Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/812a15-c6e4-416a-b09d-84bf31de8413/1/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.mft
File:                     MKnJV9IJHSTg3-X2bJe-SqH5MIQ.mft (raw, json)
Hash identifier:          2wWWheBMj5/zaeSdAbsWZzAmYA/flQSZsNgJA3DJX7I=
Subject key identifier:   59:AF:59:E1:0F:19:9E:54:3C:18:2B:05:72:60:25:E3:A4:88:99:E7
Authority key identifier: 30:A9:C9:57:D2:09:1D:24:E0:DF:E5:F6:6C:97:BE:4A:A1:F9:30:84
Certificate issuer:       /CN=30a9c957d2091d24e0dfe5f66c97be4aa1f93084
Certificate serial:       019CACB4EDF60FDC0223A16107736F8D9151
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/812a15-c6e4-416a-b09d-84bf31de8413/1/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.mft
Manifest number:          1844
Signing time:             Mon 02 Mar 2026 04:01:04 +0000
Manifest this update:     Mon 02 Mar 2026 04:01:04 +0000
Manifest next update:     Tue 03 Mar 2026 04:01:04 +0000
Files and hashes:         1: MKnJV9IJHSTg3-X2bJe-SqH5MIQ.crl (hash: hdSBpzV0ehazNGRdvujC1y4w2bfzUvb/1w7YKEfOZOk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/812a15-c6e4-416a-b09d-84bf31de8413/1/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/812a15-c6e4-416a-b09d-84bf31de8413/1/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:b4:ed:f6:0f:dc:02:23:a1:61:07:73:6f:8d:91:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30a9c957d2091d24e0dfe5f66c97be4aa1f93084
        Validity
            Not Before: Mar  2 04:01:04 2026 GMT
            Not After : Mar  3 04:01:04 2026 GMT
        Subject: CN=59af59e10f199e543c182b05726025e3a48899e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b3:74:70:73:1e:cb:3b:2e:0b:5f:6b:9c:20:
                    bc:a7:e5:48:0f:98:91:3a:0b:49:3c:5d:7d:de:e9:
                    c7:77:0b:24:5f:ec:0c:d8:c2:b1:c1:14:f6:c0:fe:
                    47:37:6c:de:b2:84:c6:1b:8b:7e:14:c2:29:a0:68:
                    89:7a:1b:c0:f8:7e:b9:2e:50:3e:af:7b:fd:52:69:
                    ec:a8:85:a8:0f:6a:3a:da:4b:86:6f:de:c2:4c:d8:
                    fc:e9:09:4f:41:af:8f:e7:42:cf:be:49:4f:32:f2:
                    7e:4c:6e:91:f5:81:5f:58:b0:64:83:4a:11:13:8c:
                    67:d5:b0:fa:79:ef:02:74:26:a8:7a:21:b6:e5:95:
                    e2:38:b0:2d:70:8b:01:67:d6:e2:04:c1:55:a0:18:
                    3d:cc:18:12:2a:7d:08:d8:27:9c:52:a2:c6:a7:29:
                    5f:0f:81:40:7d:40:ee:60:b5:97:49:5a:45:c2:8d:
                    50:06:75:05:f3:16:1d:4c:61:f6:09:da:0c:d9:71:
                    20:eb:25:de:48:58:f8:44:a7:04:e4:f2:58:cd:7b:
                    b4:56:e1:c2:3a:0d:f2:a5:95:15:91:fc:68:1c:bf:
                    b3:aa:e9:d9:53:b6:22:de:1a:09:dc:51:4c:e5:28:
                    7b:f7:9f:2c:ce:35:7a:f3:2a:b5:5d:0b:b8:43:95:
                    a0:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:AF:59:E1:0F:19:9E:54:3C:18:2B:05:72:60:25:E3:A4:88:99:E7
            X509v3 Authority Key Identifier:
                keyid:30:A9:C9:57:D2:09:1D:24:E0:DF:E5:F6:6C:97:BE:4A:A1:F9:30:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/812a15-c6e4-416a-b09d-84bf31de8413/1/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/812a15-c6e4-416a-b09d-84bf31de8413/1/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:b8:af:c6:fd:6d:8c:dc:63:5e:71:09:60:21:c8:b9:e6:b0:
         8c:a5:8a:fa:1c:24:5d:a8:7e:13:28:df:69:16:af:ac:e0:63:
         0d:c1:f8:03:7e:12:fc:b2:99:a8:a0:36:bb:c1:19:e2:b6:f1:
         56:1e:d7:bb:b3:c4:a0:c2:91:b0:06:fb:da:08:ec:c3:90:97:
         fc:71:85:bb:67:41:52:29:89:a4:88:1b:ac:4b:c8:1b:0f:4a:
         3f:28:86:5d:11:09:d4:70:14:8b:ec:6b:24:a6:d3:ef:46:74:
         51:d0:57:9c:c5:2b:59:76:81:d0:dd:e7:5b:4a:a1:72:bc:ba:
         86:ee:ab:aa:5a:e0:7b:9b:80:0e:05:bf:d1:77:fe:d9:dc:59:
         34:62:3e:73:55:3f:6c:ef:6f:6e:34:14:8b:d4:0c:f5:1c:16:
         0d:a6:ad:45:39:e4:b9:ea:93:c6:cd:f5:84:d5:61:06:66:b7:
         87:2b:15:d1:45:1c:92:74:e6:00:1f:e4:26:73:03:85:13:61:
         0b:ca:b8:98:ac:ac:96:63:00:a0:f8:61:ce:01:1b:63:6d:76:
         f1:79:a2:75:57:0d:b6:0a:6f:63:3b:f4:a3:2b:80:2c:ff:4d:
         6d:d4:43:f9:6c:cd:1e:b1:4e:9b:e7:83:8f:cf:32:a0:f6:a7:
         ba:ef:c9:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:41:24 2026 by rpki-client