Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/ea3528-45b9-47a4-9612-2a456fd096ab/1/MWg4BbI9i3h9aSEFPX666XBAihk.mft
File:                     MWg4BbI9i3h9aSEFPX666XBAihk.mft (raw, json)
Hash identifier:          LRRRBazmXn1lJ9go7liUtYEFuguvWS9hrmPaLPip+7s=
Subject key identifier:   92:6B:9F:F6:5E:8A:5E:97:E4:33:BB:45:40:4C:A5:DF:89:72:09:76
Authority key identifier: 31:68:38:05:B2:3D:8B:78:7D:69:21:05:3D:7E:BA:E9:70:40:8A:19
Certificate issuer:       /CN=31683805b23d8b787d6921053d7ebae970408a19
Certificate serial:       019D284D56C3F73D362C2592F5DC40E03DE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MWg4BbI9i3h9aSEFPX666XBAihk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/ea3528-45b9-47a4-9612-2a456fd096ab/1/MWg4BbI9i3h9aSEFPX666XBAihk.mft
Manifest number:          06CE
Signing time:             Thu 26 Mar 2026 04:00:50 +0000
Manifest this update:     Thu 26 Mar 2026 04:00:50 +0000
Manifest next update:     Fri 27 Mar 2026 04:00:50 +0000
Files and hashes:         1: MWg4BbI9i3h9aSEFPX666XBAihk.crl (hash: hC+buzpgv64I6vRBllKrpvsCc0pYIgJ8eCgisGvuZOY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/ea3528-45b9-47a4-9612-2a456fd096ab/1/MWg4BbI9i3h9aSEFPX666XBAihk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/ea3528-45b9-47a4-9612-2a456fd096ab/1/MWg4BbI9i3h9aSEFPX666XBAihk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MWg4BbI9i3h9aSEFPX666XBAihk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 04:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4d:56:c3:f7:3d:36:2c:25:92:f5:dc:40:e0:3d:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31683805b23d8b787d6921053d7ebae970408a19
        Validity
            Not Before: Mar 26 04:00:50 2026 GMT
            Not After : Mar 27 04:00:50 2026 GMT
        Subject: CN=926b9ff65e8a5e97e433bb45404ca5df89720976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:13:88:06:13:95:66:53:42:a8:71:91:87:b0:
                    58:5f:de:88:2c:5b:28:2b:2e:8e:f7:8c:17:83:d2:
                    7a:1e:0c:e4:88:51:25:80:84:f6:99:92:da:54:e6:
                    80:d5:7d:33:92:da:3b:db:49:6c:86:99:98:8a:79:
                    1b:03:29:4d:ba:12:93:51:d4:b6:2c:20:4c:af:91:
                    59:a1:ab:0b:21:ff:82:19:75:0f:3c:db:23:b3:9e:
                    e5:51:08:e2:90:f8:53:4e:0d:7a:4f:b4:15:d0:de:
                    d0:fc:b3:16:a6:54:59:e5:34:bc:a0:41:40:52:49:
                    a7:75:21:bd:45:52:23:27:dc:76:37:0c:10:c6:d6:
                    0e:8d:40:a8:de:1f:df:96:54:c5:f5:71:49:b3:14:
                    68:7a:ab:09:b7:7d:ee:b4:f3:af:f9:1b:01:86:03:
                    3f:63:3a:cb:78:c0:e5:9e:37:6e:48:e8:83:8c:f0:
                    6a:78:bf:7d:ed:29:3d:a5:dd:3e:eb:86:cd:8a:1b:
                    6a:87:78:80:9f:f8:82:0f:d0:13:9a:d1:03:46:ec:
                    46:c4:fa:64:f3:8c:dd:47:e9:61:bb:06:9a:98:e6:
                    b4:9e:38:c8:97:50:96:77:50:45:06:9c:2b:d9:49:
                    5e:ad:be:02:87:b7:38:1f:13:f8:1e:7b:da:31:cc:
                    c0:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:6B:9F:F6:5E:8A:5E:97:E4:33:BB:45:40:4C:A5:DF:89:72:09:76
