Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.mft
File:                     MdqSAyHGyCzuaSnnmPyTcrrMuSU.mft (raw, json)
Hash identifier:          5yM9N4G88C5YKm0u0glBB9bf6RkYWhUcW9JnlMEpgpg=
Subject key identifier:   BA:26:18:D5:B2:0D:5A:8B:74:AE:11:62:4F:0C:53:64:CE:5B:79:D3
Authority key identifier: 31:DA:92:03:21:C6:C8:2C:EE:69:29:E7:98:FC:93:72:BA:CC:B9:25
Certificate issuer:       /CN=31da920321c6c82cee6929e798fc9372baccb925
Certificate serial:       019CAB6B372CCCDE8ED4AB58F09D76077DA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MdqSAyHGyCzuaSnnmPyTcrrMuSU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.mft
Manifest number:          0A41
Signing time:             Sun 01 Mar 2026 22:00:56 +0000
Manifest this update:     Sun 01 Mar 2026 22:00:56 +0000
Manifest next update:     Mon 02 Mar 2026 22:00:56 +0000
Files and hashes:         1: MdqSAyHGyCzuaSnnmPyTcrrMuSU.crl (hash: 1sW4/4NI14W/cpDRM15sUBZFmoYzWWbNsoj+6OizIFg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MdqSAyHGyCzuaSnnmPyTcrrMuSU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:6b:37:2c:cc:de:8e:d4:ab:58:f0:9d:76:07:7d:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31da920321c6c82cee6929e798fc9372baccb925
        Validity
            Not Before: Mar  1 22:00:56 2026 GMT
            Not After : Mar  2 22:00:56 2026 GMT
        Subject: CN=ba2618d5b20d5a8b74ae11624f0c5364ce5b79d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:22:8e:b8:85:52:aa:c3:29:a8:48:00:21:b9:
                    12:14:1f:61:d3:bc:b9:b8:ba:ec:4f:ec:14:fc:79:
                    d8:f3:79:00:77:8a:d4:c9:80:ed:10:9a:66:5c:1d:
                    e2:77:62:97:cd:3d:8a:94:df:30:75:3c:88:f4:8e:
                    4a:e5:2e:c8:60:26:7b:b6:cd:df:42:c5:94:7c:3d:
                    6c:e2:07:0e:7c:99:0d:9b:5e:d8:6f:37:0a:21:12:
                    4c:9a:24:69:f1:73:37:8c:09:2d:b4:61:b1:f7:96:
                    cd:31:88:cf:a8:67:49:41:4e:f5:18:8a:e6:82:21:
                    30:24:69:93:e6:44:cf:28:19:3c:df:11:b7:d1:3d:
                    30:2a:8c:da:71:30:18:d9:b4:e8:fc:7d:c4:76:dc:
                    1a:12:97:d8:66:91:1b:fc:47:8a:14:4a:c1:a3:d5:
                    3b:2c:38:e3:22:d7:8f:cc:00:c2:dd:1b:62:f0:7b:
                    31:51:1a:20:e6:d5:5c:b5:d0:a0:18:91:84:1c:f0:
                    78:c0:a0:b4:fe:34:62:64:6c:5d:aa:4c:07:6f:41:
                    20:e4:44:17:00:7c:75:44:38:21:ca:0a:9a:ad:75:
                    1b:de:51:e3:38:eb:b7:c9:43:0b:e4:0c:92:fb:10:
                    eb:4d:33:d9:75:b9:6e:cd:bd:45:49:88:56:b8:75:
                    0c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:26:18:D5:B2:0D:5A:8B:74:AE:11:62:4F:0C:53:64:CE:5B:79:D3
            X509v3 Authority Key Identifier:
