Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d0beb2-c576-4e8d-b148-d79508e16869/1/MgOPanu3dwpyrnANMbagCoHujbs.mft
File:                     MgOPanu3dwpyrnANMbagCoHujbs.mft (raw, json)
Hash identifier:          k3TY8mgQ3WM9oPZLTwBXR76ctMyFHjmor3uW2WdQNnw=
Subject key identifier:   01:49:0D:43:75:17:AE:82:26:3D:B2:C2:54:4D:52:4A:A2:FC:D8:E7
Authority key identifier: 32:03:8F:6A:7B:B7:77:0A:72:AE:70:0D:31:B6:A0:0A:81:EE:8D:BB
Certificate issuer:       /CN=32038f6a7bb7770a72ae700d31b6a00a81ee8dbb
Certificate serial:       019D2704934D7F0ED63F168F510386AC5B1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MgOPanu3dwpyrnANMbagCoHujbs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/d0beb2-c576-4e8d-b148-d79508e16869/1/MgOPanu3dwpyrnANMbagCoHujbs.mft
Manifest number:          0E6F
Signing time:             Wed 25 Mar 2026 22:01:44 +0000
Manifest this update:     Wed 25 Mar 2026 22:01:44 +0000
Manifest next update:     Thu 26 Mar 2026 22:01:44 +0000
Files and hashes:         1: MgOPanu3dwpyrnANMbagCoHujbs.crl (hash: TVDDC6pMb2U5Fuqd9YEuY+gv6D2rJ1vw8s73LhWRcrw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/d0beb2-c576-4e8d-b148-d79508e16869/1/MgOPanu3dwpyrnANMbagCoHujbs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/d0beb2-c576-4e8d-b148-d79508e16869/1/MgOPanu3dwpyrnANMbagCoHujbs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MgOPanu3dwpyrnANMbagCoHujbs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 22:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:04:93:4d:7f:0e:d6:3f:16:8f:51:03:86:ac:5b:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32038f6a7bb7770a72ae700d31b6a00a81ee8dbb
        Validity
            Not Before: Mar 25 22:01:44 2026 GMT
            Not After : Mar 26 22:01:44 2026 GMT
        Subject: CN=01490d437517ae82263db2c2544d524aa2fcd8e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ed:fd:94:73:b8:5e:21:4e:4a:7b:a2:ef:58:
                    06:82:24:4b:aa:2a:39:24:68:7a:81:02:b1:a0:d9:
                    d4:c8:c3:20:19:ff:f8:78:d6:ca:a0:71:7d:39:38:
                    09:04:cd:61:af:a7:0b:63:39:64:4a:f1:10:9f:bf:
                    79:9e:6e:74:1b:05:f9:4c:7b:85:c6:b4:02:58:24:
                    24:cf:b2:93:92:81:25:43:e1:a5:6b:e3:98:f4:b9:
                    3d:e3:45:5c:e7:2a:52:e4:e2:1d:6d:90:d3:a8:ec:
                    63:2f:7b:0d:09:4c:d8:e8:c0:e2:ba:fb:ab:de:1f:
                    2a:6c:c6:54:ab:73:b3:82:78:19:9f:ae:b1:1b:bf:
                    38:71:b2:64:23:50:e1:08:0e:52:45:a2:f4:36:ba:
                    11:e7:5b:1a:7b:58:8f:1e:25:e7:b2:de:37:1a:1d:
                    fa:3a:f0:a6:eb:42:f0:43:b4:a1:1a:4e:a0:85:6a:
                    00:69:d6:95:4e:a7:80:aa:25:e5:12:5c:13:75:97:
                    7a:d7:8f:49:1d:ef:d0:e5:23:e3:b7:29:dc:9e:48:
                    af:18:7b:6b:c0:89:75:f7:e4:da:26:94:86:db:62:
                    ce:5c:0f:a7:a3:21:d3:26:7a:52:32:6f:58:ab:b4:
                    75:6b:33:e0:85:32:51:e8:72:11:52:79:16:d2:4d:
                    b9:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:49:0D:43:75:17:AE:82:26:3D:B2:C2:54:4D:52:4A:A2:FC:D8:E7
