Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/28e77a-ede2-4eb7-a347-9d3f3937cc47/1/mogMjbFaBDs74WXi2DG6oEerAKw.mft
File:                     mogMjbFaBDs74WXi2DG6oEerAKw.mft (raw, json)
Hash identifier:          EGnE4Zj5uhqyqKO87vAHfx633Z5FDUS6tM6j9S0ZUZA=
Subject key identifier:   11:E0:B4:9F:BF:36:46:AA:8D:21:8A:9A:6B:01:0C:AF:C7:B2:41:96
Authority key identifier: 9A:88:0C:8D:B1:5A:04:3B:3B:E1:65:E2:D8:31:BA:A0:47:AB:00:AC
Certificate issuer:       /CN=9a880c8db15a043b3be165e2d831baa047ab00ac
Certificate serial:       019CABD8EBE8ECEE9C13DD56B9C03A394722
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mogMjbFaBDs74WXi2DG6oEerAKw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/28e77a-ede2-4eb7-a347-9d3f3937cc47/1/mogMjbFaBDs74WXi2DG6oEerAKw.mft
Manifest number:          0B23
Signing time:             Mon 02 Mar 2026 00:00:45 +0000
Manifest this update:     Mon 02 Mar 2026 00:00:45 +0000
Manifest next update:     Tue 03 Mar 2026 00:00:45 +0000
Files and hashes:         1: mogMjbFaBDs74WXi2DG6oEerAKw.crl (hash: t9WSnfSCuhNHkUHUkZ5GZhzv8sGrl3RJ63LC2I0Hn5c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/28e77a-ede2-4eb7-a347-9d3f3937cc47/1/mogMjbFaBDs74WXi2DG6oEerAKw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/28e77a-ede2-4eb7-a347-9d3f3937cc47/1/mogMjbFaBDs74WXi2DG6oEerAKw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mogMjbFaBDs74WXi2DG6oEerAKw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d8:eb:e8:ec:ee:9c:13:dd:56:b9:c0:3a:39:47:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a880c8db15a043b3be165e2d831baa047ab00ac
        Validity
            Not Before: Mar  2 00:00:45 2026 GMT
            Not After : Mar  3 00:00:45 2026 GMT
        Subject: CN=11e0b49fbf3646aa8d218a9a6b010cafc7b24196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ee:b3:ea:c0:d6:4e:13:49:1a:21:8c:bd:70:
                    30:fa:8b:ae:e0:5a:bc:aa:8b:5d:16:7b:ec:b6:5e:
                    ff:a4:7a:51:5a:27:aa:4b:ec:ae:0f:eb:e6:e9:70:
                    fc:bd:8d:23:50:1e:d6:42:1a:48:39:a7:99:5c:a4:
                    3f:f1:e1:21:3c:c3:7b:1c:cf:64:bf:e3:99:d6:f0:
                    bf:e9:d5:0b:ad:a1:82:8f:34:47:80:f7:cb:9d:ea:
                    0c:34:4e:5a:04:ff:e7:b1:57:4e:ae:26:33:28:10:
                    a9:c5:f9:5f:48:db:2e:28:11:59:8e:ad:4e:f1:1c:
                    f9:03:8c:bd:a8:2e:7d:74:d2:c1:32:dc:4d:a4:e1:
                    38:67:d2:af:70:39:b4:9d:ce:0f:c3:79:d1:9e:91:
                    9c:6d:02:83:54:29:ec:95:83:f5:86:5c:f1:7c:c2:
                    6e:b5:4b:1b:cb:2a:cc:af:8c:57:65:e9:a8:3b:40:
                    33:34:84:f3:87:be:84:35:3e:d4:aa:61:fb:8b:5d:
                    b1:a7:df:87:1b:27:cd:a4:ff:02:03:29:3f:fc:d7:
                    78:11:6b:25:eb:1a:63:27:d3:e6:23:68:71:69:58:
                    1c:e4:43:f7:17:5d:ab:69:06:e0:94:30:74:dd:6f:
                    1c:12:bc:4f:9f:e6:60:f7:b3:ba:7d:6c:82:ce:8c:
                    85:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:E0:B4:9F:BF:36:46:AA:8D:21:8A:9A:6B:01:0C:AF:C7:B2:41:96