                keyid:31:DA:92:03:21:C6:C8:2C:EE:69:29:E7:98:FC:93:72:BA:CC:B9:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdqSAyHGyCzuaSnnmPyTcrrMuSU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:87:a2:42:b3:0d:79:94:04:60:c9:b6:0d:f5:98:c5:e6:23:
         d2:0a:76:50:cd:02:fb:d6:eb:d0:29:14:69:40:66:30:13:27:
         85:74:a0:dc:1c:66:2f:b0:49:b9:03:6e:0e:48:83:cf:d6:71:
         64:92:fe:36:21:70:3b:4d:d9:2e:7e:5b:f9:c5:6b:92:aa:af:
         f4:0e:2d:2e:77:92:db:43:4c:b0:cd:0d:3a:50:f5:06:f0:2b:
         ea:4d:a8:81:6c:cd:d3:bb:a1:ba:bb:c4:06:55:0f:da:e3:04:
         c2:17:ee:cb:1f:10:12:4a:34:0a:33:cf:c7:6b:52:3a:26:d1:
         2c:e7:ef:c9:8d:6e:ec:19:9c:7b:51:3f:08:dd:1d:82:00:c5:
         11:54:27:0a:cb:cb:fd:70:29:c7:ba:ca:98:84:5c:08:ed:46:
         64:2f:0f:85:4d:44:e3:d0:d5:ca:5c:b3:24:26:02:55:67:24:
         f9:11:ec:05:73:26:04:ab:29:f5:ee:a6:34:40:37:ff:c2:35:
         3c:07:01:5c:d1:0e:59:c3:fe:92:3d:6f:6e:93:09:38:c4:10:
         ef:dd:03:ad:43:72:31:51:73:78:0a:b3:df:6b:59:4e:c4:d6:
         b7:97:f9:ad:48:22:d3:7f:ce:7c:9e:8a:83:30:1a:81:19:87:
         40:e2:78:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrazcszN6O1KtY8J12B32mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZGE5MjAzMjFjNmM4MmNlZTY5MjllNzk4ZmM5MzcyYmFj
Y2I5MjUwHhcNMjYwMzAxMjIwMDU2WhcNMjYwMzAyMjIwMDU2WjAzMTEwLwYDVQQD
EyhiYTI2MThkNWIyMGQ1YThiNzRhZTExNjI0ZjBjNTM2NGNlNWI3OWQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyKOuIVSqsMpqEgAIbkSFB9h07y5
uLrsT+wU/HnY83kAd4rUyYDtEJpmXB3id2KXzT2KlN8wdTyI9I5K5S7IYCZ7ts3f
QsWUfD1s4gcOfJkNm17YbzcKIRJMmiRp8XM3jAkttGGx95bNMYjPqGdJQU71GIrm
giEwJGmT5kTPKBk83xG30T0wKozacTAY2bTo/H3EdtwaEpfYZpEb/EeKFErBo9U7
LDjjItePzADC3Rti8HsxURog5tVctdCgGJGEHPB4wKC0/jRiZGxdqkwHb0Eg5EQX
AHx1RDghygqarXUb3lHjOOu3yUML5AyS+xDrTTPZdbluzb1FSYhWuHUM2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLomGNWyDVqLdK4RYk8MU2TOW3nTMB8GA1UdIwQY
MBaAFDHakgMhxsgs7mkp55j8k3K6zLklMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWRxU0F5SEd5Q3p1YVNubm1QeVRjcnJNdVNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC80OTFjOTItODk2Ny00NzNlLTllYTct
YTU4OTc4N2JmZjkwLzEvTWRxU0F5SEd5Q3p1YVNubm1QeVRjcnJNdVNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC80OTFjOTItODk2Ny00NzNlLTllYTctYTU4OTc4N2JmZjkw
LzEvTWRxU0F5SEd5Q3p1YVNubm1QeVRjcnJNdVNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeoeiQrMN
eZQEYMm2DfWYxeYj0gp2UM0C+9br0CkUaUBmMBMnhXSg3BxmL7BJuQNuDkiDz9Zx
ZJL+NiFwO03ZLn5b+cVrkqqv9A4tLneS20NMsM0NOlD1BvAr6k2ogWzN07uhurvE
BlUP2uMEwhfuyx8QEko0CjPPx2tSOibRLOfvyY1u7Bmce1E/CN0dggDFEVQnCsvL
/XApx7rKmIRcCO1GZC8PhU1E49DVylyzJCYCVWck+RHsBXMmBKsp9e6mNEA3/8I1
PAcBXNEOWcP+kj1vbpMJOMQQ790DrUNyMVFzeAqz32tZTsTWt5f5rUgi03/OfJ6K
gzAagRmHQOJ4mA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:22:29 2026 by rpki-client