Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.mft
File:                     mrlC3a28mskLTs---tsjEyOmcFU.mft (raw, json)
Hash identifier:          mjjBZ+PY70i+qIJAoJJg2bI2Fh2mCte+eu9ggyjX3eU=
Subject key identifier:   5A:88:60:41:15:0B:BE:4F:04:82:D0:B3:44:8F:0C:C1:0E:83:1A:A2
Authority key identifier: 9A:B9:42:DD:AD:BC:9A:C9:0B:4E:CF:BE:FA:DB:23:13:23:A6:70:55
Certificate issuer:       /CN=9ab942ddadbc9ac90b4ecfbefadb231323a67055
Certificate serial:       019CABD98869995E4C55148BA262243A193F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mrlC3a28mskLTs---tsjEyOmcFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.mft
Manifest number:          0F2B
Signing time:             Mon 02 Mar 2026 00:01:25 +0000
Manifest this update:     Mon 02 Mar 2026 00:01:25 +0000
Manifest next update:     Tue 03 Mar 2026 00:01:25 +0000
Files and hashes:         1: mrlC3a28mskLTs---tsjEyOmcFU.crl (hash: AH+0PMWwosfMe73IOSqA/adzQwWlEq+CpRzCQhVtOHE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mrlC3a28mskLTs---tsjEyOmcFU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d9:88:69:99:5e:4c:55:14:8b:a2:62:24:3a:19:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab942ddadbc9ac90b4ecfbefadb231323a67055
        Validity
            Not Before: Mar  2 00:01:25 2026 GMT
            Not After : Mar  3 00:01:25 2026 GMT
        Subject: CN=5a886041150bbe4f0482d0b3448f0cc10e831aa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:51:bb:72:3f:54:fb:83:c2:31:e7:9c:73:e8:
                    d9:20:7c:5c:ba:63:d9:a5:91:5d:9a:c4:9e:5e:93:
                    de:82:92:b3:1b:d3:28:19:41:c2:fb:5f:dc:62:43:
                    52:c9:a7:aa:7b:81:04:6f:36:2d:bd:b6:41:18:f6:
                    07:d7:4a:60:d0:65:e5:38:68:8d:07:8e:79:61:ff:
                    cb:f4:6b:9e:8d:56:f6:ad:e3:b4:85:f7:57:c8:48:
                    02:16:d5:d4:5d:01:34:13:98:99:3e:a9:34:7e:46:
                    73:a6:c9:4b:5b:96:cb:8c:15:6b:9a:b6:4e:12:1b:
                    93:5a:9c:29:c7:17:7b:1a:14:5c:60:2a:37:fd:c9:
                    5e:da:e2:8a:a0:c8:91:49:4f:a0:da:aa:b8:87:cc:
                    97:63:58:34:03:41:e4:fc:61:f7:69:b4:95:89:45:
                    61:fb:57:2a:8e:eb:af:1e:50:99:30:2b:5b:d4:2e:
                    23:a4:7b:82:b6:93:d4:b3:0b:8e:15:0f:8e:63:4e:
                    6a:e6:a8:20:de:22:e8:e5:4a:e9:6f:2e:f0:03:79:
                    36:70:19:36:ca:58:fa:6f:7f:83:74:e3:d4:d7:1e:
                    fe:c5:48:5f:b1:6a:04:6b:17:da:28:05:fa:d0:45:
                    eb:2f:de:53:38:71:34:cf:aa:4d:af:68:63:7f:2e:
                    e3:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:88:60:41:15:0B:BE:4F:04:82:D0:B3:44:8F:0C:C1:0E:83:1A:A2
            X509v3 Authority Key Identifier:
                keyid:9A:B9:42:DD:AD:BC:9A:C9:0B:4E:CF:BE:FA:DB:23:13:23:A6:70:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mrlC3a28mskLTs---tsjEyOmcFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:be:34:bd:55:19:3b:98:8c:1e:13:ca:c2:1c:8b:b6:4d:ca:
         59:be:9c:af:43:ed:bb:ef:d0:83:ed:aa:b1:59:99:53:2d:9c:
         bd:f9:a3:dd:e2:08:c0:8a:8b:40:a6:5c:12:3d:30:3d:44:e2:
         69:8c:d8:5d:ca:1b:6d:d3:75:98:72:55:e6:7e:01:c3:20:30:
         51:a3:11:6d:5f:3d:91:41:54:6d:76:23:60:8f:e1:15:51:59:
         e6:60:9b:f0:b9:71:10:d7:5d:f4:b8:0a:6b:6f:e7:9a:21:8e:
         3c:fa:91:65:c8:63:a7:01:f7:0b:93:13:df:c7:f9:78:c0:3e:
         2d:a0:0c:74:4a:98:62:40:28:2a:db:db:70:c0:ee:5f:af:21:
         75:c0:2b:55:a4:b9:c9:27:b9:a7:7c:a4:40:65:6b:de:0b:0c:
         9a:ff:51:f7:d8:86:0b:eb:9c:09:27:6d:3e:63:4a:22:c2:3d:
         96:b1:f6:96:e1:bf:20:70:27:7a:8d:a1:cc:65:5e:c9:31:63:
         0c:ff:b4:97:fb:5d:71:d4:99:29:b1:f3:c6:fe:37:9d:cb:06:
         44:62:27:3b:0b:d4:ff:6f:53:31:d9:f6:44:90:78:da:ea:d6:
         79:94:31:49:aa:03:1c:6f:7c:20:ec:5c:d0:a3:ba:40:8b:b7:
         39:4c:08:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:28:38 2026 by rpki-client