Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/ce7ce8-a60d-4f56-bb0e-d5d37aa9b604/1/MeD5m83M1__nK9NcNEvNAy_3T3M.mft
File:                     MeD5m83M1__nK9NcNEvNAy_3T3M.mft (raw, json)
Hash identifier:          h7vI9IPlmadjj65+vObPAISYxVNeCJzf+94x1XDSkdM=
Subject key identifier:   43:34:F2:AE:43:EA:BA:56:D2:BD:C7:51:26:32:24:62:95:CB:66:A4
Authority key identifier: 31:E0:F9:9B:CD:CC:D7:FF:E7:2B:D3:5C:34:4B:CD:03:2F:F7:4F:73
Certificate issuer:       /CN=31e0f99bcdccd7ffe72bd35c344bcd032ff74f73
Certificate serial:       019CAC7DEAB7EE8D2A87CDB5AA7E20B6876B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MeD5m83M1__nK9NcNEvNAy_3T3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/ce7ce8-a60d-4f56-bb0e-d5d37aa9b604/1/MeD5m83M1__nK9NcNEvNAy_3T3M.mft
Manifest number:          0A3B
Signing time:             Mon 02 Mar 2026 03:00:58 +0000
Manifest this update:     Mon 02 Mar 2026 03:00:58 +0000
Manifest next update:     Tue 03 Mar 2026 03:00:58 +0000
Files and hashes:         1: MeD5m83M1__nK9NcNEvNAy_3T3M.crl (hash: rVELli4ZgLWisQjh2TCG70cZDEG60r4yqki2yngAcyc=)
                          2: zz_Ib5-Ta-gQvL37t2sol4oW7j0.roa (hash: 7X6XJcKaDEOgfjgCBnhcX9H5VD8AjQbJ4gX4/JlPCb8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/ce7ce8-a60d-4f56-bb0e-d5d37aa9b604/1/MeD5m83M1__nK9NcNEvNAy_3T3M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/ce7ce8-a60d-4f56-bb0e-d5d37aa9b604/1/MeD5m83M1__nK9NcNEvNAy_3T3M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MeD5m83M1__nK9NcNEvNAy_3T3M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 03:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:7d:ea:b7:ee:8d:2a:87:cd:b5:aa:7e:20:b6:87:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31e0f99bcdccd7ffe72bd35c344bcd032ff74f73
        Validity
            Not Before: Mar  2 03:00:58 2026 GMT
            Not After : Mar  3 03:00:58 2026 GMT
        Subject: CN=4334f2ae43eaba56d2bdc7512632246295cb66a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ee:78:de:10:61:0e:69:59:4d:f6:b1:8c:82:
                    59:5d:73:02:23:61:51:98:69:18:30:d8:f6:03:09:
                    3d:19:ef:13:86:72:f9:4b:7d:0a:f3:52:e8:7b:3b:
                    c0:58:52:f8:a6:b1:98:d5:c1:d7:a1:44:a2:ec:44:
                    b1:dc:cb:20:e6:91:c0:50:ea:24:ed:07:d1:07:e5:
                    25:83:83:33:c7:e9:10:4e:e3:9e:26:5b:02:2d:a8:
                    69:d9:2c:f4:73:fb:19:8c:86:45:1d:5b:1a:29:d1:
                    0d:57:25:66:e2:6b:fc:ad:d5:0c:a7:0b:a2:71:1f:
                    62:4f:bf:a3:a4:91:f1:78:ca:f2:88:59:b6:f9:49:
                    a8:d0:a2:cc:ef:3f:e0:6c:cd:0f:c4:33:60:8f:14:
                    a9:57:fb:3b:c5:f9:28:08:19:c3:ad:01:85:2a:07:
                    09:42:42:68:c4:71:a1:58:ee:8a:e8:aa:05:92:ea:
                    35:4f:08:85:08:fa:d7:c0:f8:28:3f:d5:11:0e:ee:
                    30:92:26:0b:54:54:9b:71:10:b2:7a:01:fa:4f:38:
                    1c:3c:4f:eb:5c:91:6c:70:41:bd:5d:9d:5e:9d:4c:
                    1f:00:2e:8f:40:02:b5:aa:97:04:26:70:73:04:fd:
                    74:5e:ca:cd:e6:07:87:9b:ed:19:7c:e9:89:96:ea:
                    31:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:34:F2:AE:43:EA:BA:56:D2:BD:C7:51:26:32:24:62:95:CB:66:A4
            X509v3 Authority Key Identifier:
                keyid:31:E0:F9:9B:CD:CC:D7:FF:E7:2B:D3:5C:34:4B:CD:03:2F:F7:4F:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MeD5m83M1__nK9NcNEvNAy_3T3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ce7ce8-a60d-4f56-bb0e-d5d37aa9b604/1/MeD5m83M1__nK9NcNEvNAy_3T3M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ce7ce8-a60d-4f56-bb0e-d5d37aa9b604/1/MeD5m83M1__nK9NcNEvNAy_3T3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:00:8b:d4:dc:6b:ba:a9:68:17:52:13:8e:4f:ae:55:02:97:
         51:56:fe:0b:c9:00:7b:f8:cb:a6:ae:c7:57:79:12:e8:b1:a3:
         75:e8:0a:d6:a1:97:a0:ee:43:ca:2b:ea:bf:d9:1b:eb:17:d5:
         fe:e7:e9:43:50:7b:6c:6c:50:28:c8:d6:15:a8:ec:c8:ba:96:
         57:c4:76:40:85:7e:c6:dd:0b:2b:1f:fa:f7:5a:0f:8b:54:4f:
         a3:b3:60:d2:ed:fd:87:d8:00:71:a6:7e:42:61:24:82:7a:33:
         61:88:58:72:3e:91:7c:b7:07:7d:17:27:33:dc:d8:7f:83:a2:
         cb:a4:08:aa:ff:05:27:ea:a1:ab:97:c7:e8:2b:7c:37:e8:29:
         e5:46:a0:a0:71:ec:30:4e:d5:45:88:17:3d:b4:94:56:14:f7:
         98:40:08:f1:8f:c2:de:36:99:85:19:09:67:13:68:4b:3e:39:
         c2:74:64:78:89:f4:ba:6c:53:ef:44:c4:74:29:d1:83:2b:34:
         a8:b9:17:d6:30:c9:40:12:ec:5b:5d:4d:6d:83:b2:2c:60:48:
         dd:54:34:e0:cd:b2:60:8b:d4:4b:19:70:cf:45:f3:40:7a:0f:
         a6:cb:88:44:ce:71:38:83:10:50:1f:4a:03:a0:69:06:95:b3:
         83:1a:e1:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:37:19 2026 by rpki-client