Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/247005-559d-4eb4-b3e8-bd24f003578f/1/MeubLbSjvd-MkvxQuXEwQ91W3Dg.mft
File:                     MeubLbSjvd-MkvxQuXEwQ91W3Dg.mft (raw, json)
Hash identifier:          OpDeN9SIt9rt+cm9JAU5k2cz1l3Ykjyc27xWff5p9p0=
Subject key identifier:   34:88:BF:80:E8:FB:3E:97:8F:71:72:C3:5C:0E:17:13:69:63:7E:FA
Authority key identifier: 31:EB:9B:2D:B4:A3:BD:DF:8C:92:FC:50:B9:71:30:43:DD:56:DC:38
Certificate issuer:       /CN=31eb9b2db4a3bddf8c92fc50b9713043dd56dc38
Certificate serial:       019D273AFD29B5D70F75FD7F3841A79B8A29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MeubLbSjvd-MkvxQuXEwQ91W3Dg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/247005-559d-4eb4-b3e8-bd24f003578f/1/MeubLbSjvd-MkvxQuXEwQ91W3Dg.mft
Manifest number:          1892
Signing time:             Wed 25 Mar 2026 23:01:10 +0000
Manifest this update:     Wed 25 Mar 2026 23:01:10 +0000
Manifest next update:     Thu 26 Mar 2026 23:01:10 +0000
Files and hashes:         1: Hj_mmo61QsrEMQiPHQYBMuYjE6w.roa (hash: Reda9sErRoqbpcnicQ2yubSQNsSrqp+w7a1z0FKPwrg=)
                          2: MeubLbSjvd-MkvxQuXEwQ91W3Dg.crl (hash: o1piCOpN/vE0DnL6UXvKKHaOgSpTlSUX0vEvDPi03TE=)
                          3: PeGCfBu4U_0leg0PT3cvtLOw8cU.roa (hash: PnzYVi0/ykMAruKMxz9QIBD+EVR2KjgqqO1u0FSfGOg=)
                          4: i9fWfsMwXgnYDiaMjktQ-IknIyw.roa (hash: M+2mYEKMJN/SYEZm8zNzj6//9PpUwRXWmI5lDNpnbSY=)
                          5: k0xBB9M4rejoK-xa296UslTUOvY.roa (hash: 75o+NV6p86/LQQ/MopmL1MWxvjfE9hcGYjNSLsPOYiw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/247005-559d-4eb4-b3e8-bd24f003578f/1/MeubLbSjvd-MkvxQuXEwQ91W3Dg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/247005-559d-4eb4-b3e8-bd24f003578f/1/MeubLbSjvd-MkvxQuXEwQ91W3Dg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MeubLbSjvd-MkvxQuXEwQ91W3Dg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 23:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:3a:fd:29:b5:d7:0f:75:fd:7f:38:41:a7:9b:8a:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31eb9b2db4a3bddf8c92fc50b9713043dd56dc38
        Validity
            Not Before: Mar 25 23:01:10 2026 GMT
            Not After : Mar 26 23:01:10 2026 GMT
        Subject: CN=3488bf80e8fb3e978f7172c35c0e171369637efa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:27:a6:ad:67:be:ab:c0:78:ba:fd:94:17:16:
                    bf:2c:21:fb:8e:f3:fc:27:cb:9e:7a:e8:12:c2:2d:
                    fc:6f:ee:a8:e5:78:3e:7c:bb:08:be:20:2e:30:14:
                    26:6f:f3:cd:08:9a:ff:92:4d:21:0b:68:a5:a3:e4:
                    53:30:5e:4f:df:97:d3:6f:3c:45:43:b6:41:36:6d:
                    9f:81:0f:d2:0b:89:4a:4f:b9:b8:b8:ed:c4:58:9f:
                    ad:81:c9:5e:f2:c9:7e:33:50:4b:1c:b9:33:60:ab:
                    ac:f1:65:2d:92:64:f8:34:90:38:28:53:32:ad:83:
                    89:3e:6d:1a:a1:50:4f:b4:3d:7c:5c:77:5c:3a:ae:
                    9a:9b:fc:cc:cd:35:c5:53:6d:b1:22:f0:e5:51:91:
                    99:27:04:37:d6:c3:7a:35:ce:76:ab:7b:ba:a3:75:
                    6e:cc:ed:34:ac:fa:50:d7:0a:fd:06:05:5e:5a:9c:
                    4b:ba:d7:43:7d:45:bd:bf:00:36:61:f4:9e:0f:f0:
                    f1:a4:95:c8:dc:d2:4f:30:e9:5c:a0:d3:49:3b:57:
                    ed:b7:cc:ad:cb:c8:c2:a6:e9:41:46:1a:73:40:88:
                    88:b3:e0:77:37:0c:9e:64:ae:36:f2:ef:bc:f3:e1:
                    f6:8f:6c:84:09:b1:76:71:8d:e0:86:ba:99:09:9f:
                    90:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:88:BF:80:E8:FB:3E:97:8F:71:72:C3:5C:0E:17:13:69:63:7E:FA
            X509v3 Authority Key Identifier:
                keyid:31:EB:9B:2D:B4:A3:BD:DF:8C:92:FC:50:B9:71:30:43:DD:56:DC:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MeubLbSjvd-MkvxQuXEwQ91W3Dg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/247005-559d-4eb4-b3e8-bd24f003578f/1/MeubLbSjvd-MkvxQuXEwQ91W3Dg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/247005-559d-4eb4-b3e8-bd24f003578f/1/MeubLbSjvd-MkvxQuXEwQ91W3Dg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:16:0a:fe:4c:cc:4b:7d:56:02:d9:49:d4:b9:a0:53:87:87:
         09:51:90:9a:58:64:cf:16:41:5e:be:70:05:c5:5c:01:9d:40:
         3c:e0:a3:0c:b4:1d:ad:e4:b3:e4:7e:dc:d5:04:35:74:3b:fe:
         0f:ef:f9:51:6c:8f:01:37:02:36:53:47:a5:5f:f1:bb:d2:55:
         e2:ef:3c:41:4c:7b:7e:75:fd:8b:d1:69:21:fd:df:b0:ed:fd:
         bc:59:51:be:79:33:ce:ef:0f:49:df:44:0c:11:81:6a:49:79:
         46:b6:2a:de:a9:31:85:bb:93:64:42:a1:c8:76:e1:bd:4f:85:
         a9:bc:2e:4c:67:2b:c0:d7:c2:7e:fc:e5:82:86:32:7f:d0:9c:
         97:15:ff:f5:06:3b:e7:6c:7b:b0:5d:ea:78:b0:cc:1c:dc:cf:
         b5:a5:34:20:9e:7c:52:13:94:9e:3f:38:e9:61:9c:c4:f7:2c:
         10:e2:0c:64:de:3c:de:0a:a1:6a:e8:35:e7:18:00:25:a8:76:
         83:29:62:0d:3c:be:1f:c1:45:36:ca:e6:3f:68:85:8a:10:ba:
         e6:c4:b4:64:77:59:8a:e9:70:df:f2:08:17:dd:9a:ae:bc:ad:
         7e:86:b5:c5:8d:e5:82:b2:f4:5e:14:63:bc:f8:06:0a:45:6b:
         cf:86:7d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:59:27 2026 by rpki-client