Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/fa110d-e6e5-4bf9-84fe-bf26a7faa603/1/mRXw1qlhquvGsLUInaApObMQpRw.mft
File:                     mRXw1qlhquvGsLUInaApObMQpRw.mft (raw, json)
Hash identifier:          Ofp2GVIEsPFFF2h5TEfRnhkXrCvs6YEXV4upO+BCt7c=
Subject key identifier:   4B:10:0B:08:C4:B3:F6:88:66:77:31:52:20:41:37:E2:1E:B1:24:C1
Authority key identifier: 99:15:F0:D6:A9:61:AA:EB:C6:B0:B5:08:9D:A0:29:39:B3:10:A5:1C
Certificate issuer:       /CN=9915f0d6a961aaebc6b0b5089da02939b310a51c
Certificate serial:       019D28167265209372BB028621763475D8EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mRXw1qlhquvGsLUInaApObMQpRw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/fa110d-e6e5-4bf9-84fe-bf26a7faa603/1/mRXw1qlhquvGsLUInaApObMQpRw.mft
Manifest number:          1819
Signing time:             Thu 26 Mar 2026 03:00:52 +0000
Manifest this update:     Thu 26 Mar 2026 03:00:52 +0000
Manifest next update:     Fri 27 Mar 2026 03:00:52 +0000
Files and hashes:         1: JOBZiyk3WSexjylGrFqWtpIvVNI.roa (hash: pYC05xXD+D4uXeUnMdxT9uc+YVOaCRlDkwK83r1kNWw=)
                          2: mRXw1qlhquvGsLUInaApObMQpRw.crl (hash: uiI+A9cv9AxHsuYxCBWqgAdYbE3UGrC7XSfiq87jDIs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/fa110d-e6e5-4bf9-84fe-bf26a7faa603/1/mRXw1qlhquvGsLUInaApObMQpRw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/fa110d-e6e5-4bf9-84fe-bf26a7faa603/1/mRXw1qlhquvGsLUInaApObMQpRw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mRXw1qlhquvGsLUInaApObMQpRw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:16:72:65:20:93:72:bb:02:86:21:76:34:75:d8:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9915f0d6a961aaebc6b0b5089da02939b310a51c
        Validity
            Not Before: Mar 26 03:00:52 2026 GMT
            Not After : Mar 27 03:00:52 2026 GMT
        Subject: CN=4b100b08c4b3f68866773152204137e21eb124c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:18:69:12:ca:8f:44:7f:7c:e8:9e:24:f2:f2:
                    33:fe:1b:2a:65:82:66:ed:dc:6b:95:52:f1:57:f3:
                    17:0a:d9:8d:fa:9b:28:a2:26:ac:fc:29:33:11:d9:
                    10:1d:cd:58:56:f2:1e:a1:c5:d2:a2:fc:57:b6:66:
                    6e:68:fa:9e:27:f1:d8:69:b6:a8:f2:da:1e:58:80:
                    33:5a:53:a8:17:87:fb:fd:56:24:34:83:79:b0:79:
                    64:c2:f5:fa:c3:cc:5e:7f:1d:fb:9a:13:aa:7e:1f:
                    67:56:db:a0:07:4e:f0:bd:c4:25:dc:cd:2a:d3:7b:
                    a3:3e:64:5e:78:f6:94:09:dd:0e:1b:4c:ed:69:1d:
                    7d:d3:56:c5:14:46:c1:cf:44:a7:dc:6c:31:79:99:
                    9e:d4:0d:86:45:ba:55:a7:49:b0:8e:a7:19:36:4e:
                    ad:ad:63:3b:4f:67:96:53:ec:2b:e1:dc:36:5f:83:
                    e9:7d:d6:1e:1a:57:34:6e:ac:bf:83:e7:62:9d:29:
                    51:af:df:28:17:1c:a6:60:02:f7:58:2d:f2:96:1b:
                    61:62:3f:a1:2e:d4:9c:02:66:cc:68:c8:77:8e:57:
                    eb:9a:de:96:e4:c1:34:d6:15:4f:8c:63:26:83:08:
                    c9:bc:ee:ef:ae:2e:70:83:62:68:3d:30:db:9e:e4:
                    84:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:10:0B:08:C4:B3:F6:88:66:77:31:52:20:41:37:E2:1E:B1:24:C1
            X509v3 Authority Key Identifier:
                keyid:99:15:F0:D6:A9:61:AA:EB:C6:B0:B5:08:9D:A0:29:39:B3:10:A5:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRXw1qlhquvGsLUInaApObMQpRw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fa110d-e6e5-4bf9-84fe-bf26a7faa603/1/mRXw1qlhquvGsLUInaApObMQpRw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fa110d-e6e5-4bf9-84fe-bf26a7faa603/1/mRXw1qlhquvGsLUInaApObMQpRw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:82:77:de:e8:cc:c2:85:1a:6c:55:63:92:54:69:ec:43:92:
         ab:15:f9:ec:4b:61:9c:7e:66:0b:28:a0:24:1d:51:d1:8a:9c:
         5e:40:25:9c:f2:26:90:11:8d:eb:36:75:34:91:c5:b6:03:71:
         56:85:51:72:87:45:47:a2:41:80:15:b5:8a:a7:0d:04:b9:ac:
         a3:c0:7c:78:74:cc:52:c4:7f:b5:19:20:c8:d9:94:94:33:c0:
         60:d9:7e:e5:f0:aa:ca:89:6b:bd:27:93:27:65:cd:ea:61:a4:
         a0:76:2c:36:5e:70:b1:3a:6a:9c:72:10:7a:9a:dd:a5:87:1e:
         e9:b2:66:be:5d:22:2e:1b:1f:81:c3:ca:2e:c4:15:02:be:42:
         66:a3:a2:21:94:d1:a0:cf:3e:7c:bf:ac:ec:c1:7f:a4:60:c8:
         d5:31:aa:ad:a8:1a:70:55:26:d5:c5:7e:db:4a:74:1e:6f:3b:
         9e:3a:0b:b4:d5:c5:44:53:7f:56:43:11:a1:79:90:3f:a9:65:
         df:7f:58:ec:98:e1:f2:a1:38:47:2e:2e:24:a6:4c:b6:dc:8f:
         65:e2:38:81:46:68:42:62:45:74:8e:9a:73:18:19:f4:fa:51:
         66:87:2e:1b:95:d2:9e:bd:8a:4b:97:26:c6:8c:53:b3:85:c5:
         b7:53:27:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:32:24 2026 by rpki-client