Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/812a15-c6e4-416a-b09d-84bf31de8413/1/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.mft
File:                     MKnJV9IJHSTg3-X2bJe-SqH5MIQ.mft (raw, json)
Hash identifier:          6eZUrw7CRSkNfm5V2b01LRnq9w5UPXH/B34wvxV8RXY=
Subject key identifier:   39:D9:41:26:4B:27:14:04:93:34:CB:D4:61:A7:F5:9E:F7:C5:6D:B1
Authority key identifier: 30:A9:C9:57:D2:09:1D:24:E0:DF:E5:F6:6C:97:BE:4A:A1:F9:30:84
Certificate issuer:       /CN=30a9c957d2091d24e0dfe5f66c97be4aa1f93084
Certificate serial:       019D265F9F28E902F76318947C6BC89BE24A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/812a15-c6e4-416a-b09d-84bf31de8413/1/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.mft
Manifest number:          1883
Signing time:             Wed 25 Mar 2026 19:01:33 +0000
Manifest this update:     Wed 25 Mar 2026 19:01:33 +0000
Manifest next update:     Thu 26 Mar 2026 19:01:33 +0000
Files and hashes:         1: MKnJV9IJHSTg3-X2bJe-SqH5MIQ.crl (hash: d8SWBY1Gsl1dgizcn+TiGae+XaJHG87VjnKoBbrVsZs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/812a15-c6e4-416a-b09d-84bf31de8413/1/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/812a15-c6e4-416a-b09d-84bf31de8413/1/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 19:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:9f:28:e9:02:f7:63:18:94:7c:6b:c8:9b:e2:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30a9c957d2091d24e0dfe5f66c97be4aa1f93084
        Validity
            Not Before: Mar 25 19:01:33 2026 GMT
            Not After : Mar 26 19:01:33 2026 GMT
        Subject: CN=39d941264b2714049334cbd461a7f59ef7c56db1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a6:f1:a8:2f:d8:47:a1:46:6d:52:64:0a:5e:
                    51:10:ff:ff:a0:a5:cb:8c:22:d7:c5:29:e0:df:0a:
                    49:0a:09:cc:02:04:d1:5f:51:a8:e5:2b:4d:c1:59:
                    b0:16:00:fb:a8:08:8e:03:82:4c:3c:ce:bc:fb:e1:
                    db:ac:97:63:b5:be:29:06:78:75:61:b6:ca:bf:c7:
                    8f:5c:3e:47:fd:cc:05:dd:22:fb:6a:d4:da:23:59:
                    f9:2d:42:e4:41:c5:af:96:11:83:d5:87:5b:6e:af:
                    c2:f4:fe:7e:5b:68:a7:65:50:32:bf:52:e5:20:38:
                    52:c2:d5:bf:b2:8f:0c:c4:35:23:41:c5:35:d7:5c:
                    60:27:67:11:75:cd:da:fa:14:f6:6f:39:45:12:10:
                    d0:7b:cc:c2:7a:88:44:53:88:64:b3:5a:59:c0:c3:
                    9e:bf:44:56:3c:1d:a3:5d:0c:29:65:db:b1:3d:ef:
                    eb:61:05:aa:07:7d:68:5f:44:61:a1:1f:78:d3:7a:
                    bf:7f:6e:0b:f2:97:26:cd:1b:11:59:82:e4:dd:a6:
                    47:7a:bb:10:c4:ec:09:a1:a7:62:e4:93:38:34:7b:
                    f0:bb:17:6b:52:20:9f:91:74:05:bb:cf:d9:b0:7f:
                    bc:9b:5a:a0:5f:71:c7:aa:d2:01:a0:29:63:d0:c6:
                    82:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:D9:41:26:4B:27:14:04:93:34:CB:D4:61:A7:F5:9E:F7:C5:6D:B1
            X509v3 Authority Key Identifier:
                keyid:30:A9:C9:57:D2:09:1D:24:E0:DF:E5:F6:6C:97:BE:4A:A1:F9:30:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/812a15-c6e4-416a-b09d-84bf31de8413/1/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/812a15-c6e4-416a-b09d-84bf31de8413/1/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:1a:4a:aa:7f:fa:cc:1c:97:20:45:b7:4c:3a:38:72:2f:62:
         f6:3d:c9:7c:f6:6e:7e:9e:72:46:a5:c4:85:e5:10:94:c0:21:
         d0:42:cf:d6:d2:d9:e0:ce:c7:03:44:b2:78:5f:64:96:b1:95:
         1b:74:8a:88:8a:1b:ee:53:e4:a9:97:dd:4e:df:13:d9:6b:c8:
         42:c4:80:c2:65:3e:56:69:e6:bf:9a:94:cb:d2:ac:94:8e:35:
         d2:11:63:c2:05:2e:db:af:1e:5e:c4:17:b1:59:a6:ca:db:3c:
         21:da:2e:1b:19:55:3c:60:13:3c:42:48:22:1d:20:b8:81:93:
         20:06:86:05:96:27:92:88:17:18:a1:c4:3e:b4:47:90:fe:b1:
         e7:bf:63:60:3f:96:df:de:0a:64:1e:49:d8:50:70:1e:94:93:
         d3:05:14:39:d8:5e:37:ae:c3:9e:16:1a:4a:66:ae:b2:6f:9e:
         aa:83:ca:57:c5:3e:cb:e0:96:77:cb:b5:68:84:f0:83:2d:91:
         66:c6:70:05:ca:a5:46:03:d3:98:9a:4b:a6:f7:b9:89:24:a8:
         3b:b8:71:3b:1f:cd:59:32:89:8c:87:05:d9:e2:9c:3b:5a:00:
         c4:0a:31:26:a9:9c:2c:36:97:8f:ef:b4:60:c7:2f:10:2e:09:
         ef:cf:3f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:04:58 2026 by rpki-client