            X509v3 Authority Key Identifier:
                keyid:9A:88:0C:8D:B1:5A:04:3B:3B:E1:65:E2:D8:31:BA:A0:47:AB:00:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mogMjbFaBDs74WXi2DG6oEerAKw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/28e77a-ede2-4eb7-a347-9d3f3937cc47/1/mogMjbFaBDs74WXi2DG6oEerAKw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/28e77a-ede2-4eb7-a347-9d3f3937cc47/1/mogMjbFaBDs74WXi2DG6oEerAKw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:de:32:25:ed:22:f4:ab:16:5e:74:81:a0:84:fe:59:89:0c:
         c3:d6:53:a2:7a:7c:b0:23:4e:17:5d:f3:13:dd:57:d3:fb:85:
         f9:08:f7:de:ee:49:43:5c:7a:49:56:22:48:e3:2f:86:1e:2d:
         24:2d:97:b7:dc:3b:1a:43:84:9e:da:bd:e1:90:12:89:03:62:
         6a:b6:cc:22:66:91:b3:ec:c8:8d:fc:1f:ed:42:7d:90:7c:cb:
         b5:77:19:00:86:b4:e1:90:18:28:35:2e:4a:f0:16:0d:ff:c9:
         cf:d9:52:6b:35:38:c1:bb:bc:7c:28:f9:50:c8:a1:cb:a7:30:
         cb:0b:e0:f9:c4:49:1c:31:b7:93:30:3c:48:cc:f8:a3:96:ad:
         ce:0e:93:72:99:c4:10:8f:f7:34:6e:16:04:86:6a:25:9d:ac:
         4b:37:11:20:4d:9d:6e:38:c5:71:6d:95:18:a1:02:ac:f0:47:
         eb:50:33:29:87:08:5c:98:c1:e5:ae:fc:f7:04:e7:65:2f:9e:
         20:97:a7:31:f5:45:a9:e5:81:e2:92:4d:fa:f2:fb:39:0a:38:
         76:ce:2f:0f:01:04:9a:5b:94:a2:91:08:2c:e1:c4:71:25:b8:
         0f:18:de:83:87:23:7b:d9:51:2a:d4:4a:a4:0e:a3:84:6e:05:
         b5:66:38:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2Ovo7O6cE91WucA6OUciMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhODgwYzhkYjE1YTA0M2IzYmUxNjVlMmQ4MzFiYWEwNDdh
YjAwYWMwHhcNMjYwMzAyMDAwMDQ1WhcNMjYwMzAzMDAwMDQ1WjAzMTEwLwYDVQQD
EygxMWUwYjQ5ZmJmMzY0NmFhOGQyMThhOWE2YjAxMGNhZmM3YjI0MTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAve6z6sDWThNJGiGMvXAw+ouu4Fq8
qotdFnvstl7/pHpRWieqS+yuD+vm6XD8vY0jUB7WQhpIOaeZXKQ/8eEhPMN7HM9k
v+OZ1vC/6dULraGCjzRHgPfLneoMNE5aBP/nsVdOriYzKBCpxflfSNsuKBFZjq1O
8Rz5A4y9qC59dNLBMtxNpOE4Z9KvcDm0nc4Pw3nRnpGcbQKDVCnslYP1hlzxfMJu
tUsbyyrMr4xXZemoO0AzNITzh76ENT7UqmH7i12xp9+HGyfNpP8CAyk//Nd4EWsl
6xpjJ9PmI2hxaVgc5EP3F12raQbglDB03W8cErxPn+Zg97O6fWyCzoyFaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBHgtJ+/NkaqjSGKmmsBDK/HskGWMB8GA1UdIwQY
MBaAFJqIDI2xWgQ7O+Fl4tgxuqBHqwCsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbW9nTWpiRmFCRHM3NFdYaTJERzZvRWVyQUt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8yOGU3N2EtZWRlMi00ZWI3LWEzNDct
OWQzZjM5MzdjYzQ3LzEvbW9nTWpiRmFCRHM3NFdYaTJERzZvRWVyQUt3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8yOGU3N2EtZWRlMi00ZWI3LWEzNDctOWQzZjM5MzdjYzQ3
LzEvbW9nTWpiRmFCRHM3NFdYaTJERzZvRWVyQUt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtN4yJe0i
9KsWXnSBoIT+WYkMw9ZTonp8sCNOF13zE91X0/uF+Qj33u5JQ1x6SVYiSOMvhh4t
JC2Xt9w7GkOEntq94ZASiQNiarbMImaRs+zIjfwf7UJ9kHzLtXcZAIa04ZAYKDUu
SvAWDf/Jz9lSazU4wbu8fCj5UMihy6cwywvg+cRJHDG3kzA8SMz4o5atzg6TcpnE
EI/3NG4WBIZqJZ2sSzcRIE2dbjjFcW2VGKECrPBH61AzKYcIXJjB5a789wTnZS+e
IJenMfVFqeWB4pJN+vL7OQo4ds4vDwEEmluUopEILOHEcSW4Dxjeg4cje9lRKtRK
pA6jhG4FtWY4nQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:43:49 2026 by rpki-client