Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/MdTuSv_1XmdETUfUm1Eqg2i_nvY.mft
File:                     MdTuSv_1XmdETUfUm1Eqg2i_nvY.mft (raw, json)
Hash identifier:          1zc+hlRyAAwN62A0hTK/vXOmuylRBs2s5CGGLsfEPkQ=
Subject key identifier:   59:C4:E4:1F:BB:D8:DD:33:3C:F8:69:22:17:84:85:D3:CE:3D:57:51
Authority key identifier: 31:D4:EE:4A:FF:F5:5E:67:44:4D:47:D4:9B:51:2A:83:68:BF:9E:F6
Certificate issuer:       /CN=31d4ee4afff55e67444d47d49b512a8368bf9ef6
Certificate serial:       019D29CE4E21C0774FA7C03C540A0E84468B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MdTuSv_1XmdETUfUm1Eqg2i_nvY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/MdTuSv_1XmdETUfUm1Eqg2i_nvY.mft
Manifest number:          136D
Signing time:             Thu 26 Mar 2026 11:01:19 +0000
Manifest this update:     Thu 26 Mar 2026 11:01:19 +0000
Manifest next update:     Fri 27 Mar 2026 11:01:19 +0000
Files and hashes:         1: 6JYQqrzS3UTPcgvWPbO4TgCoS3k.roa (hash: iOMk6cfEftH8+M5zAq6J+7nYiKbK2CplnfrSukCWdkM=)
                          2: KiViUlRdp1iVIBpAgxyCpxxK3gQ.roa (hash: Yk/aBj6tG6In28XxnbyhWgRKpfIGrGy/o9iiuy0VDDg=)
                          3: MdTuSv_1XmdETUfUm1Eqg2i_nvY.crl (hash: WqUwb+jlsucTDJnnQejCJ1Uj+csfwT7NS8p7Xau1lco=)
                          4: aZwxLLe27uK7ns0bAgvQ0s7Mqt4.roa (hash: IJFNHlYozh1R/6V0WKyYnkoCMR+po4mStHpa7SQZbq4=)
                          5: qM92mL8g634Yh9KwZjRzI5vZ9l8.roa (hash: f+n6LoAwAduArbfX5BlVpkBMLZF56N90CkVkSMu7mrU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/MdTuSv_1XmdETUfUm1Eqg2i_nvY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/MdTuSv_1XmdETUfUm1Eqg2i_nvY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MdTuSv_1XmdETUfUm1Eqg2i_nvY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:ce:4e:21:c0:77:4f:a7:c0:3c:54:0a:0e:84:46:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31d4ee4afff55e67444d47d49b512a8368bf9ef6
        Validity
            Not Before: Mar 26 11:01:19 2026 GMT
            Not After : Mar 27 11:01:19 2026 GMT
        Subject: CN=59c4e41fbbd8dd333cf86922178485d3ce3d5751
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a1:60:bd:d8:55:e9:24:84:bf:16:aa:a4:d6:
                    59:b8:17:5b:96:7f:9f:a4:a9:f7:ff:f0:51:1e:18:
                    e2:7c:12:0a:43:86:30:82:05:3f:d6:ba:8a:f1:e3:
                    cf:3d:b0:3c:4d:1e:39:20:46:78:53:9c:88:be:e4:
                    f5:d4:40:12:58:77:1f:15:ce:b1:cc:d7:b0:83:50:
                    22:c8:fb:a2:71:db:c6:37:26:f5:59:3c:9a:70:e1:
                    2d:25:3a:ae:8b:06:3e:1d:d1:92:a1:4c:5f:57:37:
                    b2:6c:5d:8d:3f:5a:59:b1:8c:14:4c:a7:24:08:3b:
                    c0:05:fe:d9:b3:20:ce:38:2e:19:39:ed:62:54:96:
                    36:e8:55:e4:ac:63:f2:b3:ca:6a:e4:41:c1:a4:df:
                    9a:06:9f:75:3b:44:af:15:66:a1:4c:37:df:5d:79:
                    fc:a0:5b:85:0b:64:73:61:c9:22:0c:c0:3d:b4:6f:
                    a2:8b:2e:ed:ca:0f:42:7a:99:d0:78:17:5e:49:f6:
                    0a:a7:9f:83:bc:36:dd:ca:52:b0:ef:84:f2:cc:fd:
                    f3:da:fb:d1:46:cd:02:ac:e0:ac:57:06:91:9b:6d:
                    28:30:b3:4f:c5:81:a1:68:48:9c:44:4d:fe:e7:de:
                    10:d4:83:e8:7d:81:d4:3a:90:a4:22:46:1e:e1:e2:
                    d2:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:C4:E4:1F:BB:D8:DD:33:3C:F8:69:22:17:84:85:D3:CE:3D:57:51
            X509v3 Authority Key Identifier:
                keyid:31:D4:EE:4A:FF:F5:5E:67:44:4D:47:D4:9B:51:2A:83:68:BF:9E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdTuSv_1XmdETUfUm1Eqg2i_nvY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/MdTuSv_1XmdETUfUm1Eqg2i_nvY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/MdTuSv_1XmdETUfUm1Eqg2i_nvY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:4e:f8:11:46:ff:ba:6c:76:d6:52:eb:9c:24:27:4f:91:ee:
         d8:a0:36:ea:47:96:c7:c6:88:07:aa:1f:17:26:8e:18:db:c3:
         a2:99:c8:32:2f:b4:00:c8:05:36:7d:2a:34:7d:f4:50:72:44:
         50:22:0c:95:83:3a:71:a7:6e:82:76:28:33:47:1b:e3:95:ee:
         0a:65:3e:9f:c4:a9:39:c9:94:c7:a8:65:c8:e8:36:75:7d:94:
         1d:9e:e3:33:a1:db:12:fc:c8:0a:49:5b:df:96:f4:67:76:f5:
         23:16:3a:26:f2:d6:b1:6d:d8:6a:11:01:f2:f7:8b:2a:37:b0:
         c6:0c:ce:8c:44:38:f8:e6:fd:cb:ae:84:3a:47:a0:58:ff:00:
         5c:cc:2a:11:c9:99:03:5d:08:60:6e:7a:c3:47:04:c3:95:21:
         1a:21:2d:b6:15:1c:5d:8b:fc:e8:de:7f:29:33:1d:a3:13:0e:
         52:06:40:12:34:a7:f1:c3:3e:39:01:5a:df:90:54:9d:38:e8:
         e8:a7:1a:09:35:16:4a:c0:b1:d0:b6:4d:fd:f9:09:3a:c6:dc:
         4e:8a:95:20:f0:29:49:f6:33:80:17:12:01:e6:72:91:35:4f:
         bc:43:78:79:1f:9e:87:20:13:92:3a:99:6b:3a:2e:15:a1:b1:
         fa:14:bf:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:01:15 2026 by rpki-client