Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/99MudSlBh9Rujq4Pj-crX9er-IY.mft
File:                     99MudSlBh9Rujq4Pj-crX9er-IY.mft (raw, json)
Hash identifier:          M/A1C6S4mg9rHp1gL4WCYvCERVI2jD1CTV+3exXq/W4=
Subject key identifier:   A2:29:0B:F1:23:7E:07:38:7A:33:27:FB:BC:A9:C6:62:A4:AF:4A:85
Authority key identifier: F7:D3:2E:75:29:41:87:D4:6E:8E:AE:0F:8F:E7:2B:5F:D7:AB:F8:86
Certificate issuer:       /CN=f7d32e75294187d46e8eae0f8fe72b5fd7abf886
Certificate serial:       019CAB3414A70D0A9814BCAAF37C3E9B141F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/99MudSlBh9Rujq4Pj-crX9er-IY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/99MudSlBh9Rujq4Pj-crX9er-IY.mft
Manifest number:          184E
Signing time:             Sun 01 Mar 2026 21:00:42 +0000
Manifest this update:     Sun 01 Mar 2026 21:00:42 +0000
Manifest next update:     Mon 02 Mar 2026 21:00:42 +0000
Files and hashes:         1: 99MudSlBh9Rujq4Pj-crX9er-IY.crl (hash: xxlcQdxL0IhaOxlbIdXTBax/+rQhipoEcong/HoaOi4=)
                          2: ALvjuEagqkX_bxCENg8XKd0AAsU.roa (hash: IQ71j6lnnVzLcsftePg8wMiGMFkrq5Obvc/qjDtIg9o=)
                          3: UXTtsC8Oa5GFJq-oeBczgV235bU.roa (hash: QROFgHuLFM3vpOALM0ZjBn/r8WQThhQx6Zrl/aYuc/o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/99MudSlBh9Rujq4Pj-crX9er-IY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/99MudSlBh9Rujq4Pj-crX9er-IY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/99MudSlBh9Rujq4Pj-crX9er-IY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 21:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:34:14:a7:0d:0a:98:14:bc:aa:f3:7c:3e:9b:14:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7d32e75294187d46e8eae0f8fe72b5fd7abf886
        Validity
            Not Before: Mar  1 21:00:42 2026 GMT
            Not After : Mar  2 21:00:42 2026 GMT
        Subject: CN=a2290bf1237e07387a3327fbbca9c662a4af4a85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:dd:a7:ba:d1:67:82:aa:54:37:07:56:71:b7:
                    16:60:fc:8d:71:da:37:ec:1b:ac:9c:f2:53:63:f3:
                    1a:8c:1f:07:f9:79:9e:6c:b0:5d:43:b2:d7:1a:03:
                    bb:1f:ea:91:33:b7:84:b4:10:d7:37:a0:f1:c8:a7:
                    d2:c7:c7:b1:c9:6f:34:ff:c3:61:dc:83:d7:e8:96:
                    65:bb:a1:53:e0:5e:76:20:e2:38:c4:f0:f2:bb:34:
                    d2:f7:e1:89:4d:1c:35:9e:b4:91:2d:1e:41:f5:43:
                    68:70:be:73:34:d8:db:56:fc:d2:d1:69:b5:9c:ce:
                    09:d6:f0:0e:63:01:02:e8:ef:cf:ef:f6:cc:74:88:
                    b3:0e:00:62:85:3b:28:32:08:5e:93:cd:5d:a9:24:
                    f3:34:2c:2d:38:a0:2b:c8:d5:1a:3b:59:03:4c:f7:
                    c5:78:59:2a:59:10:e5:72:9d:a4:b9:82:12:2e:b5:
                    76:32:04:d1:68:67:92:9b:28:59:0c:bc:30:18:b5:
                    a7:ab:36:8a:62:59:cb:ed:e4:34:e6:34:4b:4a:c8:
                    f8:f1:ab:79:c3:6d:27:10:10:a9:0f:5c:45:9b:33:
                    b3:b6:f5:b5:66:0d:bc:5e:71:19:00:90:ee:97:e5:
                    a5:f6:41:6e:38:49:8d:5e:fa:4c:3a:3d:7f:15:2a:
                    e0:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:29:0B:F1:23:7E:07:38:7A:33:27:FB:BC:A9:C6:62:A4:AF:4A:85
            X509v3 Authority Key Identifier:
                keyid:F7:D3:2E:75:29:41:87:D4:6E:8E:AE:0F:8F:E7:2B:5F:D7:AB:F8:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/99MudSlBh9Rujq4Pj-crX9er-IY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/99MudSlBh9Rujq4Pj-crX9er-IY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/99MudSlBh9Rujq4Pj-crX9er-IY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:18:50:b0:7f:e8:5c:1b:db:0b:f1:81:05:29:d4:5a:c3:c3:
         7c:0f:8b:a7:5b:00:a0:d2:93:0a:ce:76:12:2f:27:de:fb:43:
         e7:fe:57:1e:03:dd:1a:7d:a8:0b:4b:41:dd:68:c3:59:45:46:
         e8:92:92:79:cc:9b:62:18:23:86:39:96:b1:a9:fc:0b:24:0a:
         15:14:d4:ca:aa:0b:35:57:77:03:2d:33:21:5a:dd:e2:8a:5b:
         58:3f:31:79:4b:23:96:ad:d0:c7:0a:f6:68:94:35:bc:9d:f8:
         ef:ad:c8:08:31:24:fe:dc:3d:f0:86:b9:06:d4:60:9a:a7:bc:
         97:d4:37:be:35:ba:cb:3a:9d:d6:64:07:3a:9a:b3:ae:ee:65:
         11:14:02:2b:85:b3:0d:c2:bd:bd:1b:16:6f:ee:6b:8e:8e:54:
         be:47:e8:5d:74:9f:12:89:0e:f5:80:68:22:b4:e4:95:59:7d:
         59:ef:9e:68:62:20:1a:55:18:b2:a9:94:4f:0b:f0:98:8a:70:
         43:5a:54:20:54:ac:93:c2:b0:33:4a:69:ab:49:b2:0c:37:90:
         c4:2e:c0:6e:8a:53:da:98:d9:f0:07:95:5b:28:c8:1c:56:f3:
         61:62:fe:ce:cb:5e:f5:0b:a2:1e:7f:08:dd:dd:4d:3a:8d:79:
         0d:23:6e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:51 2026 by rpki-client