Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft
File:                     iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft (raw, json)
Hash identifier:          zz+M7mIL00PeszG3eqvQFHwVafecW7VP6wTED39Sp3c=
Subject key identifier:   01:F6:67:B7:82:56:92:14:24:C5:97:18:50:33:1C:20:DA:33:2F:A8
Authority key identifier: 88:FB:41:0A:3B:FC:73:40:B6:67:B4:F2:21:C7:CB:80:62:67:89:6E
Certificate issuer:       /CN=88fb410a3bfc7340b667b4f221c7cb806267896e
Certificate serial:       019CAA2187174B846E644C104DECA74ADC4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iPtBCjv8c0C2Z7TyIcfLgGJniW4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft
Manifest number:          0188
Signing time:             Sun 01 Mar 2026 16:00:49 +0000
Manifest this update:     Sun 01 Mar 2026 16:00:49 +0000
Manifest next update:     Mon 02 Mar 2026 16:00:49 +0000
Files and hashes:         1: 43jM40RYm5KfeGPiDNzubwAPnss.roa (hash: 3FdXgssZKeAEaBlX49WSPSeSpanDn1fR5o5d1jEZFX8=)
                          2: F7I5rnkHLQ8PitpUJJXzJQnZJaU.roa (hash: mzXoIYY5/cdBAcGj+HsD/eRCWuIVU1w+4VfWf00hQ20=)
                          3: OwnmL8kddIBhLRX-NHEzddhuNVA.roa (hash: leLJKgM8a2VW5VrAHQjffz+j5cjfJqCfMtcGbwf0E0E=)
                          4: iPtBCjv8c0C2Z7TyIcfLgGJniW4.crl (hash: 0Oud5MlkDXqbhSG8J+d6nep25YXK5PapmutnvXGuESQ=)
                          5: jJlQZpZevpI7sI0qTXUB9jMuUv0.roa (hash: sIoAPPkOgjZo6KC8AV3+ukTiCzKXpwR8qem4+cLmkos=)
                          6: q-RWodK7a-3CkL-IcmgLBAtseBw.roa (hash: IdzRoZdWnPk+8n2VcM7Jqg89nCMd+QL98y/Yo8OkRK4=)
                          7: r50bqW5SnPNE9WQYYRLDyXwjtZc.roa (hash: up7vGtBh2DqMmPO7x5Q3VURAhNEUmEQqjy49vJmJas0=)
                          8: zCh_Z-NL-lt9latA7DFFhUPPEEE.roa (hash: H5XNQm6vSeKYsENIaBhTZdYpRcyi8dMupOSZNrKXWpA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iPtBCjv8c0C2Z7TyIcfLgGJniW4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:21:87:17:4b:84:6e:64:4c:10:4d:ec:a7:4a:dc:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88fb410a3bfc7340b667b4f221c7cb806267896e
        Validity
            Not Before: Mar  1 16:00:49 2026 GMT
            Not After : Mar  2 16:00:49 2026 GMT
        Subject: CN=01f667b78256921424c5971850331c20da332fa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:b8:c4:a6:52:70:af:a1:97:8f:9d:b4:15:64:
                    27:09:84:92:8b:fb:f7:16:bd:0e:a2:a4:d1:0b:09:
                    7e:48:1c:a6:4e:cd:54:e4:d0:00:82:2c:7b:97:90:
                    87:c4:3e:f2:69:03:43:ec:74:37:cd:f2:ac:7b:74:
                    7c:ed:30:18:4d:f3:59:70:05:a4:fc:b2:52:07:18:
                    fe:32:95:ce:b5:22:92:a0:68:06:e5:9d:9a:7e:83:
                    45:73:12:c2:a3:3e:39:05:c2:6f:d7:e1:b1:2c:40:
                    44:14:ef:54:df:48:68:d2:9a:60:fa:7b:79:eb:71:
                    61:09:49:92:79:f2:d1:2d:c3:f1:70:7b:7f:93:be:
                    7f:73:fc:e3:99:b7:d7:ed:bc:1f:11:ba:93:91:e6:
                    56:bf:11:c5:2b:32:ba:10:f1:fc:3e:0a:a2:d2:cc:
                    c4:6a:2a:9b:92:e4:f7:2f:a4:c8:bf:15:da:7e:ad:
                    b1:09:84:10:f6:27:eb:63:9f:ac:00:43:c5:0b:c4:
                    05:c7:4a:96:eb:98:65:55:45:5a:9f:68:0b:95:ec:
                    ab:8c:a2:bc:c9:75:9b:48:2c:f5:2d:cb:45:fb:54:
                    97:71:8a:84:55:7b:47:6e:34:ec:b7:55:ed:99:36:
                    73:23:20:97:45:7c:1e:97:5a:cf:22:e3:ab:1d:41:
                    7a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:F6:67:B7:82:56:92:14:24:C5:97:18:50:33:1C:20:DA:33:2F:A8
            X509v3 Authority Key Identifier:
                keyid:88:FB:41:0A:3B:FC:73:40:B6:67:B4:F2:21:C7:CB:80:62:67:89:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPtBCjv8c0C2Z7TyIcfLgGJniW4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:be:26:ad:f6:3b:07:99:a8:47:7a:aa:78:30:cb:f1:67:02:
         de:89:5b:a2:07:8e:c0:60:26:25:9d:89:72:35:3c:5b:d7:67:
         70:82:83:96:26:76:5c:6b:74:1d:a1:47:70:88:15:a7:b0:b2:
         cb:63:11:51:a6:7b:ae:35:67:36:e2:15:f6:8a:db:07:19:b9:
         28:b5:cf:43:a7:1e:e5:3c:b7:5a:5f:ec:63:f6:46:ed:61:c6:
         bd:b5:f8:32:94:e0:15:6f:74:36:43:dc:df:25:41:0f:16:0e:
         dc:49:e5:1a:b3:0c:e8:11:b8:95:1e:a8:5d:30:24:dc:f0:26:
         55:a7:cb:d8:0b:96:47:a0:d5:3f:bb:7d:6f:8a:a3:58:f0:4e:
         fb:e7:88:46:f8:2e:2f:4d:75:78:ab:60:54:7b:7f:1f:15:45:
         af:34:de:09:d0:ba:55:95:fd:fc:3e:ee:18:2b:a5:b4:1c:d6:
         06:08:e6:17:cf:82:a2:d0:42:02:c8:e2:49:fd:f3:67:f4:2f:
         35:25:b5:96:d4:1a:80:e6:50:f1:33:12:a6:0f:e5:e8:c2:3e:
         ce:9c:5a:dd:7a:e1:aa:48:f3:ed:4f:00:f4:33:18:56:3c:37:
         06:e4:0c:4d:c3:aa:b7:51:d9:a7:a6:75:74:68:93:f7:56:e8:
         30:93:24:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:18:37 2026 by rpki-client