            X509v3 Authority Key Identifier:
                keyid:31:68:38:05:B2:3D:8B:78:7D:69:21:05:3D:7E:BA:E9:70:40:8A:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MWg4BbI9i3h9aSEFPX666XBAihk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ea3528-45b9-47a4-9612-2a456fd096ab/1/MWg4BbI9i3h9aSEFPX666XBAihk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ea3528-45b9-47a4-9612-2a456fd096ab/1/MWg4BbI9i3h9aSEFPX666XBAihk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:9b:47:93:fb:07:2c:a1:92:1f:aa:58:ed:7f:3d:2b:56:66:
         e2:d2:d4:96:e2:d6:0b:f9:47:86:1a:d0:c1:1f:a9:b1:e7:3e:
         4f:8c:85:51:93:49:4a:8e:6e:c6:19:90:ba:6e:44:a0:42:c1:
         ab:0a:62:ff:7c:51:07:29:d2:6d:ae:95:7d:09:dc:0f:60:0a:
         0b:a3:af:bc:44:3d:d4:5d:83:e0:78:5d:1d:5a:3d:f2:46:d0:
         8f:ba:57:dd:ea:3b:09:03:ce:ec:07:13:51:7e:75:a5:10:1c:
         0e:d3:09:00:04:ac:ea:15:8d:0b:51:1e:bb:80:97:84:a7:32:
         5e:7e:bf:92:71:0b:9d:9a:aa:74:86:78:a5:4b:e9:15:e3:50:
         37:a0:48:51:78:1b:b9:91:8c:5a:ad:03:fd:ca:13:14:2d:a5:
         f0:60:a7:b9:b6:ca:18:78:0e:46:f9:ff:8a:fc:56:81:1b:8c:
         5f:c8:57:85:7b:f0:62:39:26:c2:03:f2:e7:69:4c:60:a7:26:
         c4:09:2c:f5:3e:4f:2d:ff:54:6e:32:95:80:ce:4c:b4:fd:1a:
         e2:0d:6c:7e:fd:59:f7:2a:53:f6:35:7b:a9:06:7e:a9:bc:6a:
         b7:e8:a2:1c:da:f0:51:a7:b8:29:ab:09:5a:f7:d5:6f:7e:e5:
         41:64:d7:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTVbD9z02LCWS9dxA4D3iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxNjgzODA1YjIzZDhiNzg3ZDY5MjEwNTNkN2ViYWU5NzA0
MDhhMTkwHhcNMjYwMzI2MDQwMDUwWhcNMjYwMzI3MDQwMDUwWjAzMTEwLwYDVQQD
Eyg5MjZiOWZmNjVlOGE1ZTk3ZTQzM2JiNDU0MDRjYTVkZjg5NzIwOTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxOIBhOVZlNCqHGRh7BYX96ILFso
Ky6O94wXg9J6HgzkiFElgIT2mZLaVOaA1X0zkto720lshpmYinkbAylNuhKTUdS2
LCBMr5FZoasLIf+CGXUPPNsjs57lUQjikPhTTg16T7QV0N7Q/LMWplRZ5TS8oEFA
UkmndSG9RVIjJ9x2NwwQxtYOjUCo3h/fllTF9XFJsxRoeqsJt33utPOv+RsBhgM/
YzrLeMDlnjduSOiDjPBqeL997Sk9pd0+64bNihtqh3iAn/iCD9ATmtEDRuxGxPpk
84zdR+lhuwaamOa0njjIl1CWd1BFBpwr2Ulerb4Ch7c4HxP4HnvaMczACwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJJrn/Zeil6X5DO7RUBMpd+Jcgl2MB8GA1UdIwQY
MBaAFDFoOAWyPYt4fWkhBT1+uulwQIoZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVdnNEJiSTlpM2g5YVNFRlBYNjY2WEJBaWhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9lYTM1MjgtNDViOS00N2E0LTk2MTIt
MmE0NTZmZDA5NmFiLzEvTVdnNEJiSTlpM2g5YVNFRlBYNjY2WEJBaWhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9lYTM1MjgtNDViOS00N2E0LTk2MTItMmE0NTZmZDA5NmFi
LzEvTVdnNEJiSTlpM2g5YVNFRlBYNjY2WEJBaWhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX5tHk/sH
LKGSH6pY7X89K1Zm4tLUluLWC/lHhhrQwR+psec+T4yFUZNJSo5uxhmQum5EoELB
qwpi/3xRBynSba6VfQncD2AKC6OvvEQ91F2D4HhdHVo98kbQj7pX3eo7CQPO7AcT
UX51pRAcDtMJAASs6hWNC1Eeu4CXhKcyXn6/knELnZqqdIZ4pUvpFeNQN6BIUXgb
uZGMWq0D/coTFC2l8GCnubbKGHgORvn/ivxWgRuMX8hXhXvwYjkmwgPy52lMYKcm
xAks9T5PLf9UbjKVgM5MtP0a4g1sfv1Z9ypT9jV7qQZ+qbxqt+iiHNrwUae4KasJ
WvfVb37lQWTXKw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:59:08 2026 by rpki-client