Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/cb05f9-56be-4dfb-a4a9-893b0bebc938/1/voR-uyRJqE-_ayVcYEAo0UIgLJU.mft
File:                     voR-uyRJqE-_ayVcYEAo0UIgLJU.mft (raw, json)
Hash identifier:          ZUua0ugDPmhhfch2zz7rmfhfBDwqZOcRebQ/XB7dAQA=
Subject key identifier:   84:72:48:C3:62:03:56:34:3B:0E:68:14:4C:49:97:5C:EC:99:E8:1E
Authority key identifier: BE:84:7E:BB:24:49:A8:4F:BF:6B:25:5C:60:40:28:D1:42:20:2C:95
Certificate issuer:       /CN=be847ebb2449a84fbf6b255c604028d142202c95
Certificate serial:       019D39AE57DB08E77A1D9C4B2C3F251D19B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/voR-uyRJqE-_ayVcYEAo0UIgLJU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/cb05f9-56be-4dfb-a4a9-893b0bebc938/1/voR-uyRJqE-_ayVcYEAo0UIgLJU.mft
Manifest number:          188A
Signing time:             Sun 29 Mar 2026 13:00:20 +0000
Manifest this update:     Sun 29 Mar 2026 13:00:20 +0000
Manifest next update:     Mon 30 Mar 2026 13:00:20 +0000
Files and hashes:         1: voR-uyRJqE-_ayVcYEAo0UIgLJU.crl (hash: LHfqbzcOPlw5PZob8srOinvxmfed3IbgIa3PLjoXcIQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/cb05f9-56be-4dfb-a4a9-893b0bebc938/1/voR-uyRJqE-_ayVcYEAo0UIgLJU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/cb05f9-56be-4dfb-a4a9-893b0bebc938/1/voR-uyRJqE-_ayVcYEAo0UIgLJU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/voR-uyRJqE-_ayVcYEAo0UIgLJU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:ae:57:db:08:e7:7a:1d:9c:4b:2c:3f:25:1d:19:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be847ebb2449a84fbf6b255c604028d142202c95
        Validity
            Not Before: Mar 29 13:00:20 2026 GMT
            Not After : Mar 30 13:00:20 2026 GMT
        Subject: CN=847248c3620356343b0e68144c49975cec99e81e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:85:65:48:ca:82:71:40:0e:c3:f4:3a:11:ae:
                    79:40:6f:70:59:bc:86:4e:c3:3e:ae:0c:df:60:a4:
                    eb:81:99:b4:ca:54:5c:e9:d9:40:b3:1e:be:69:0b:
                    0d:7d:b6:6d:6c:c0:6e:b0:08:e3:82:cd:b4:7b:1c:
                    7e:90:55:0d:be:31:93:a5:be:ff:ff:e1:1d:1a:f3:
                    7f:99:e0:21:f8:c9:89:7e:e3:64:fb:7f:d8:7a:d9:
                    cb:3d:c4:1d:50:86:dd:14:2a:f3:9b:f4:23:c2:f2:
                    ad:82:9b:35:13:29:69:7d:fe:8c:ab:7c:ac:c4:d3:
                    0b:42:e1:ed:a8:65:4e:32:5a:d3:2b:3e:cc:07:cb:
                    5a:5c:ce:ed:17:2e:a6:2c:3b:ee:ee:b9:11:81:9a:
                    ff:cb:88:b8:33:c3:63:75:97:a1:2b:78:39:f0:26:
                    06:5f:20:ce:33:54:11:d7:0b:14:d5:96:30:f9:13:
                    62:85:d9:1a:ed:ac:11:d3:75:2c:fe:00:88:28:be:
                    38:ba:90:3f:5b:86:99:f8:1c:48:b4:2d:17:d2:36:
                    49:bd:02:0c:de:74:f8:13:7e:72:f2:45:62:1b:31:
                    e9:75:95:90:fb:a3:67:5e:b5:39:ad:34:f8:c9:b8:
                    41:91:bb:fb:66:54:1b:47:c3:c6:ef:73:2b:f1:8f:
                    49:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:72:48:C3:62:03:56:34:3B:0E:68:14:4C:49:97:5C:EC:99:E8:1E
            X509v3 Authority Key Identifier:
                keyid:BE:84:7E:BB:24:49:A8:4F:BF:6B:25:5C:60:40:28:D1:42:20:2C:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/voR-uyRJqE-_ayVcYEAo0UIgLJU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/cb05f9-56be-4dfb-a4a9-893b0bebc938/1/voR-uyRJqE-_ayVcYEAo0UIgLJU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/cb05f9-56be-4dfb-a4a9-893b0bebc938/1/voR-uyRJqE-_ayVcYEAo0UIgLJU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:07:4a:f9:0d:83:b5:1a:88:cc:a3:51:a5:64:02:6e:fc:52:
         85:95:4f:e4:68:a6:32:4f:0e:9b:5c:38:c7:59:37:51:83:d9:
         55:4e:5f:52:4e:76:c8:fb:27:8d:47:9b:c2:71:4c:3e:11:65:
         f2:f0:97:4a:d9:c1:4b:21:d7:43:45:dc:60:d4:a8:0a:c5:d4:
         08:76:3b:40:02:fa:20:6f:7d:c4:5c:80:46:82:7a:02:3e:76:
         eb:b8:a0:87:44:0b:46:3e:b2:9d:75:23:04:21:7a:8b:61:f2:
         46:b9:25:c9:a6:03:8e:45:90:9a:9b:a5:df:f6:1f:5a:79:79:
         75:9c:af:04:d8:d1:4b:6f:a4:09:1e:f4:96:80:a3:77:41:2e:
         44:4f:fb:7c:74:65:b7:de:4c:5b:a2:76:59:35:c9:12:54:05:
         1e:21:6f:a9:5c:a7:e5:17:1c:11:d4:5b:91:9f:7f:29:df:fb:
         97:ee:a2:86:d3:07:3f:b8:38:07:ac:4e:03:f6:94:16:f6:60:
         19:ab:6e:94:07:f8:c2:33:62:3b:1c:d5:a7:f7:ab:4a:ef:e9:
         d0:0e:64:d9:92:1e:88:7f:83:df:f3:58:88:b7:1a:8f:3e:e4:
         5b:fe:fe:b9:3a:48:f9:2e:dc:9d:73:dd:37:59:e7:96:49:23:
         fd:9a:63:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:25:23 2026 by rpki-client