Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/46615c-a7df-425b-9590-d21e143f75b2/1/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.mft
File:                     MwvI_ZSeZR2TKFzLwdoTOTt4MwU.mft (raw, json)
Hash identifier:          HqdvzECkc/nUccgbac36iyi7Kgg5X7wZqCIybYpkyZU=
Subject key identifier:   52:D9:3A:8B:2A:84:66:7F:68:F2:B9:81:82:4F:55:DC:95:F5:81:E5
Authority key identifier: 33:0B:C8:FD:94:9E:65:1D:93:28:5C:CB:C1:DA:13:39:3B:78:33:05
Certificate issuer:       /CN=330bc8fd949e651d93285ccbc1da13393b783305
Certificate serial:       019CAA8FD0751CCAC2CCF2EFD12432B225FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/46615c-a7df-425b-9590-d21e143f75b2/1/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.mft
Manifest number:          123D
Signing time:             Sun 01 Mar 2026 18:01:17 +0000
Manifest this update:     Sun 01 Mar 2026 18:01:17 +0000
Manifest next update:     Mon 02 Mar 2026 18:01:17 +0000
Files and hashes:         1: MwvI_ZSeZR2TKFzLwdoTOTt4MwU.crl (hash: qvdBt+pxWWAFY6Dzb6QSJaCPzyp9zy07z0dgONYoObI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/46615c-a7df-425b-9590-d21e143f75b2/1/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/46615c-a7df-425b-9590-d21e143f75b2/1/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:8f:d0:75:1c:ca:c2:cc:f2:ef:d1:24:32:b2:25:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=330bc8fd949e651d93285ccbc1da13393b783305
        Validity
            Not Before: Mar  1 18:01:17 2026 GMT
            Not After : Mar  2 18:01:17 2026 GMT
        Subject: CN=52d93a8b2a84667f68f2b981824f55dc95f581e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0f:7b:3a:d1:db:23:bd:5d:c2:15:b5:71:01:
                    d5:55:33:80:f8:67:15:d6:d0:93:3a:1c:a2:73:91:
                    ea:02:a8:ce:39:bf:43:fc:1b:de:e5:2d:5f:2f:bf:
                    c3:2c:45:c2:24:ed:c2:3f:49:41:33:f5:40:cc:7b:
                    13:79:e8:22:39:82:95:16:ab:65:66:e1:9a:c0:89:
                    8d:30:0f:7b:c8:f5:89:d2:f5:af:62:a9:32:89:eb:
                    8c:19:7d:bc:2a:78:2f:66:6a:2c:e8:49:22:38:35:
                    72:36:97:17:17:6d:c5:45:4a:d4:20:f3:95:19:7c:
                    ec:f8:b6:70:4f:10:d4:15:19:ba:f7:63:4d:04:c7:
                    53:40:70:cf:bd:4d:b9:80:f6:f0:31:59:10:10:c0:
                    e7:d3:4b:a9:c1:49:9f:71:26:f7:6f:e0:cd:eb:ab:
                    44:9e:8b:bf:06:7e:63:bf:15:07:76:65:d3:1b:bc:
                    46:8a:09:de:30:b0:77:e7:28:7f:81:0a:41:ae:76:
                    07:e7:43:64:62:3a:d3:31:03:38:2b:08:de:8e:65:
                    c9:a1:4a:a8:32:d5:27:29:46:d0:2f:8d:2c:6b:95:
                    10:d4:bc:b7:80:1d:6b:4e:39:17:9d:48:12:13:52:
                    d1:2b:c7:95:be:df:64:1a:56:e6:69:77:9d:16:bb:
                    d4:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:D9:3A:8B:2A:84:66:7F:68:F2:B9:81:82:4F:55:DC:95:F5:81:E5
            X509v3 Authority Key Identifier:
                keyid:33:0B:C8:FD:94:9E:65:1D:93:28:5C:CB:C1:DA:13:39:3B:78:33:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/46615c-a7df-425b-9590-d21e143f75b2/1/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/46615c-a7df-425b-9590-d21e143f75b2/1/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:22:e3:8b:e6:e1:e0:2b:66:ac:d2:1c:90:d8:fe:d6:8f:4c:
         f6:ce:5c:fc:aa:9a:28:a0:67:24:ea:38:4b:61:30:ff:4e:6e:
         6a:93:2e:aa:a6:d9:c2:88:01:a7:80:16:71:b1:36:ca:ff:27:
         56:5e:37:3e:85:1c:b9:4f:69:5d:c4:7d:57:be:b5:ee:bd:7b:
         5d:7c:91:94:9d:cf:b1:ee:f7:8f:9a:57:27:0f:13:b8:08:b5:
         7a:7b:16:ad:0e:a1:d6:ff:9f:38:98:9d:2d:b9:6c:5d:d8:02:
         00:e1:28:dc:9a:61:f8:90:18:f6:38:1a:b2:4d:38:76:35:d6:
         85:88:f0:84:cc:03:78:bc:6a:f1:62:33:07:a6:b0:53:e7:3e:
         8e:49:3a:5b:05:89:8a:d7:1a:c4:19:45:43:52:9f:4e:9a:45:
         5f:b2:81:ec:87:10:36:d0:62:f6:a6:dd:79:93:e0:b7:44:99:
         6b:1c:a6:07:cd:8f:c4:5e:cd:ed:94:ac:b1:8c:e8:a9:68:08:
         14:6f:0c:dd:fa:c9:7b:47:91:a5:e1:98:c4:5a:07:49:b1:d7:
         ac:b1:d3:e7:b2:50:75:23:67:74:e6:ae:18:90:48:0e:19:89:
         44:29:39:ca:da:68:2a:c3:27:16:93:26:11:94:37:2e:e0:b4:
         75:f0:a5:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:06:11 2026 by rpki-client