Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f7ca4a-ca73-47f8-9fd7-9b2f51b80a98/1/MNXiAi6oLsd_kt3bd2YYzWwFdXU.mft
File:                     MNXiAi6oLsd_kt3bd2YYzWwFdXU.mft (raw, json)
Hash identifier:          LuHRrvAzBAnHWXWoUyn15AxYhuMs/Rwo3jyXqWdIFMo=
Subject key identifier:   9E:AB:6F:39:C9:A1:AB:39:14:11:DD:CB:A7:AE:AF:BD:A6:D2:1D:E7
Authority key identifier: 30:D5:E2:02:2E:A8:2E:C7:7F:92:DD:DB:77:66:18:CD:6C:05:75:75
Certificate issuer:       /CN=30d5e2022ea82ec77f92dddb776618cd6c057575
Certificate serial:       019D27A8D38B73AF1A8DEC5D94C8A5F4852F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MNXiAi6oLsd_kt3bd2YYzWwFdXU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/f7ca4a-ca73-47f8-9fd7-9b2f51b80a98/1/MNXiAi6oLsd_kt3bd2YYzWwFdXU.mft
Manifest number:          05B2
Signing time:             Thu 26 Mar 2026 01:01:08 +0000
Manifest this update:     Thu 26 Mar 2026 01:01:08 +0000
Manifest next update:     Fri 27 Mar 2026 01:01:08 +0000
Files and hashes:         1: MNXiAi6oLsd_kt3bd2YYzWwFdXU.crl (hash: gRZDia/QAIKIkW33y5UwQsDFM1ZToi7r4aShjJM3HtI=)
                          2: kiYvW45_WESo09z9DDPWp3aMKvk.roa (hash: o2aI0HzhoCPi6LjvBwdhvtbnQjp7uz8yNBS4PhNW0AE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/f7ca4a-ca73-47f8-9fd7-9b2f51b80a98/1/MNXiAi6oLsd_kt3bd2YYzWwFdXU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/f7ca4a-ca73-47f8-9fd7-9b2f51b80a98/1/MNXiAi6oLsd_kt3bd2YYzWwFdXU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MNXiAi6oLsd_kt3bd2YYzWwFdXU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:a8:d3:8b:73:af:1a:8d:ec:5d:94:c8:a5:f4:85:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30d5e2022ea82ec77f92dddb776618cd6c057575
        Validity
            Not Before: Mar 26 01:01:08 2026 GMT
            Not After : Mar 27 01:01:08 2026 GMT
        Subject: CN=9eab6f39c9a1ab391411ddcba7aeafbda6d21de7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:cd:27:9c:31:42:18:39:a7:c2:18:86:83:c5:
                    98:ec:ef:4f:39:ef:cd:9e:dd:7c:c7:9d:e5:30:8f:
                    18:ac:26:73:e2:9e:ec:59:04:f9:71:01:e3:03:bf:
                    f3:59:9d:83:30:f9:ce:d4:d7:12:ea:ff:7d:ea:93:
                    c6:9d:b8:15:80:a8:47:79:b5:2d:fe:d6:d5:e1:30:
                    81:8e:95:ed:a3:9c:e0:74:e2:33:22:c2:a8:b5:2f:
                    08:87:93:3b:eb:98:28:31:e3:fb:a7:4b:52:d3:6f:
                    83:6d:c5:fe:bb:98:c6:6d:9c:74:3d:a1:58:0a:1b:
                    7d:7f:20:6b:85:d1:27:70:a5:8f:cb:13:91:8d:08:
                    ec:24:d8:0a:bb:5d:27:da:a4:a4:87:41:22:23:d3:
                    43:09:c0:86:1f:b0:c7:f2:13:10:44:50:c7:0c:e5:
                    2f:36:65:40:db:f8:31:00:f4:eb:69:c6:96:40:ec:
                    62:28:6c:68:55:ec:54:4a:45:e9:55:c3:61:76:9c:
                    df:6e:f2:f2:b6:7f:80:8a:31:fb:b7:2e:0d:77:42:
                    35:76:f5:6c:7d:7f:00:c4:20:ee:71:30:82:90:64:
                    e4:ef:1e:a0:65:ce:2a:2b:c0:b7:42:3a:77:c8:54:
                    b1:0d:40:46:06:38:cf:2c:32:da:63:b6:a4:bf:56:
                    98:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:AB:6F:39:C9:A1:AB:39:14:11:DD:CB:A7:AE:AF:BD:A6:D2:1D:E7
            X509v3 Authority Key Identifier:
                keyid:30:D5:E2:02:2E:A8:2E:C7:7F:92:DD:DB:77:66:18:CD:6C:05:75:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MNXiAi6oLsd_kt3bd2YYzWwFdXU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f7ca4a-ca73-47f8-9fd7-9b2f51b80a98/1/MNXiAi6oLsd_kt3bd2YYzWwFdXU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f7ca4a-ca73-47f8-9fd7-9b2f51b80a98/1/MNXiAi6oLsd_kt3bd2YYzWwFdXU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:dd:f6:3e:1e:a9:46:14:34:01:76:50:f1:67:06:1d:15:a1:
         60:67:10:cb:eb:7f:91:c3:2d:9b:fa:ec:70:45:c9:e8:76:8a:
         73:cb:2b:5d:c9:3f:3f:37:9c:5b:69:36:a5:0f:73:62:69:9d:
         2a:cb:3e:4d:8a:0e:0f:ee:29:86:a7:c7:de:2c:e9:cc:c1:a0:
         a2:a1:c9:31:ed:18:af:1a:ce:5c:c1:6b:52:8e:d7:9a:31:64:
         b9:b6:48:86:40:09:fe:3e:c7:50:1a:6e:81:0a:d3:21:e9:db:
         b8:96:05:6e:0b:b4:0a:73:f8:18:7e:aa:c8:f8:2c:25:33:2a:
         98:51:c1:23:cb:6a:f7:96:74:68:51:70:47:22:69:ca:58:38:
         f5:bb:da:ce:a8:97:bc:5d:a2:3a:b8:bb:5c:2f:7e:de:e8:4d:
         88:30:88:a0:81:f7:cb:6f:52:64:71:af:a1:4d:1b:a2:03:4b:
         f9:70:0a:2c:43:de:f9:51:cc:2e:b5:8c:a9:69:26:f0:25:26:
         9c:dd:38:2b:54:c5:40:94:4a:06:94:88:20:8e:a4:2f:d8:4d:
         41:8e:e8:e2:80:cb:3d:57:8b:c6:c7:13:75:a7:30:57:2d:cc:
         92:86:c7:c0:bd:11:a6:45:a0:92:4d:c8:88:30:99:f5:8c:0c:
         0b:39:59:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:55:26 2026 by rpki-client