Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/00ab67-32c4-472d-9268-cfcd766283a7/1/MMu06oV_eyolkC7geq4ucSLc1cw.mft
File:                     MMu06oV_eyolkC7geq4ucSLc1cw.mft (raw, json)
Hash identifier:          NS9MrQqORgdA/8/gEeoB644v5y1tRwkUrUdSAxfl9lg=
Subject key identifier:   BE:67:39:43:54:75:DF:96:AA:26:5B:25:6E:0F:75:7A:80:7B:3A:7A
Authority key identifier: 30:CB:B4:EA:85:7F:7B:2A:25:90:2E:E0:7A:AE:2E:71:22:DC:D5:CC
Certificate issuer:       /CN=30cbb4ea857f7b2a25902ee07aae2e7122dcd5cc
Certificate serial:       019CAB6B16F718ADEFD926881B6368F1AADD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MMu06oV_eyolkC7geq4ucSLc1cw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/00ab67-32c4-472d-9268-cfcd766283a7/1/MMu06oV_eyolkC7geq4ucSLc1cw.mft
Manifest number:          1845
Signing time:             Sun 01 Mar 2026 22:00:47 +0000
Manifest this update:     Sun 01 Mar 2026 22:00:47 +0000
Manifest next update:     Mon 02 Mar 2026 22:00:47 +0000
Files and hashes:         1: MMu06oV_eyolkC7geq4ucSLc1cw.crl (hash: vvvwO++1DunHP2yN8yFvk+NrI7aBkphSAycr7/9giII=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/00ab67-32c4-472d-9268-cfcd766283a7/1/MMu06oV_eyolkC7geq4ucSLc1cw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/00ab67-32c4-472d-9268-cfcd766283a7/1/MMu06oV_eyolkC7geq4ucSLc1cw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MMu06oV_eyolkC7geq4ucSLc1cw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:6b:16:f7:18:ad:ef:d9:26:88:1b:63:68:f1:aa:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30cbb4ea857f7b2a25902ee07aae2e7122dcd5cc
        Validity
            Not Before: Mar  1 22:00:47 2026 GMT
            Not After : Mar  2 22:00:47 2026 GMT
        Subject: CN=be6739435475df96aa265b256e0f757a807b3a7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8c:62:d7:35:a8:d6:55:c1:4c:b8:0c:6b:86:
                    30:53:7d:cf:45:3e:7e:8d:ef:1b:e8:d2:af:d3:06:
                    f8:46:5c:9e:50:ab:eb:ac:77:24:e1:e0:89:f8:5e:
                    f9:f3:4f:d8:6e:fc:4a:c4:af:10:1a:a8:1e:b8:d6:
                    f3:75:be:d1:0c:0a:50:92:97:08:bd:21:62:83:16:
                    6b:00:09:11:11:d3:ff:91:40:35:36:23:a6:00:e9:
                    cf:09:cf:c9:c9:9e:96:b2:69:cb:c3:f2:54:82:c7:
                    b6:4a:21:07:31:f5:b7:53:13:51:ef:2b:c8:03:77:
                    f9:9a:79:25:13:fe:40:d6:d6:13:f4:12:60:8d:13:
                    5f:d8:6c:d6:4e:58:53:bb:ee:f2:29:d0:88:0c:3a:
                    67:9d:6b:1d:b6:0d:82:0d:4b:76:e4:1a:06:35:dd:
                    95:65:d7:40:3f:60:1b:82:80:3b:46:0d:a7:1c:6f:
                    bd:f8:92:cb:de:eb:ae:4e:37:79:86:cf:f1:68:e9:
                    51:e1:e8:b8:fe:ba:85:dc:c1:c6:49:fd:dd:c8:4b:
                    cb:80:5c:1a:24:a0:90:71:02:14:a3:07:ae:f6:88:
                    ee:fc:53:54:5f:7b:2f:57:5c:d4:e4:cb:88:c0:aa:
                    fb:ff:9d:4d:3b:4c:35:d8:2a:32:77:71:66:0a:e3:
                    dd:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:67:39:43:54:75:DF:96:AA:26:5B:25:6E:0F:75:7A:80:7B:3A:7A
            X509v3 Authority Key Identifier:
                keyid:30:CB:B4:EA:85:7F:7B:2A:25:90:2E:E0:7A:AE:2E:71:22:DC:D5:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMu06oV_eyolkC7geq4ucSLc1cw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/00ab67-32c4-472d-9268-cfcd766283a7/1/MMu06oV_eyolkC7geq4ucSLc1cw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/00ab67-32c4-472d-9268-cfcd766283a7/1/MMu06oV_eyolkC7geq4ucSLc1cw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:60:c3:2a:15:01:3d:9b:93:f5:4f:82:25:87:57:54:7b:a5:
         6d:89:7b:b9:b5:80:0e:45:d8:1c:9f:f7:28:58:01:4f:04:7c:
         75:2c:09:59:7a:c0:5e:4c:dd:01:73:f9:38:5b:44:46:a9:3c:
         b4:a6:3d:cd:b4:ad:16:16:77:d2:8f:14:ed:ed:bd:65:45:1a:
         9f:34:38:a9:72:00:67:80:c7:39:bc:c3:30:ec:59:80:e6:03:
         78:31:a3:ee:df:fd:44:14:43:cd:30:f1:d5:f6:80:2c:a6:2b:
         aa:31:f0:08:1f:59:11:ee:2a:39:05:34:98:1d:34:fe:ce:26:
         08:b8:cb:8c:c6:ac:b7:7a:ff:d8:02:f4:78:61:3b:9a:4a:8e:
         26:c5:47:7b:7a:1d:bc:7a:66:6b:8d:c7:39:31:f2:97:3e:df:
         66:a6:dc:6d:1e:e9:39:99:42:d1:fc:01:7d:02:80:e7:b0:fa:
         1a:d6:cf:32:29:91:29:27:ad:79:3c:82:ff:fe:7c:1a:e2:c0:
         8b:64:97:f7:11:8c:11:ab:b4:ce:4d:22:4f:e4:a4:0d:0d:14:
         0a:cb:ab:7b:89:21:9b:41:d2:eb:64:ad:f6:e2:74:67:e7:43:
         81:d8:8d:86:05:90:06:0f:3c:f7:6b:64:f6:67:ac:f6:4e:68:
         62:27:2d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:19:25 2026 by rpki-client