Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/51a115-de86-4407-a963-1c5c20d13ef8/1/MlPNw--1IdnV5wqcxeRxsBWGA2o.mft
File:                     MlPNw--1IdnV5wqcxeRxsBWGA2o.mft (raw, json)
Hash identifier:          W0s7u5fuN3XyMx2X45cJ1ioGiMfUMW6KJ1KaZkgcUxE=
Subject key identifier:   32:30:92:6F:10:DF:7A:C3:13:96:B5:D5:CF:57:5E:5B:94:30:34:9A
Authority key identifier: 32:53:CD:C3:EF:B5:21:D9:D5:E7:0A:9C:C5:E4:71:B0:15:86:03:6A
Certificate issuer:       /CN=3253cdc3efb521d9d5e70a9cc5e471b01586036a
Certificate serial:       019CAD5A290275946862FB8AC3FE2D1FD840
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MlPNw--1IdnV5wqcxeRxsBWGA2o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/51a115-de86-4407-a963-1c5c20d13ef8/1/MlPNw--1IdnV5wqcxeRxsBWGA2o.mft
Manifest number:          0B6B
Signing time:             Mon 02 Mar 2026 07:01:32 +0000
Manifest this update:     Mon 02 Mar 2026 07:01:32 +0000
Manifest next update:     Tue 03 Mar 2026 07:01:32 +0000
Files and hashes:         1: MlPNw--1IdnV5wqcxeRxsBWGA2o.crl (hash: WEdbEwX39NeyyqZyfT6xLEGD8VMMbb7APWJkWZUdFzk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/51a115-de86-4407-a963-1c5c20d13ef8/1/MlPNw--1IdnV5wqcxeRxsBWGA2o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/51a115-de86-4407-a963-1c5c20d13ef8/1/MlPNw--1IdnV5wqcxeRxsBWGA2o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MlPNw--1IdnV5wqcxeRxsBWGA2o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 07:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:5a:29:02:75:94:68:62:fb:8a:c3:fe:2d:1f:d8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3253cdc3efb521d9d5e70a9cc5e471b01586036a
        Validity
            Not Before: Mar  2 07:01:32 2026 GMT
            Not After : Mar  3 07:01:32 2026 GMT
        Subject: CN=3230926f10df7ac31396b5d5cf575e5b9430349a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:bf:1e:b5:56:4e:39:ed:63:7f:4c:0c:d6:d2:
                    0f:2b:4f:4a:87:e1:97:03:63:3b:8d:02:a9:35:db:
                    62:3d:23:1e:46:59:4f:13:49:94:87:55:ab:28:66:
                    1b:af:bd:a7:02:9e:8f:bb:55:bc:d4:08:36:d2:e9:
                    b5:3e:e5:59:24:fc:de:b0:9d:60:15:3c:28:3b:78:
                    b2:c1:a5:fc:55:ab:c2:e1:bf:2c:41:5d:2b:a8:c1:
                    f2:cc:88:ac:e6:4c:04:64:36:11:5e:f1:9e:8e:19:
                    dd:f8:95:d8:2b:4d:b7:ef:d3:13:6e:01:11:83:e3:
                    2c:df:97:76:9a:a0:0a:89:21:ca:8d:93:44:3c:f6:
                    45:0f:54:80:33:d4:c5:da:3b:cd:c4:95:b4:41:97:
                    02:33:b8:54:4b:8c:80:22:eb:c0:82:28:6b:c3:74:
                    cb:d2:16:d7:39:7e:4b:b1:f0:f1:1f:ce:3d:b9:82:
                    b9:0c:c8:2c:d5:8e:38:e8:27:56:96:2b:21:33:48:
                    91:c9:87:5a:ef:8e:2b:a3:f2:63:ee:5e:9a:32:ad:
                    dc:c0:3b:24:9c:b7:73:47:3d:97:d6:7e:4f:8e:a9:
                    47:3c:f5:a8:f8:cb:d7:d8:78:9b:f4:0b:93:2e:82:
                    af:97:ba:65:5f:c3:29:7f:e5:fd:10:f9:6f:6b:e9:
                    a0:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:30:92:6F:10:DF:7A:C3:13:96:B5:D5:CF:57:5E:5B:94:30:34:9A
            X509v3 Authority Key Identifier:
                keyid:32:53:CD:C3:EF:B5:21:D9:D5:E7:0A:9C:C5:E4:71:B0:15:86:03:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlPNw--1IdnV5wqcxeRxsBWGA2o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/51a115-de86-4407-a963-1c5c20d13ef8/1/MlPNw--1IdnV5wqcxeRxsBWGA2o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/51a115-de86-4407-a963-1c5c20d13ef8/1/MlPNw--1IdnV5wqcxeRxsBWGA2o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:95:ea:af:5e:e6:12:9a:12:0a:b8:82:bf:a1:10:a3:e1:9c:
         f1:f3:95:ea:db:33:a5:67:0e:c0:99:51:af:01:f4:34:96:27:
         67:0a:bd:a8:d0:8a:39:b6:ed:97:de:79:28:0b:48:bc:41:a8:
         8a:be:e8:3f:5a:31:14:bb:bb:e8:3a:fe:7a:82:68:cf:4f:ee:
         31:61:46:be:b0:ba:dc:e6:d7:ed:20:22:cb:60:00:ee:3e:8a:
         70:a6:c2:43:19:bf:3c:98:18:ba:85:93:9f:5f:5a:89:3d:16:
         6e:ff:a7:fc:16:9d:4e:6f:ae:1a:6a:5b:c9:37:1f:1b:f2:8e:
         c0:2c:01:58:95:e5:b1:c5:0c:e9:e9:8d:cf:82:1d:d0:0a:79:
         e6:c3:97:8c:4f:5c:13:2f:ee:12:56:ed:56:cc:34:e1:72:b6:
         7f:84:ec:c4:39:49:82:dc:a9:f5:a8:58:ee:bb:12:10:49:38:
         dd:fc:07:01:b8:9f:1f:ed:32:27:ff:ff:f5:de:f5:c0:91:0c:
         bf:11:c9:9a:eb:50:bd:81:62:bf:f8:84:4b:45:25:33:9b:e5:
         40:35:6f:89:80:66:78:73:52:d3:c8:1f:d6:3d:88:fc:cd:6e:
         aa:35:51:6a:89:45:84:c2:aa:6a:50:ba:54:a0:69:cd:63:30:
         89:67:d5:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:17:16 2026 by rpki-client