Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/855ad6-a84f-4f01-bfc8-d3fd91ac7c9f/1/MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.mft
File:                     MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.mft (raw, json)
Hash identifier:          vZxoJ1zfGmDPYcJlDjnAsPHlRNHI+Z9tWM4fA9G643U=
Subject key identifier:   31:E0:E7:BA:7B:3C:9F:2A:AF:F6:D2:A2:61:6E:D3:D8:F4:96:DE:3E
Authority key identifier: 31:25:2C:E3:07:78:1D:03:19:FC:D7:49:4F:A6:4F:26:04:50:16:AC
Certificate issuer:       /CN=31252ce307781d0319fcd7494fa64f26045016ac
Certificate serial:       019D273ACE48000BFAF44F2842FF3934C74B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/855ad6-a84f-4f01-bfc8-d3fd91ac7c9f/1/MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.mft
Manifest number:          013D
Signing time:             Wed 25 Mar 2026 23:00:58 +0000
Manifest this update:     Wed 25 Mar 2026 23:00:58 +0000
Manifest next update:     Thu 26 Mar 2026 23:00:58 +0000
Files and hashes:         1: MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.crl (hash: SLnVG8VvxWHlCUKdi5HeyvkLJxiZkrCee0cFAFWotFQ=)
                          2: zXQ0dRei-4J6oVgi64knRZVxg6Y.roa (hash: CX/+K7nEQxigjVZ94Wfur8I6pijlI/U6gidD/7gn1ME=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/855ad6-a84f-4f01-bfc8-d3fd91ac7c9f/1/MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/855ad6-a84f-4f01-bfc8-d3fd91ac7c9f/1/MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:3a:ce:48:00:0b:fa:f4:4f:28:42:ff:39:34:c7:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31252ce307781d0319fcd7494fa64f26045016ac
        Validity
            Not Before: Mar 25 23:00:58 2026 GMT
            Not After : Mar 26 23:00:58 2026 GMT
        Subject: CN=31e0e7ba7b3c9f2aaff6d2a2616ed3d8f496de3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:df:8c:cd:05:77:d4:5d:17:1f:7c:03:e9:38:
                    0b:df:6a:1e:ce:99:5d:52:d1:f2:e0:75:5e:55:d6:
                    d9:d5:2f:9f:30:f5:92:7c:0f:84:b5:15:13:a6:48:
                    e6:8c:d6:46:1c:48:ba:92:85:6b:91:bc:35:25:2f:
                    cd:39:4b:43:f0:76:34:18:26:55:71:89:3c:f0:66:
                    96:47:6b:ca:a4:66:e7:aa:a7:68:05:70:87:d8:be:
                    de:10:1e:26:f2:81:ea:7f:88:9f:c7:1e:55:59:5f:
                    7e:b6:55:e6:38:f4:0b:c6:0b:e5:67:1e:44:f6:d8:
                    ce:b4:56:82:ad:03:d0:13:cf:13:fc:eb:99:16:7e:
                    92:0a:2c:fe:a7:72:49:ce:bb:c5:a2:61:29:35:fe:
                    3a:40:14:60:c4:03:55:8b:16:72:b9:55:e7:fa:a3:
                    5f:c0:ac:54:86:62:83:c9:57:de:98:8f:39:30:01:
                    4e:ad:54:12:fd:71:ea:a9:8f:3a:ca:35:dd:8e:e2:
                    6a:6e:03:8c:fe:01:10:e8:47:38:38:d1:90:c4:5f:
                    53:8d:aa:c9:1b:46:01:3c:03:a6:f9:17:e8:59:f9:
                    e4:48:c6:fa:61:31:59:fc:bb:9e:5e:c0:ca:c9:fb:
                    e6:a8:3b:76:b0:30:61:c3:c5:3d:41:7c:b9:64:81:
                    8b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:E0:E7:BA:7B:3C:9F:2A:AF:F6:D2:A2:61:6E:D3:D8:F4:96:DE:3E
            X509v3 Authority Key Identifier:
                keyid:31:25:2C:E3:07:78:1D:03:19:FC:D7:49:4F:A6:4F:26:04:50:16:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/855ad6-a84f-4f01-bfc8-d3fd91ac7c9f/1/MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/855ad6-a84f-4f01-bfc8-d3fd91ac7c9f/1/MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:bb:ff:de:35:4b:1d:d4:46:c0:3e:8d:f2:e6:0d:5e:cb:c9:
         52:af:9e:7e:4f:96:fb:a0:cc:9e:3d:cf:cf:e6:16:27:ba:7d:
         5a:fc:9c:d5:61:55:c5:ec:c2:b8:a9:69:35:8d:5b:ac:ac:da:
         32:26:d1:2e:7d:cc:72:ed:ef:c2:8e:c5:a5:52:e6:b5:bd:2a:
         2d:5b:39:b4:d4:5d:1c:50:89:dd:ac:53:4e:e7:33:7c:bf:19:
         2f:0b:54:f4:27:10:ef:01:29:67:7b:6d:cf:2d:9a:b1:93:9c:
         af:fe:a5:7e:6d:21:b7:14:55:ec:e7:30:45:99:2c:d1:68:e4:
         d1:dc:4b:0e:26:cc:da:e2:42:52:d8:31:02:77:07:ad:c7:d4:
         d3:bd:2b:b3:27:c3:54:a3:fc:f5:88:49:4d:b6:4d:e9:e4:f2:
         b3:11:45:a4:c5:d3:aa:56:9d:c3:53:f0:44:b2:e0:1d:87:11:
         7c:d4:ed:fe:e3:39:4b:03:0e:50:75:ca:60:35:b4:db:47:03:
         b7:33:6f:20:fa:01:f3:c3:6a:ad:6a:b4:2b:cd:43:86:26:27:
         82:3f:a1:8a:85:06:69:97:3d:f5:84:3a:fd:ee:51:8b:ed:e1:
         4e:49:76:d0:db:c8:fb:8d:05:b1:75:f3:58:d4:00:97:69:8b:
         6b:89:d4:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:07 2026 by rpki-client