Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.mft
File:                     maLC7PWMRLNaDaKVf_TcouYLaGo.mft (raw, json)
Hash identifier:          wMMx8WImModUAcewWfNE9C4elQOs2c1YSTVGfgEPTrk=
Subject key identifier:   54:9C:A6:DE:A6:47:20:5C:40:ED:C0:25:08:28:B4:DE:A9:A1:9F:C9
Authority key identifier: 99:A2:C2:EC:F5:8C:44:B3:5A:0D:A2:95:7F:F4:DC:A2:E6:0B:68:6A
Certificate issuer:       /CN=99a2c2ecf58c44b35a0da2957ff4dca2e60b686a
Certificate serial:       019CE7EDBFDDC39EC7FACDBBCFD1A16CB7BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/maLC7PWMRLNaDaKVf_TcouYLaGo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.mft
Manifest number:          186D
Signing time:             Fri 13 Mar 2026 16:00:43 +0000
Manifest this update:     Fri 13 Mar 2026 16:00:43 +0000
Manifest next update:     Sat 14 Mar 2026 16:00:43 +0000
Files and hashes:         1: CQ22INHNBj4XjlCUrI5XIygZ-R0.roa (hash: XIhPQfL8JPX1XhK5bY8YDY2+uw01ecHaNFfLz05TOJ0=)
                          2: KJY5nxCnM8VflNqrt-fuQ6cuQes.roa (hash: CD+3ziwBgnP7/0qdqqYvm343nyyRQZA21pgLWpHPvXc=)
                          3: YoLNLyuosFKuT_-ema2hiJHs0ZY.roa (hash: hWuyH98+DzBIQmHmAmY9RDKZV1I45ddKJD4en0HvYcI=)
                          4: a4snBLGv5x9BUgTX8OqagmQxYq4.roa (hash: v28FpMO1x0oIkmNzipvZuAj2xt/sVOZTdJkWdv7M7/Y=)
                          5: iTdLQoa1ZZc0xRlTVb7cKdKcrqo.roa (hash: fRXMRZJi4kfSOE38kfwPxuehxymZ8uVjjmiNFMuJgTE=)
                          6: maLC7PWMRLNaDaKVf_TcouYLaGo.crl (hash: 43T5vbUemLVgEPhvfhhQ3as5ddOT8Qm9yo3xDEbP16E=)
                          7: pgw_vXBhOHyYYmolPmheFOInOlo.roa (hash: FBhZNS8WeqSQq7ASqmhTPAh4HzJGXnwv4pIHLO19zl4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/maLC7PWMRLNaDaKVf_TcouYLaGo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 16:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e7:ed:bf:dd:c3:9e:c7:fa:cd:bb:cf:d1:a1:6c:b7:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99a2c2ecf58c44b35a0da2957ff4dca2e60b686a
        Validity
            Not Before: Mar 13 16:00:43 2026 GMT
            Not After : Mar 14 16:00:43 2026 GMT
        Subject: CN=549ca6dea647205c40edc0250828b4dea9a19fc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:a0:84:1a:da:b0:1f:18:cd:f8:cd:02:37:1a:
                    5c:88:03:74:a8:26:12:86:b3:94:f5:7e:13:c9:20:
                    e5:45:0d:8e:7a:40:22:fe:22:4b:c7:9b:d5:60:01:
                    af:a8:dc:de:8b:0d:36:07:19:b3:95:8e:18:e3:dc:
                    52:e9:79:3b:f1:9c:3c:b9:f8:8c:d4:88:0d:9c:26:
                    03:62:bb:fc:24:49:69:9e:fb:5c:58:78:bb:fc:de:
                    e2:f8:cc:88:76:7f:9c:4a:cf:4a:59:91:05:0c:ff:
                    32:aa:62:26:28:16:e1:9a:5c:c1:19:6d:b5:d6:c8:
                    14:ff:1f:c4:89:7a:1d:10:96:4c:ea:00:39:d1:1c:
                    ef:64:0a:12:b0:30:3f:d2:3a:a1:15:f2:66:f1:b2:
                    d4:27:f9:bb:f6:25:71:d7:ab:d5:eb:19:ed:4a:ef:
                    6d:dc:8b:db:67:f8:11:e5:80:23:90:73:aa:4c:bb:
                    b3:ab:67:30:02:54:53:5d:10:f1:46:ba:c1:4c:2c:
                    3c:e2:70:a8:46:62:12:ab:c2:3b:31:e9:d5:f3:e7:
                    50:04:3a:fb:cd:30:1a:11:3b:9a:2c:e8:e9:29:d4:
                    9b:e7:c0:f2:59:ba:5d:84:ba:d8:ba:77:9b:c8:00:
                    8e:ee:ba:f1:03:59:f8:78:45:6e:78:1a:0f:94:ec:
                    89:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:9C:A6:DE:A6:47:20:5C:40:ED:C0:25:08:28:B4:DE:A9:A1:9F:C9
            X509v3 Authority Key Identifier:
                keyid:99:A2:C2:EC:F5:8C:44:B3:5A:0D:A2:95:7F:F4:DC:A2:E6:0B:68:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maLC7PWMRLNaDaKVf_TcouYLaGo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:ed:a5:88:0f:f4:e7:5a:81:29:d6:df:ff:18:90:4b:30:a3:
         40:7c:50:7a:aa:1d:62:13:69:98:89:d7:82:8e:99:17:9d:56:
         c1:f3:8f:95:b3:08:90:ae:2b:62:88:69:ed:d0:fa:7c:c6:31:
         16:a6:e4:e1:02:be:6e:29:97:4f:82:e0:7f:f1:58:86:14:64:
         0a:1a:27:fe:f2:e4:e6:4c:9a:f0:da:65:07:03:df:06:f9:e0:
         3a:5c:b5:7d:d4:d9:c2:e3:be:1c:39:3e:9f:27:29:c1:32:33:
         ee:c0:55:2d:06:e0:c7:28:ed:69:1d:1e:37:be:24:c4:55:66:
         33:10:88:85:e1:b3:6f:85:8c:30:87:f8:7b:ba:eb:ab:00:09:
         e3:dd:1c:c8:69:a3:7a:7f:ab:6f:00:19:3b:3c:10:08:44:09:
         10:4f:d3:f3:02:70:30:7e:a5:75:b0:4a:d4:90:6c:31:5e:2a:
         ea:d4:09:60:35:42:d2:37:7c:c3:ba:dd:7d:4a:78:14:6e:5f:
         8d:51:ee:b0:4e:8a:95:a5:e3:fd:1d:59:6e:2a:f9:5c:fc:c6:
         f6:1c:84:c5:4c:b2:f1:df:18:e5:80:ce:d2:21:3e:64:f2:9d:
         d0:f5:4f:35:a8:69:37:b7:d2:65:a3:cd:30:84:b8:47:a3:e0:
         b6:f9:25:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 20:48:05 2026 by rpki-client