Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/069e95-0ac2-4c27-82b4-bd2fff5b8849/1/RgxXERGq_A1R5f3ggjC_eLieSkg.mft
File:                     RgxXERGq_A1R5f3ggjC_eLieSkg.mft (raw, json)
Hash identifier:          XnhL99jf+jDhxVVoH7nQcyMuv5bycbhiyLdJDv4iZFg=
Subject key identifier:   30:5A:C9:5A:51:82:64:37:F4:DE:62:3B:2E:A3:21:F0:2D:4F:F9:C0
Authority key identifier: 46:0C:57:11:11:AA:FC:0D:51:E5:FD:E0:82:30:BF:78:B8:9E:4A:48
Certificate issuer:       /CN=460c571111aafc0d51e5fde08230bf78b89e4a48
Certificate serial:       019D382DF3E178962497F2210C0D05F9FA1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RgxXERGq_A1R5f3ggjC_eLieSkg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/069e95-0ac2-4c27-82b4-bd2fff5b8849/1/RgxXERGq_A1R5f3ggjC_eLieSkg.mft
Manifest number:          188B
Signing time:             Sun 29 Mar 2026 06:00:28 +0000
Manifest this update:     Sun 29 Mar 2026 06:00:28 +0000
Manifest next update:     Mon 30 Mar 2026 06:00:28 +0000
Files and hashes:         1: RgxXERGq_A1R5f3ggjC_eLieSkg.crl (hash: D1BrK2SyAu0glTmgyoXNxbywyAYNcAydAwQMSncva2k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/069e95-0ac2-4c27-82b4-bd2fff5b8849/1/RgxXERGq_A1R5f3ggjC_eLieSkg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/069e95-0ac2-4c27-82b4-bd2fff5b8849/1/RgxXERGq_A1R5f3ggjC_eLieSkg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RgxXERGq_A1R5f3ggjC_eLieSkg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 06:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:2d:f3:e1:78:96:24:97:f2:21:0c:0d:05:f9:fa:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=460c571111aafc0d51e5fde08230bf78b89e4a48
        Validity
            Not Before: Mar 29 06:00:28 2026 GMT
            Not After : Mar 30 06:00:28 2026 GMT
        Subject: CN=305ac95a51826437f4de623b2ea321f02d4ff9c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:83:e3:27:f6:50:1b:4d:1a:ff:22:b3:11:93:
                    70:44:0b:e5:36:6d:72:4e:ee:f9:76:95:8d:43:7e:
                    b6:24:98:f4:64:a1:da:04:22:7f:1b:a0:1a:a8:27:
                    d4:34:c0:a0:70:dd:b0:d0:99:65:e1:63:e9:42:27:
                    86:63:fc:80:e1:22:48:cb:c9:c4:47:0f:13:c0:87:
                    89:44:72:61:a6:5d:5c:af:5f:aa:d3:95:f2:1d:2a:
                    06:9d:b2:25:3f:c6:23:4f:e6:97:3b:0e:da:e3:c3:
                    35:d9:7f:ec:cc:50:cb:10:14:d2:27:3a:6e:e7:1b:
                    c3:5d:be:39:fb:78:87:c1:da:49:31:e2:bf:66:7e:
                    67:7c:de:69:ce:6c:30:0c:a0:e5:ab:de:05:80:80:
                    bd:9a:55:60:6a:b2:86:8c:c2:c8:a1:a2:32:ce:ea:
                    8b:35:a1:36:40:da:da:36:0b:38:4b:0e:a4:e3:b3:
                    0e:90:aa:b2:bf:ae:20:ea:fb:df:80:18:f7:46:25:
                    c4:31:f2:5f:8b:01:6e:f4:8e:81:e3:64:dc:9a:4c:
                    7c:e9:92:60:86:cd:58:4c:0e:a2:4a:f6:b7:20:9e:
                    84:0a:96:76:08:c6:e6:97:1b:11:ce:3f:09:79:25:
                    4b:9d:33:7c:22:2d:29:bd:6a:1b:dd:a2:03:92:ad:
                    af:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:5A:C9:5A:51:82:64:37:F4:DE:62:3B:2E:A3:21:F0:2D:4F:F9:C0
            X509v3 Authority Key Identifier:
                keyid:46:0C:57:11:11:AA:FC:0D:51:E5:FD:E0:82:30:BF:78:B8:9E:4A:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RgxXERGq_A1R5f3ggjC_eLieSkg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/069e95-0ac2-4c27-82b4-bd2fff5b8849/1/RgxXERGq_A1R5f3ggjC_eLieSkg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/069e95-0ac2-4c27-82b4-bd2fff5b8849/1/RgxXERGq_A1R5f3ggjC_eLieSkg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:1e:b7:7e:85:54:8f:b7:64:3c:10:c6:90:58:d8:fa:6b:8f:
         be:99:b7:24:9c:ce:1d:4d:5f:f1:9d:9f:13:95:cd:eb:ad:7c:
         0c:fe:c5:bd:63:3d:e0:b5:a3:9a:34:7e:72:74:03:8c:98:23:
         97:da:b0:bc:c1:08:1e:47:fc:ff:15:d1:b4:48:08:e1:42:59:
         85:09:af:7d:e5:3f:44:58:6a:5f:08:f9:59:69:c5:c4:56:35:
         19:eb:7b:a0:ed:2f:60:0f:13:dc:4f:a5:19:8e:75:47:50:e7:
         62:1a:cb:06:45:3b:80:c0:2c:6c:12:25:06:43:37:bd:f3:8f:
         06:a0:e5:42:18:99:cc:08:6e:a2:8f:23:c2:3c:ba:19:ed:56:
         4a:9b:87:9c:32:08:35:dd:37:ce:79:26:25:44:b4:cb:cf:e5:
         b9:bf:c2:fc:4a:d9:ef:53:ee:a4:cb:c5:b0:49:d4:34:78:4c:
         a5:95:b6:04:43:1d:1a:6f:27:95:11:85:e5:4e:87:bf:8b:0e:
         ab:0a:ef:8b:83:71:b1:03:4f:b8:c9:41:d8:82:88:69:a8:b3:
         09:74:2e:93:75:c3:15:53:ce:15:f0:82:f3:4e:fa:5a:53:05:
         31:1d:8f:c6:14:b1:ad:1b:f7:52:1e:e4:99:8a:b6:f0:02:15:
         b1:2a:20:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:18 2026 by rpki-client