Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.mft
File:                     MXuBR1A-oZ9YHKANKNvuXljLj0g.mft (raw, json)
Hash identifier:          nwSFxpID9BgMwKcdlsng1kptjsiFx8/hSQ1qocfqpaI=
Subject key identifier:   07:EF:C7:17:1A:16:B3:F3:E6:66:76:D2:9D:14:14:14:CD:A8:F8:4B
Authority key identifier: 31:7B:81:47:50:3E:A1:9F:58:1C:A0:0D:28:DB:EE:5E:58:CB:8F:48
Certificate issuer:       /CN=317b8147503ea19f581ca00d28dbee5e58cb8f48
Certificate serial:       019CE4ECD00FD394C047C28E8418E6C9710F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MXuBR1A-oZ9YHKANKNvuXljLj0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.mft
Manifest number:          1865
Signing time:             Fri 13 Mar 2026 02:00:50 +0000
Manifest this update:     Fri 13 Mar 2026 02:00:50 +0000
Manifest next update:     Sat 14 Mar 2026 02:00:50 +0000
Files and hashes:         1: MXuBR1A-oZ9YHKANKNvuXljLj0g.crl (hash: HaaSeJPgK/kUFOlbm+SFDe0BsuNITiJLZ9mPZpJjpkA=)
                          2: f3tAelSfrjtbwXNkrU-p9qfZWxU.roa (hash: OShTtHN/eSOshwx4hclkGBY5i0hC3YPjort+nwJu9SM=)
                          3: kDiYDHMztIHYvDXXzL3WVBFRgRQ.roa (hash: 4/nnDK2ikVBeX90b+2r+JvM3VbUxHJhqZEDdUrk+hj8=)
                          4: lgASEf8e2wSRk9xbv_20wIJbXDM.roa (hash: OBNbGNbD7TSZJPMMT4UYmjERp8O1mPv9E5azwcAja4o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MXuBR1A-oZ9YHKANKNvuXljLj0g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 21:05:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e4:ec:d0:0f:d3:94:c0:47:c2:8e:84:18:e6:c9:71:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=317b8147503ea19f581ca00d28dbee5e58cb8f48
        Validity
            Not Before: Mar 13 02:00:50 2026 GMT
            Not After : Mar 14 02:00:50 2026 GMT
        Subject: CN=07efc7171a16b3f3e66676d29d141414cda8f84b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:35:38:50:37:43:f1:e0:32:e0:5c:64:b1:77:
                    85:1a:22:95:86:e4:be:32:f6:83:e2:c6:e2:5f:7c:
                    38:46:cf:e2:86:5d:d9:18:37:b2:bb:65:dd:f1:67:
                    4b:7f:82:0a:83:4c:3f:7f:12:7c:b3:e2:6c:85:07:
                    b6:2c:41:2e:1f:a6:b3:97:6c:ab:68:02:de:4c:0c:
                    2a:cd:d5:43:7d:bd:23:6a:85:92:ed:fb:5a:ac:51:
                    57:11:11:40:cc:75:e1:da:ff:21:e6:92:7e:fa:6b:
                    ef:68:23:fa:c6:08:0a:97:81:7a:8f:50:d3:22:4b:
                    90:ae:48:a2:f7:95:27:5b:76:87:cb:74:e5:19:9c:
                    db:cd:9a:a2:98:5e:d5:57:b1:8c:03:66:71:3f:26:
                    c1:f7:3b:97:f9:77:0b:e6:b4:5a:35:6e:d8:60:89:
                    0a:75:7c:f5:45:07:b1:9f:da:e0:c5:81:42:64:7b:
                    1d:65:87:d9:8e:21:60:98:dd:51:b3:09:ce:eb:fc:
                    0e:8b:a2:98:8a:62:58:6b:66:1e:ab:b8:91:65:1a:
                    78:52:00:68:c7:6f:fc:0c:59:ea:7e:c3:c0:6e:a2:
                    e8:fc:c7:fb:1f:2b:cc:19:06:a1:f9:64:a1:d3:f0:
                    e9:ee:87:3f:f8:0e:89:69:a4:19:ff:8f:81:dd:a1:
                    b9:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:EF:C7:17:1A:16:B3:F3:E6:66:76:D2:9D:14:14:14:CD:A8:F8:4B
            X509v3 Authority Key Identifier:
                keyid:31:7B:81:47:50:3E:A1:9F:58:1C:A0:0D:28:DB:EE:5E:58:CB:8F:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MXuBR1A-oZ9YHKANKNvuXljLj0g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:91:99:20:1f:18:16:b9:43:82:92:47:b4:d3:cc:da:ff:26:
         ff:e9:56:e8:8b:17:dd:0c:6c:7e:70:10:14:dc:ea:f3:85:cb:
         2e:22:05:97:29:08:84:c8:4a:24:84:af:e8:ee:43:c0:3c:0a:
         f4:da:09:17:be:e7:f4:75:44:4f:4f:29:f7:65:77:98:bb:74:
         48:b0:71:de:2c:6a:f0:13:c2:6b:83:df:f3:a3:b4:43:18:35:
         27:dd:e1:c6:7f:67:9b:a6:c2:c0:f1:18:27:c9:f9:bf:d5:04:
         9d:98:24:64:e9:8a:fc:7e:d7:f6:21:fe:0a:69:73:4c:98:fb:
         2a:b7:42:7b:a3:3a:93:d6:09:d2:d1:68:09:0a:72:5d:78:64:
         b3:c9:5f:ae:65:5d:87:30:39:05:bd:16:bd:97:8b:e2:ed:52:
         12:24:98:f2:bb:0b:af:d6:5c:be:26:fa:1f:e1:d8:cc:d4:0d:
         18:8e:e9:82:1d:de:f2:c9:1b:df:16:a6:1b:d9:8a:ef:bb:b0:
         17:e7:a8:e0:bc:16:e7:5f:d1:a5:c2:35:39:ae:17:37:2a:1b:
         97:91:38:02:22:ef:2d:c5:d3:12:49:ac:37:dc:d0:db:24:46:
         b3:31:fa:84:ca:31:35:df:2f:20:da:63:5a:22:f4:20:2f:e9:
         e2:3d:99:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 04:16:31 2026 by rpki-client