/uIog4vueEVBGObZ8_sCv6z8wZpA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/abb62e-4b75-44c3-8fb3-18ccbc995bf8/1/uIog4vueEVBGObZ8_sCv6z8wZpA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uIog4vueEVBGObZ8_sCv6z8wZpA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 08:48:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:3a:54:a1:00:b2:c5:6a:ed:81:54:64:aa:ee:b8:14:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b88a20e2fb9e11504639b67cfec0afeb3f306690
        Validity
            Not Before: Mar 29 16:01:57 2026 GMT
            Not After : Mar 30 16:01:57 2026 GMT
        Subject: CN=ab6bda3f172935eceed813ed7c0275f1b91b9e9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f7:cb:22:52:ae:59:08:8d:ce:34:90:4f:e8:
                    1e:cd:d0:73:27:a8:76:57:7e:b7:db:09:13:cd:aa:
                    4b:d1:a2:0c:2b:4f:a0:6c:67:9a:f1:46:5e:aa:20:
                    f9:0a:4d:cd:2b:74:e0:98:84:19:c3:47:f4:6d:7e:
                    98:3a:07:aa:ae:6e:ff:17:cf:df:17:b8:30:61:5d:
                    a3:4f:d2:51:bf:75:b4:ac:3a:f0:f8:4c:3e:bb:03:
                    73:67:90:aa:a2:d0:5c:fa:22:86:28:5b:49:21:ea:
                    6b:96:ba:47:1f:52:62:b9:ae:a9:c4:83:d4:96:35:
                    3e:6a:8a:78:62:20:69:2d:24:92:33:9d:a2:3f:8c:
                    03:81:ba:ff:d4:d5:b0:c9:4d:1c:91:da:a9:96:ac:
                    7e:5b:2a:a2:94:23:4e:d7:72:38:60:c2:ff:f2:96:
                    2e:00:88:77:06:13:ad:da:a2:d2:b7:31:d2:4b:18:
                    3b:75:1f:a7:c6:99:2c:cb:49:90:07:94:30:36:a8:
                    f5:f9:b2:43:93:ea:63:63:a1:b6:1f:f6:ce:c4:3a:
                    c3:ae:42:08:e5:8a:a6:a0:d9:70:23:86:cd:8e:31:
                    28:81:0d:ff:a9:e1:ad:53:35:9c:1f:01:85:78:87:
                    21:71:63:22:66:52:e4:41:af:6d:66:16:fb:86:fa:
                    bd:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:6B:DA:3F:17:29:35:EC:EE:D8:13:ED:7C:02:75:F1:B9:1B:9E:9D
            X509v3 Authority Key Identifier:
                keyid:B8:8A:20:E2:FB:9E:11:50:46:39:B6:7C:FE:C0:AF:EB:3F:30:66:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uIog4vueEVBGObZ8_sCv6z8wZpA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/abb62e-4b75-44c3-8fb3-18ccbc995bf8/1/uIog4vueEVBGObZ8_sCv6z8wZpA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/abb62e-4b75-44c3-8fb3-18ccbc995bf8/1/uIog4vueEVBGObZ8_sCv6z8wZpA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:3f:86:b1:7d:f1:1b:87:4f:81:ba:78:e5:dc:38:3e:d8:7e:
         a9:d7:e9:9c:80:eb:c4:9f:91:24:55:18:44:2f:f1:82:d4:3a:
         65:74:64:53:0e:95:e0:d9:79:74:df:99:c6:1e:1a:a3:c7:ed:
         ad:ba:5a:01:cd:90:54:4d:e6:6a:71:fa:d1:ea:a7:98:70:c3:
         c8:5e:31:9d:0f:95:a3:9e:06:81:dc:69:01:48:03:08:bf:ca:
         8e:79:14:9e:ed:5b:0a:50:be:1f:65:a2:db:bd:f4:5e:dd:c9:
         6a:8c:3a:8a:d7:8f:8f:5a:a8:4f:fc:11:ec:38:46:3c:0f:28:
         7a:5e:fb:3b:35:61:6d:c0:83:10:c0:fa:df:9a:d7:85:e9:9e:
         60:35:cd:1f:5f:06:31:99:9f:4e:17:4b:c0:a2:0f:34:09:e6:
         e0:d0:57:5d:bd:ae:5e:ac:23:60:67:a9:72:d4:cf:b0:18:9a:
         8d:11:bb:a5:b9:34:f6:00:36:9e:00:65:2a:47:d0:21:1c:2a:
         d1:bc:63:f5:5d:a5:17:36:d5:ee:4b:09:80:7d:e2:2c:05:72:
         9c:28:ec:4f:e5:5e:0d:3f:b3:41:a9:33:9f:1b:94:11:75:25:
         5a:c0:c8:af:19:f4:07:57:db:34:d8:63:65:77:37:f2:bd:23:
         b9:07:2d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:39:17 2026 by rpki-client