Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/Elriz9MVwTEZNIRmWsrafAExY-w.mft
File:                     Elriz9MVwTEZNIRmWsrafAExY-w.mft (raw, json)
Hash identifier:          Xs4gb1u8uMG8wwLcKDCVivRpqxpW6UbmhBnWpkXfse4=
Subject key identifier:   32:F7:64:91:14:2F:37:D6:1C:86:F9:15:70:4C:5A:B5:79:15:B1:09
Authority key identifier: 12:5A:E2:CF:D3:15:C1:31:19:34:84:66:5A:CA:DA:7C:01:31:63:EC
Certificate issuer:       /CN=125ae2cfd315c131193484665acada7c013163ec
Certificate serial:       019CAAC6D2523C629A4818F802AB45BCFF3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Elriz9MVwTEZNIRmWsrafAExY-w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/Elriz9MVwTEZNIRmWsrafAExY-w.mft
Manifest number:          184F
Signing time:             Sun 01 Mar 2026 19:01:22 +0000
Manifest this update:     Sun 01 Mar 2026 19:01:22 +0000
Manifest next update:     Mon 02 Mar 2026 19:01:22 +0000
Files and hashes:         1: Elriz9MVwTEZNIRmWsrafAExY-w.crl (hash: GmQNxEpg7/gF4p+8nuzr3NDIEmHc8Gs3Z1+qwk2iibM=)
                          2: tzM4Lhas_5Err3uhIOugP7tZ2zA.roa (hash: O2meUFIJ8JO+/3JVTDSwDnZ6NU03UbjSV1N5GHCHgZo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/Elriz9MVwTEZNIRmWsrafAExY-w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/Elriz9MVwTEZNIRmWsrafAExY-w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Elriz9MVwTEZNIRmWsrafAExY-w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 19:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c6:d2:52:3c:62:9a:48:18:f8:02:ab:45:bc:ff:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=125ae2cfd315c131193484665acada7c013163ec
        Validity
            Not Before: Mar  1 19:01:22 2026 GMT
            Not After : Mar  2 19:01:22 2026 GMT
        Subject: CN=32f76491142f37d61c86f915704c5ab57915b109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d0:94:80:c3:82:14:0a:bb:a1:5b:69:57:ea:
                    6d:df:0c:2f:f9:ad:99:41:ec:86:db:60:7f:f3:96:
                    99:4d:79:b0:49:77:de:72:3a:f3:3e:f1:69:25:68:
                    ba:9d:9f:ae:23:b6:51:fa:96:a7:e5:e0:de:04:27:
                    9b:d0:02:26:19:ee:4c:5d:f8:a3:64:f7:99:28:69:
                    35:bb:93:0a:96:03:c3:5c:2f:03:41:c1:30:37:9d:
                    7a:81:43:bc:b7:6e:a6:39:31:12:cf:05:81:86:10:
                    a6:4d:ea:80:e8:73:00:cb:16:03:20:56:cd:bd:41:
                    fb:31:cb:f7:b5:dc:72:e5:1c:aa:7c:82:c6:5a:1d:
                    7e:35:75:cb:1b:ff:25:56:59:7f:fd:d5:18:b7:d1:
                    b5:2b:23:98:66:9f:1b:56:6f:68:44:49:ef:17:ba:
                    e7:b5:47:54:d0:e8:c8:f9:39:94:61:c0:e8:22:df:
                    f1:cb:04:05:75:68:dc:05:9e:ad:f9:47:d2:35:7c:
                    31:b2:de:73:7a:7b:68:6b:f2:94:b7:be:92:b6:21:
                    32:9b:d1:c4:e8:74:2e:38:fe:89:14:bd:62:8a:79:
                    7d:94:02:7e:70:38:eb:a6:70:31:f9:52:32:0f:64:
                    32:94:37:93:a0:b5:78:5f:b7:89:b4:a8:a8:77:48:
                    25:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:F7:64:91:14:2F:37:D6:1C:86:F9:15:70:4C:5A:B5:79:15:B1:09
            X509v3 Authority Key Identifier:
                keyid:12:5A:E2:CF:D3:15:C1:31:19:34:84:66:5A:CA:DA:7C:01:31:63:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Elriz9MVwTEZNIRmWsrafAExY-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/Elriz9MVwTEZNIRmWsrafAExY-w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/Elriz9MVwTEZNIRmWsrafAExY-w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:1c:33:9c:29:c9:8a:d8:0c:04:86:70:12:40:e9:08:95:7c:
         41:33:ec:05:07:88:4e:f7:14:8e:22:28:fc:6a:91:fb:a2:06:
         7a:54:74:de:d6:82:66:bb:19:44:ed:a9:01:12:f1:c1:33:79:
         86:6f:82:78:f5:f3:2c:af:4f:47:03:cb:39:24:c2:18:15:d2:
         3d:bc:4f:9c:fa:d7:2e:4a:b8:83:38:b1:e4:7a:4d:9f:7b:bf:
         05:10:e8:55:8e:b8:c5:cd:d6:6d:6d:6c:fe:4a:30:11:cb:26:
         8a:47:79:4a:1b:91:64:6c:5c:88:e3:e7:1c:20:00:ba:d7:65:
         af:9f:b4:01:79:8b:9b:99:df:b2:38:78:d4:f9:3e:de:bd:2b:
         05:23:42:ed:f3:79:44:a7:eb:48:09:ed:07:aa:2d:ed:8e:88:
         6b:ff:36:98:d0:8e:b2:36:8d:ec:4e:cb:0f:5b:9b:2f:14:3a:
         af:17:a7:5a:cc:b1:56:d8:59:24:82:4e:08:3a:49:5d:9e:c6:
         bd:f2:4b:19:e7:d2:3c:44:d7:68:02:5a:c3:ca:23:1f:ae:03:
         8c:ef:6d:ad:0d:38:4c:f5:54:84:63:3b:2f:ae:5b:52:ce:dc:
         f1:34:c6:ef:76:8c:37:69:fe:9a:a5:14:16:10:d7:f0:06:19:
         5a:32:9e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:40:36 2026 by rpki-client