Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft
File:                     MzIOLzxa2t8VOgdYvGALbqFPTu0.mft (raw, json)
Hash identifier:          mQTFv6dXHH+Uz0hayiwZZ7yDhykT0HiY1yirYE+MD58=
Subject key identifier:   C3:0B:15:62:BD:61:9A:A9:88:F1:8A:5C:29:F3:8A:1D:6C:FB:57:CD
Authority key identifier: 33:32:0E:2F:3C:5A:DA:DF:15:3A:07:58:BC:60:0B:6E:A1:4F:4E:ED
Certificate issuer:       /CN=33320e2f3c5adadf153a0758bc600b6ea14f4eed
Certificate serial:       019D265F390C271483842A72980B475B1D72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MzIOLzxa2t8VOgdYvGALbqFPTu0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft
Manifest number:          1886
Signing time:             Wed 25 Mar 2026 19:01:07 +0000
Manifest this update:     Wed 25 Mar 2026 19:01:07 +0000
Manifest next update:     Thu 26 Mar 2026 19:01:07 +0000
Files and hashes:         1: MzIOLzxa2t8VOgdYvGALbqFPTu0.crl (hash: v0FJp7L0vpeCVGoeerhg/KZ98NucoN5Tcc7ozNbxPk8=)
                          2: VAAvBVikKM6MuRJ-eG-iUB9XdRw.roa (hash: nQeQgdEmek61pzKMZx59WEmM1Ma+1ZD1llfXrlwOtbo=)
                          3: oyMYaWn1495tEV0rJtuup8PEegg.roa (hash: xG4lUtMIXDMmK0ptQSxWDryB1RVS07DU1EG3EYDXLQU=)
                          4: w7xEBHIfXi0BUtgUPP66rgihpG8.roa (hash: gDrcyd6ElWA3Fy0I7vbIWUDFdvKSba9LbEFcEbtavQA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MzIOLzxa2t8VOgdYvGALbqFPTu0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:39:0c:27:14:83:84:2a:72:98:0b:47:5b:1d:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33320e2f3c5adadf153a0758bc600b6ea14f4eed
        Validity
            Not Before: Mar 25 19:01:07 2026 GMT
            Not After : Mar 26 19:01:07 2026 GMT
        Subject: CN=c30b1562bd619aa988f18a5c29f38a1d6cfb57cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:73:96:79:27:d3:61:70:1a:bd:20:26:b0:a1:
                    9a:27:f3:34:32:ff:7b:08:46:37:bf:e0:af:e7:5a:
                    56:3e:8a:c1:68:d7:8c:d7:b9:12:5c:69:4c:2d:08:
                    fa:7d:44:7f:6e:9c:ac:af:4c:33:a1:69:37:14:8d:
                    9c:b7:6c:81:69:8e:69:22:7e:ad:65:8a:40:f3:c7:
                    de:8d:6c:28:c3:0f:fc:91:f9:98:b6:d7:35:8e:b7:
                    24:75:16:e4:27:3f:71:12:77:f4:04:96:d7:da:41:
                    7f:33:1b:99:42:94:12:13:37:6b:3b:89:b3:8e:99:
                    9c:20:d6:77:80:4b:d4:49:98:be:5e:f6:9c:b8:50:
                    e7:e4:9d:1b:2b:c8:58:c8:d8:63:5a:38:99:f5:fc:
                    80:95:67:38:94:d9:35:85:d9:ef:6b:73:a4:d4:1c:
                    71:86:60:6c:42:14:fb:9b:37:79:66:1c:a9:ef:45:
                    75:9e:31:3f:14:44:f3:34:a3:2f:90:8f:8d:46:21:
                    bd:90:6b:fb:6f:16:f6:39:3a:38:53:39:9d:8b:a3:
                    77:fc:9f:7a:fc:37:99:cb:6a:58:bb:07:83:d9:b6:
                    de:4c:c1:15:49:18:8b:97:cc:64:2a:54:70:cb:1f:
                    6d:ff:21:f1:21:6a:e9:6d:05:90:cc:0f:23:88:8b:
                    a6:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:0B:15:62:BD:61:9A:A9:88:F1:8A:5C:29:F3:8A:1D:6C:FB:57:CD
            X509v3 Authority Key Identifier:
                keyid:33:32:0E:2F:3C:5A:DA:DF:15:3A:07:58:BC:60:0B:6E:A1:4F:4E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzIOLzxa2t8VOgdYvGALbqFPTu0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:44:28:c8:09:d8:93:50:ab:63:fb:87:4a:b2:b5:0e:61:d2:
         c9:b0:b4:5d:7a:d4:e8:27:bd:45:f0:03:49:09:af:c3:fb:28:
         63:e5:42:96:cd:e6:6c:a9:c7:9e:c7:91:ec:fc:39:7e:8f:9e:
         15:f8:2c:d6:4c:2d:86:8f:89:60:59:a2:48:89:d9:39:af:bd:
         0e:e5:70:b9:e6:e3:d1:90:16:14:e9:82:3a:75:4a:7d:5e:21:
         e0:15:42:4e:d9:3a:48:93:93:f9:50:30:b0:cd:85:aa:b4:40:
         82:17:c2:8c:da:ad:98:25:0c:0d:ed:42:35:f6:00:81:6b:da:
         41:20:5f:fb:47:8a:95:07:07:30:16:d1:f5:81:06:1e:ec:86:
         4b:28:f4:3b:2f:93:80:67:c9:26:71:68:da:aa:0c:91:bf:07:
         38:ec:ec:bb:c4:e6:ec:47:9b:99:36:ed:32:72:ef:4d:17:fb:
         a4:e0:3b:f0:c1:2a:22:69:2c:82:66:75:9d:4c:c6:48:1b:bf:
         f1:cc:62:86:fd:49:54:80:eb:88:18:f1:33:5e:80:bc:02:49:
         7a:02:91:ea:fb:c2:eb:b6:81:20:78:b8:0a:84:44:b6:ef:11:
         39:1f:6e:1e:0d:63:4c:7c:16:c4:1c:bf:05:74:25:aa:97:f1:
         de:62:6a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:51:21 2026 by rpki-client