Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/6004cc-ba89-4810-a23b-27565879af5c/1/mjUUk6-IflRNzAGhE7d1KLyYe84.mft
File:                     mjUUk6-IflRNzAGhE7d1KLyYe84.mft (raw, json)
Hash identifier:          X/wYQUkOW9qho8Uj0MRddEWE0W4x0xBEeqtJOuRy9LE=
Subject key identifier:   C9:31:D9:8F:E1:0E:2A:54:DD:06:D8:70:C1:28:50:15:B6:07:3C:95
Authority key identifier: 9A:35:14:93:AF:88:7E:54:4D:CC:01:A1:13:B7:75:28:BC:98:7B:CE
Certificate issuer:       /CN=9a351493af887e544dcc01a113b77528bc987bce
Certificate serial:       019CABD93CEFB42D1C4A1B85B1D2AF23AAF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mjUUk6-IflRNzAGhE7d1KLyYe84.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/6004cc-ba89-4810-a23b-27565879af5c/1/mjUUk6-IflRNzAGhE7d1KLyYe84.mft
Manifest number:          11C2
Signing time:             Mon 02 Mar 2026 00:01:06 +0000
Manifest this update:     Mon 02 Mar 2026 00:01:06 +0000
Manifest next update:     Tue 03 Mar 2026 00:01:06 +0000
Files and hashes:         1: mjUUk6-IflRNzAGhE7d1KLyYe84.crl (hash: AhiWk6CpXE2fnEQB3mkMb6PJ0XlMcKSaH8VqitAuOq8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/6004cc-ba89-4810-a23b-27565879af5c/1/mjUUk6-IflRNzAGhE7d1KLyYe84.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/6004cc-ba89-4810-a23b-27565879af5c/1/mjUUk6-IflRNzAGhE7d1KLyYe84.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mjUUk6-IflRNzAGhE7d1KLyYe84.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d9:3c:ef:b4:2d:1c:4a:1b:85:b1:d2:af:23:aa:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a351493af887e544dcc01a113b77528bc987bce
        Validity
            Not Before: Mar  2 00:01:06 2026 GMT
            Not After : Mar  3 00:01:06 2026 GMT
        Subject: CN=c931d98fe10e2a54dd06d870c1285015b6073c95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:5d:b6:8f:ed:2d:13:19:3a:76:54:43:a2:84:
                    5f:46:3e:5b:60:1d:93:c5:07:f7:94:29:61:0c:b6:
                    3d:54:e7:21:0a:34:fe:e3:dc:5b:e9:4a:10:b5:aa:
                    a0:a8:3b:b5:f3:09:50:8f:d8:5b:dd:c9:57:e3:2a:
                    34:ce:eb:cc:1d:61:37:9e:c5:dd:0b:de:0e:bc:31:
                    54:58:00:c8:cf:70:d1:c5:dc:fe:15:3e:58:d8:87:
                    93:f3:8b:c0:67:7e:a4:29:4d:e9:c0:a3:72:ad:24:
                    ad:58:5c:5e:fb:1b:4a:8b:c3:9f:ce:16:ca:c0:e8:
                    6c:5f:59:dc:b5:e7:a3:45:22:de:50:d0:2e:36:ef:
                    17:58:2e:1e:d8:50:5f:86:13:1b:4a:ce:07:0f:3f:
                    46:b9:15:f4:9a:a8:93:7f:e8:d1:63:bb:4a:ea:c6:
                    8a:18:ae:a7:40:d5:57:48:91:a2:ad:1b:74:85:1e:
                    a5:bf:a5:0b:42:cb:7b:ce:5e:53:9c:be:7a:5c:56:
                    11:49:15:f3:ca:80:c8:b8:c1:3f:6a:fd:66:22:5b:
                    87:be:cf:88:37:c0:60:35:f0:11:2d:5a:b6:89:cb:
                    7d:3c:31:56:23:68:09:99:3e:f7:47:c3:41:ad:0b:
                    b2:09:67:9c:26:8f:2c:a7:9d:73:af:7c:6d:c8:11:
                    7a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:31:D9:8F:E1:0E:2A:54:DD:06:D8:70:C1:28:50:15:B6:07:3C:95
            X509v3 Authority Key Identifier:
                keyid:9A:35:14:93:AF:88:7E:54:4D:CC:01:A1:13:B7:75:28:BC:98:7B:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mjUUk6-IflRNzAGhE7d1KLyYe84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6004cc-ba89-4810-a23b-27565879af5c/1/mjUUk6-IflRNzAGhE7d1KLyYe84.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6004cc-ba89-4810-a23b-27565879af5c/1/mjUUk6-IflRNzAGhE7d1KLyYe84.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:e8:b5:ce:10:ef:ca:df:76:ae:e6:23:f0:42:3f:6c:e0:3a:
         af:e9:44:33:35:93:14:ab:53:99:8b:16:a8:d1:70:77:43:c3:
         b6:ef:93:2e:11:76:fd:05:e4:0a:3b:fb:89:e0:86:cf:0b:24:
         ab:0b:4d:a8:69:55:88:d9:37:ee:54:23:2a:60:4e:c8:d2:e7:
         09:77:cc:78:f1:fd:d9:1d:d8:2a:9c:2d:1d:1e:ac:77:de:61:
         63:1e:61:22:84:63:78:79:79:bc:6a:8b:73:27:51:f8:2a:44:
         21:cf:41:f4:c8:37:be:8f:f7:a8:ad:63:e9:82:94:f3:e2:c2:
         f0:76:1c:71:7d:0b:fb:1e:ae:5d:cd:c5:13:de:31:b2:11:7d:
         21:4d:09:d4:74:e2:30:de:54:71:c9:bb:91:0b:53:17:eb:e8:
         fa:63:d3:1a:c1:bc:10:e4:b2:8f:cd:52:37:ac:9d:67:8a:cc:
         21:01:f9:6a:12:a0:bf:2a:f3:47:31:e1:cc:a4:fe:69:0f:fc:
         76:67:4c:96:cf:20:e1:8f:d0:b7:51:c4:1a:bb:22:d9:39:98:
         64:96:c7:22:80:5b:2c:34:50:6b:ab:9f:b9:31:2b:e7:79:65:
         35:8b:d7:a1:f0:55:c4:97:8b:64:52:0c:a5:27:fb:c3:e4:44:
         52:bd:bd:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:45:26 2026 by rpki-client