Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/mRLZRawqSfO02iIhwnuCmq_MsvI.mft
File:                     mRLZRawqSfO02iIhwnuCmq_MsvI.mft (raw, json)
Hash identifier:          pzLa64EjDa6FhqCqlphmnOxBNqEhiUdRo/O9lykefK0=
Subject key identifier:   50:02:AE:81:FA:47:57:96:D9:B2:A4:4B:61:C5:4E:30:0F:B7:3F:70
Authority key identifier: 99:12:D9:45:AC:2A:49:F3:B4:DA:22:21:C2:7B:82:9A:AF:CC:B2:F2
Certificate issuer:       /CN=9912d945ac2a49f3b4da2221c27b829aafccb2f2
Certificate serial:       01A0D916F30C5B39572BEE9EF477F28C942A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mRLZRawqSfO02iIhwnuCmq_MsvI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/mRLZRawqSfO02iIhwnuCmq_MsvI.mft
Manifest number:          188C
Signing time:             Fri 25 Sep 2026 15:02:34 +0000
Manifest this update:     Fri 25 Sep 2026 15:02:34 +0000
Manifest next update:     Sat 26 Sep 2026 15:02:34 +0000
Files and hashes:         1: K3IkaDvOsxRDnW5ivwAMwt2TUdw.roa (hash: 4pub90rA78k1OuNqh4u/EQwhdsIyW78nZyVBnumMV8E=)
                          2: mRLZRawqSfO02iIhwnuCmq_MsvI.crl (hash: rY00ENPsX4na8WSnDxbFML6MVjVcuBYT8dx3EauHAkw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/mRLZRawqSfO02iIhwnuCmq_MsvI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/mRLZRawqSfO02iIhwnuCmq_MsvI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mRLZRawqSfO02iIhwnuCmq_MsvI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 15:02:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d9:16:f3:0c:5b:39:57:2b:ee:9e:f4:77:f2:8c:94:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9912d945ac2a49f3b4da2221c27b829aafccb2f2
        Validity
            Not Before: Sep 25 15:02:34 2026 GMT
            Not After : Sep 26 15:02:34 2026 GMT
        Subject: CN=5002ae81fa475796d9b2a44b61c54e300fb73f70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9b:ff:37:63:83:96:4e:f2:e8:fd:8f:bb:0c:
                    c4:6b:d2:7a:f6:e5:48:4f:5a:31:54:21:c6:01:0f:
                    6e:83:67:6d:0c:0e:37:87:cc:fb:13:71:f3:b8:cd:
                    c2:bf:99:7c:ec:9f:85:5f:4d:70:36:a6:fe:66:4f:
                    b7:db:3b:0b:73:9f:32:2e:dc:92:56:3a:76:1e:cf:
                    12:33:24:f3:db:44:ed:ad:94:64:0e:27:38:1b:af:
                    6e:4c:30:c1:c2:3d:04:2e:0c:8b:83:e0:90:76:ce:
                    3b:2c:70:b7:85:23:c4:cd:12:32:85:67:59:d5:4a:
                    f3:fa:be:0e:b9:06:b5:98:c8:f6:68:63:9a:75:3d:
                    c0:ba:48:d8:6f:df:19:5e:c0:95:06:78:44:bb:b1:
                    ed:d8:c7:8c:d3:99:1d:5a:96:34:5c:2a:9b:0b:93:
                    09:42:fd:8f:56:2d:31:1a:1b:d0:c6:e0:27:dc:6a:
                    c4:69:5c:41:2b:51:f3:36:a5:7c:4e:46:ba:a9:24:
                    9d:1b:e2:2d:24:cb:85:91:67:03:aa:18:65:ae:81:
                    c1:c6:bc:3b:42:c5:9e:aa:9c:b3:66:1b:e6:3c:fe:
                    5f:e9:ad:cc:e4:ee:5f:fe:a8:92:04:03:42:79:be:
                    2a:cc:b2:66:b3:05:3e:4a:eb:fe:f5:be:08:34:e5:
                    63:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:02:AE:81:FA:47:57:96:D9:B2:A4:4B:61:C5:4E:30:0F:B7:3F:70
            X509v3 Authority Key Identifier:
                keyid:99:12:D9:45:AC:2A:49:F3:B4:DA:22:21:C2:7B:82:9A:AF:CC:B2:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRLZRawqSfO02iIhwnuCmq_MsvI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/mRLZRawqSfO02iIhwnuCmq_MsvI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/mRLZRawqSfO02iIhwnuCmq_MsvI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:ff:88:07:a7:f4:e4:5c:1b:ea:e8:53:46:cb:5c:cd:60:18:
         f0:c5:f3:d7:00:94:48:f5:69:6a:1d:96:d2:ce:0e:30:b3:af:
         40:31:30:d6:01:a9:2b:b9:74:19:ba:c2:00:cf:dd:1c:9e:c1:
         5c:37:8d:1d:d0:cf:99:41:f7:ec:4b:11:8e:c1:56:2b:07:96:
         2d:2a:a6:07:76:9c:0f:e6:82:f6:10:03:6b:3c:40:45:b8:86:
         d8:de:91:95:78:b5:2d:3a:48:4f:01:22:ca:30:7b:f0:6e:18:
         31:c7:66:0d:44:d0:f4:b0:54:c6:ff:01:0c:a3:5e:39:52:93:
         0a:99:24:e0:e4:75:bc:ea:f0:3e:e0:d5:c4:30:db:77:f3:21:
         df:62:09:0c:4c:53:08:f6:f9:40:ae:22:70:f8:a0:21:58:b3:
         41:70:68:d7:49:92:a7:9e:13:ad:65:c9:37:47:d8:d9:0e:59:
         a0:20:1a:5e:11:c2:37:2e:6f:09:ec:23:ee:84:6a:64:1d:2f:
         c5:9d:b4:1f:eb:34:88:43:7b:0b:ce:68:98:94:0f:64:84:c7:
         ed:19:5d:ce:96:a0:9e:8d:88:84:e7:ac:50:27:e0:5b:f4:c6:
         ef:c7:7e:5a:fc:68:f8:39:e4:9d:bb:70:c4:f5:3d:32:6e:f2:
         f3:ff:16:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 01:45:34 2026 by rpki-client