Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/cc00eb-56f6-41a7-8305-c299965bbc42/1/MZUeNv_ZfB1zOpClr2-tqF_Sd4I.mft
File:                     MZUeNv_ZfB1zOpClr2-tqF_Sd4I.mft (raw, json)
Hash identifier:          97COaPPtmtPDMVikPLX2kD7L2/W1YXEa5TLC+TSfVdY=
Subject key identifier:   DC:4F:8B:BD:DB:5A:24:A3:3B:EF:B9:6A:DC:86:77:47:D6:65:BD:4F
Authority key identifier: 31:95:1E:36:FF:D9:7C:1D:73:3A:90:A5:AF:6F:AD:A8:5F:D2:77:82
Certificate issuer:       /CN=31951e36ffd97c1d733a90a5af6fada85fd27782
Certificate serial:       019D25F1A2DD8FA6508E7DBA9FD38709F35E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MZUeNv_ZfB1zOpClr2-tqF_Sd4I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/cc00eb-56f6-41a7-8305-c299965bbc42/1/MZUeNv_ZfB1zOpClr2-tqF_Sd4I.mft
Manifest number:          0183
Signing time:             Wed 25 Mar 2026 17:01:26 +0000
Manifest this update:     Wed 25 Mar 2026 17:01:26 +0000
Manifest next update:     Thu 26 Mar 2026 17:01:26 +0000
Files and hashes:         1: MZUeNv_ZfB1zOpClr2-tqF_Sd4I.crl (hash: z1XfWROUK4bcTBa3hqFnEbghM5jocbjUNq+g2u6qLJQ=)
                          2: N3hVVOovM_77teroBxQL9P-gg3U.roa (hash: 2ks0o9g54VzhWfaTpoQs/luMrk638SsVVoduuStd18k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/cc00eb-56f6-41a7-8305-c299965bbc42/1/MZUeNv_ZfB1zOpClr2-tqF_Sd4I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/cc00eb-56f6-41a7-8305-c299965bbc42/1/MZUeNv_ZfB1zOpClr2-tqF_Sd4I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MZUeNv_ZfB1zOpClr2-tqF_Sd4I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:f1:a2:dd:8f:a6:50:8e:7d:ba:9f:d3:87:09:f3:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31951e36ffd97c1d733a90a5af6fada85fd27782
        Validity
            Not Before: Mar 25 17:01:26 2026 GMT
            Not After : Mar 26 17:01:26 2026 GMT
        Subject: CN=dc4f8bbddb5a24a33befb96adc867747d665bd4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:3b:7c:68:da:45:38:e9:a4:6f:62:92:d0:05:
                    6e:aa:b3:2e:a5:77:03:fc:27:cb:a3:ce:62:d6:76:
                    1f:1f:d4:b0:d7:c4:f6:12:34:75:94:93:50:c1:18:
                    7a:3a:16:7f:bf:01:5b:58:45:85:21:bd:a8:68:01:
                    4c:63:d1:44:ee:17:76:8a:85:de:21:fa:de:a5:fc:
                    72:49:17:b5:45:e3:c0:76:bc:ed:79:1b:ad:1e:db:
                    d5:44:8d:71:bb:4a:d9:c3:cb:03:b1:a8:4e:37:02:
                    ac:a1:0d:1a:6a:51:91:97:27:8a:6d:ac:65:ca:c7:
                    2f:53:63:30:36:51:ba:a9:aa:b5:f9:0d:78:3a:3c:
                    54:57:3d:2c:dc:0b:02:ff:0b:60:5a:7f:24:e4:f0:
                    d7:6d:07:c6:ee:af:d9:b9:00:a3:4d:e3:15:d7:dc:
                    b8:cc:de:0e:ce:2b:0e:ce:f2:c9:6f:a1:4f:fe:45:
                    61:4e:a9:03:e3:98:de:f6:c8:31:6a:ff:c4:29:b0:
                    1e:0f:a4:78:7a:e1:ee:7c:64:5c:58:2c:81:6c:fb:
                    0a:30:38:18:3f:e1:1c:c6:f4:2c:0e:88:6e:9a:fa:
                    76:0f:0c:38:51:81:77:a8:03:ec:6e:b4:72:1c:35:
                    33:bd:72:43:76:b8:55:66:62:40:92:5a:85:71:f9:
                    29:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:4F:8B:BD:DB:5A:24:A3:3B:EF:B9:6A:DC:86:77:47:D6:65:BD:4F
            X509v3 Authority Key Identifier:
                keyid:31:95:1E:36:FF:D9:7C:1D:73:3A:90:A5:AF:6F:AD:A8:5F:D2:77:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MZUeNv_ZfB1zOpClr2-tqF_Sd4I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/cc00eb-56f6-41a7-8305-c299965bbc42/1/MZUeNv_ZfB1zOpClr2-tqF_Sd4I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/cc00eb-56f6-41a7-8305-c299965bbc42/1/MZUeNv_ZfB1zOpClr2-tqF_Sd4I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:62:b0:a1:cd:ac:b2:67:12:52:0f:d0:b3:11:0b:76:cd:e7:
         2b:cf:54:87:7c:74:42:b9:3b:f0:f1:17:df:af:16:cb:ff:f0:
         83:1b:a2:03:f0:80:73:da:7d:4a:ee:d1:a6:5e:cd:33:77:64:
         ae:56:ac:c6:e6:a5:30:3b:7a:01:ab:3f:7d:7e:de:db:8d:12:
         b1:04:ff:11:dc:c1:7f:3c:ce:23:3a:fb:a2:08:91:80:63:72:
         cc:90:03:2f:7b:4b:ad:2f:b0:14:70:ce:e6:fe:4e:9e:02:25:
         99:a5:ad:90:61:23:a1:11:f9:6e:03:eb:08:65:6f:69:43:78:
         0f:b8:ab:62:46:ad:0f:83:56:b5:f7:5e:39:a1:8e:51:1c:03:
         f2:fd:79:02:3f:88:8b:50:98:32:8c:02:13:52:17:7c:5b:e2:
         8d:69:a5:79:2e:a3:d6:ae:7a:30:06:94:84:b4:ee:b0:b0:93:
         b8:20:fa:2f:c5:2d:38:92:84:c3:26:af:17:43:cb:32:9f:d2:
         e7:b4:79:f4:5c:cb:3e:20:69:79:41:93:59:e4:92:d8:2e:e0:
         d2:ee:f9:f9:16:8a:73:0f:1f:11:0b:8e:ff:26:ad:d7:94:ba:
         f6:20:52:c5:e1:b4:d2:e3:11:d9:cf:f4:1d:05:8d:d8:eb:25:
         79:e4:77:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:23 2026 by rpki-client