            X509v3 Authority Key Identifier:
                keyid:32:03:8F:6A:7B:B7:77:0A:72:AE:70:0D:31:B6:A0:0A:81:EE:8D:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MgOPanu3dwpyrnANMbagCoHujbs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d0beb2-c576-4e8d-b148-d79508e16869/1/MgOPanu3dwpyrnANMbagCoHujbs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d0beb2-c576-4e8d-b148-d79508e16869/1/MgOPanu3dwpyrnANMbagCoHujbs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:ed:bc:33:bd:96:4e:c8:63:cd:47:23:c8:44:65:b3:e5:32:
         9e:df:3f:e6:86:f9:59:65:56:ca:12:5b:37:03:fd:7d:ad:f7:
         a2:33:be:1f:47:83:27:98:8a:5a:64:05:5e:d7:4f:6e:b6:e2:
         05:6f:43:d7:aa:95:ba:2a:f4:bb:f0:ca:87:b5:d7:aa:d3:14:
         a0:8e:89:e1:cd:4b:86:be:a8:f8:90:ad:8a:6a:29:9d:07:2c:
         fc:02:40:c3:59:b4:c6:75:26:ec:9f:58:64:92:34:a5:89:f0:
         4c:11:60:d1:b6:5a:f5:38:eb:8c:0e:ca:de:8f:6d:1b:83:da:
         41:ff:ec:29:11:a3:e9:fb:26:77:3f:f5:30:99:95:9c:5c:5a:
         35:3b:1b:60:16:4d:9f:36:eb:76:6e:8d:6a:b1:5b:76:b9:4f:
         47:13:08:e4:c2:bb:bb:96:61:7d:b4:bc:5e:b4:2b:1c:c3:28:
         65:fa:c2:53:03:a4:72:71:2d:6b:70:c0:66:17:45:f4:6f:6e:
         dc:93:3a:de:11:d5:85:38:2f:79:76:e2:df:d8:e7:42:27:72:
         e8:90:65:ee:ab:89:41:7a:d4:ec:7e:6e:ca:2e:c9:8c:78:c3:
         11:4a:d9:72:b5:c6:18:3c:8c:1d:2e:80:5e:05:3e:dc:e0:11:
         d1:d1:c3:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBJNNfw7WPxaPUQOGrFsdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyMDM4ZjZhN2JiNzc3MGE3MmFlNzAwZDMxYjZhMDBhODFl
ZThkYmIwHhcNMjYwMzI1MjIwMTQ0WhcNMjYwMzI2MjIwMTQ0WjAzMTEwLwYDVQQD
EygwMTQ5MGQ0Mzc1MTdhZTgyMjYzZGIyYzI1NDRkNTI0YWEyZmNkOGU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0u39lHO4XiFOSnui71gGgiRLqio5
JGh6gQKxoNnUyMMgGf/4eNbKoHF9OTgJBM1hr6cLYzlkSvEQn795nm50GwX5THuF
xrQCWCQkz7KTkoElQ+Gla+OY9Lk940Vc5ypS5OIdbZDTqOxjL3sNCUzY6MDiuvur
3h8qbMZUq3OzgngZn66xG784cbJkI1DhCA5SRaL0NroR51sae1iPHiXnst43Gh36
OvCm60LwQ7ShGk6ghWoAadaVTqeAqiXlElwTdZd6149JHe/Q5SPjtyncnkivGHtr
wIl19+TaJpSG22LOXA+noyHTJnpSMm9Yq7R1azPghTJR6HIRUnkW0k25qwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAFJDUN1F66CJj2ywlRNUkqi/NjnMB8GA1UdIwQY
MBaAFDIDj2p7t3cKcq5wDTG2oAqB7o27MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWdPUGFudTNkd3B5cm5BTk1iYWdDb0h1amJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9kMGJlYjItYzU3Ni00ZThkLWIxNDgt
ZDc5NTA4ZTE2ODY5LzEvTWdPUGFudTNkd3B5cm5BTk1iYWdDb0h1amJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9kMGJlYjItYzU3Ni00ZThkLWIxNDgtZDc5NTA4ZTE2ODY5
LzEvTWdPUGFudTNkd3B5cm5BTk1iYWdDb0h1amJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcO28M72W
TshjzUcjyERls+Uynt8/5ob5WWVWyhJbNwP9fa33ojO+H0eDJ5iKWmQFXtdPbrbi
BW9D16qVuir0u/DKh7XXqtMUoI6J4c1Lhr6o+JCtimopnQcs/AJAw1m0xnUm7J9Y
ZJI0pYnwTBFg0bZa9TjrjA7K3o9tG4PaQf/sKRGj6fsmdz/1MJmVnFxaNTsbYBZN
nzbrdm6NarFbdrlPRxMI5MK7u5ZhfbS8XrQrHMMoZfrCUwOkcnEta3DAZhdF9G9u
3JM63hHVhTgveXbi39jnQidy6JBl7quJQXrU7H5uyi7JjHjDEUrZcrXGGDyMHS6A
XgU+3OAR0dHDRA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:43:49 2026 by rpki-client