Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft
File:                     1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft (raw, json)
Hash identifier:          GUiHXDn29uY2ViV+nBsOjjQ+W9lGNrqtAKkAsr4DvLA=
Subject key identifier:   B8:83:93:18:51:84:71:94:BF:B7:F0:13:6C:03:10:FC:07:33:64:C3
Authority key identifier: FA:63:0C:3D:23:C6:04:6C:2F:1A:7E:0C:8F:CC:BD:83:E2:0E:D4:C7
Certificate issuer:       /CN=fa630c3d23c6046c2f1a7e0c8fccbd83e20ed4c7
Certificate serial:       019D2816E15CC4C60B3B55A01C7460F89ED9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft
Manifest number:          181C
Signing time:             Thu 26 Mar 2026 03:01:21 +0000
Manifest this update:     Thu 26 Mar 2026 03:01:21 +0000
Manifest next update:     Fri 27 Mar 2026 03:01:21 +0000
Files and hashes:         1: 1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.crl (hash: 9T9kGN0EXfLDqquIkWbwHJE8RSFIXqJqr0Psp9cVkPo=)
                          2: YPTBhCi-2wZ5UQb5ApiuqyrwwNM.roa (hash: XFRYmJaoPXSuRaNORpMPCGlJK9aNC4fFNx6j6pcG01w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:16:e1:5c:c4:c6:0b:3b:55:a0:1c:74:60:f8:9e:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa630c3d23c6046c2f1a7e0c8fccbd83e20ed4c7
        Validity
            Not Before: Mar 26 03:01:21 2026 GMT
            Not After : Mar 27 03:01:21 2026 GMT
        Subject: CN=b883931851847194bfb7f0136c0310fc073364c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:36:79:e8:28:e4:3c:91:99:50:8f:d2:a6:d4:
                    50:4f:53:66:35:81:32:68:ae:e7:19:c3:ba:43:ee:
                    f8:5f:e5:10:40:39:36:e9:71:1e:bf:05:2f:b3:81:
                    0a:d4:5a:03:93:15:f7:51:e8:0e:4e:00:d3:1e:e2:
                    9e:67:60:48:fd:b3:20:67:f1:55:cb:15:1d:7d:35:
                    ab:ea:f6:70:8f:11:29:40:c3:48:cb:68:bd:37:ed:
                    d2:53:3b:5b:04:62:33:90:c2:d1:30:2d:35:e1:5c:
                    50:95:7d:14:dd:f7:dd:62:14:0f:ad:e7:2a:dd:7e:
                    bb:81:ce:13:5e:94:2c:6c:f9:42:ea:ee:98:75:8d:
                    28:09:9b:31:1b:e6:86:32:db:e1:d7:7d:f5:bb:3f:
                    4d:44:05:88:d7:1d:af:07:db:d5:35:30:0c:42:a2:
                    5d:41:ef:b7:15:9f:65:e9:e1:a3:b2:90:c4:9b:2b:
                    92:d0:49:77:47:22:7a:c4:c7:e6:39:13:0f:74:92:
                    90:40:bb:86:50:f0:de:16:62:4b:01:74:ca:96:7a:
                    88:26:a5:8b:02:e1:ea:bc:99:8b:25:08:53:e6:97:
                    4c:b9:83:73:e6:0d:b6:6b:79:eb:bb:77:8f:3a:cc:
                    bb:83:19:79:b5:4d:06:d1:a5:cb:61:0c:a4:40:3d:
                    6d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:83:93:18:51:84:71:94:BF:B7:F0:13:6C:03:10:FC:07:33:64:C3
            X509v3 Authority Key Identifier:
                keyid:FA:63:0C:3D:23:C6:04:6C:2F:1A:7E:0C:8F:CC:BD:83:E2:0E:D4:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:d4:9b:e6:ef:fc:fe:c7:a2:28:a6:0d:33:33:77:16:dc:a1:
         87:10:02:ee:71:fd:7c:fa:c6:ad:1f:3b:82:ec:f7:bd:2b:8e:
         c7:1a:3b:8b:2b:11:ec:b9:fa:34:a4:e4:c7:7d:93:7c:1b:7c:
         32:a9:51:0f:55:8b:07:32:98:00:fd:f2:44:3f:25:ae:ff:82:
         9b:37:56:37:27:c9:09:68:44:7d:83:d9:1d:12:16:a1:35:38:
         6f:59:63:89:26:1c:4b:81:74:cf:c0:c3:e5:23:3c:85:ee:23:
         22:93:7a:87:4c:a1:05:41:63:c6:23:96:22:ee:b2:fa:9a:cb:
         7d:8f:9f:a7:86:ca:8a:fd:0e:31:90:16:e2:57:2b:6b:cb:9b:
         e8:c0:d5:bd:fb:71:e7:bd:c6:31:9a:fc:4c:28:1b:94:cb:2b:
         5a:8f:d9:89:55:84:f5:4b:09:e2:e8:58:5b:2f:56:0b:01:6a:
         eb:cf:34:cb:51:9d:9e:63:c8:39:8c:23:ae:a3:7c:e7:ac:93:
         ca:dd:2d:4c:bb:3c:b7:a2:f3:03:d7:a3:47:a8:c8:ae:89:1f:
         0a:7c:1f:72:72:66:25:48:53:bc:4a:89:1a:a4:0d:06:d0:47:
         07:8e:f8:9f:bf:2d:7a:b3:3c:2e:af:a1:e6:a7:19:b0:64:a6:
         5b:be:16:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:22:22 2026 by rpki-client