Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/mRLZRawqSfO02iIhwnuCmq_MsvI.mft
File:                     mRLZRawqSfO02iIhwnuCmq_MsvI.mft (raw, json)
Hash identifier:          NVja/PFKjVxSPpZrBodi07FpBnvIso674dLPmIvtp0s=
Subject key identifier:   83:56:EB:E1:FA:AE:A3:CC:C4:9B:62:5A:E4:CD:E3:EA:4C:CE:24:85
Authority key identifier: 99:12:D9:45:AC:2A:49:F3:B4:DA:22:21:C2:7B:82:9A:AF:CC:B2:F2
Certificate issuer:       /CN=9912d945ac2a49f3b4da2221c27b829aafccb2f2
Certificate serial:       019E314E6B486C10215B7D5FE774344C1E74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mRLZRawqSfO02iIhwnuCmq_MsvI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/mRLZRawqSfO02iIhwnuCmq_MsvI.mft
Manifest number:          172C
Signing time:             Sat 16 May 2026 15:01:23 +0000
Manifest this update:     Sat 16 May 2026 15:01:23 +0000
Manifest next update:     Sun 17 May 2026 15:01:23 +0000
Files and hashes:         1: K3IkaDvOsxRDnW5ivwAMwt2TUdw.roa (hash: 4pub90rA78k1OuNqh4u/EQwhdsIyW78nZyVBnumMV8E=)
                          2: mRLZRawqSfO02iIhwnuCmq_MsvI.crl (hash: At4kUdhxHArlIc29XW/dzuknfEVY3isxfdWsUocaynE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/mRLZRawqSfO02iIhwnuCmq_MsvI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/mRLZRawqSfO02iIhwnuCmq_MsvI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mRLZRawqSfO02iIhwnuCmq_MsvI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:4e:6b:48:6c:10:21:5b:7d:5f:e7:74:34:4c:1e:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9912d945ac2a49f3b4da2221c27b829aafccb2f2
        Validity
            Not Before: May 16 15:01:23 2026 GMT
            Not After : May 17 15:01:23 2026 GMT
        Subject: CN=8356ebe1faaea3ccc49b625ae4cde3ea4cce2485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:f2:bc:d0:a8:94:34:9c:f6:5f:00:de:c2:f7:
                    d8:2a:d7:fd:55:54:46:99:45:a7:92:54:63:64:69:
                    7c:4a:0b:b7:17:8a:88:8e:b7:20:45:b6:a6:20:e9:
                    7d:62:79:11:38:72:eb:f3:86:13:b9:f3:0b:fc:34:
                    0c:4e:c3:b0:63:6d:d6:cf:ba:bb:a5:bd:fa:35:fb:
                    78:b8:07:0f:2d:98:de:5b:55:4c:01:a7:59:92:67:
                    ac:ca:d0:0b:8a:f0:15:76:cf:77:de:bb:ed:d3:9e:
                    33:35:44:4d:55:1b:ee:b3:03:06:71:ea:36:de:99:
                    7a:48:45:bb:35:7c:6d:01:17:cc:08:d1:fa:15:81:
                    4b:92:5e:b2:5f:83:2c:b7:d2:b5:d0:e7:55:f0:b9:
                    75:50:1c:50:60:1d:34:b8:af:0d:cc:df:68:3a:43:
                    b4:a3:61:7d:b7:0e:c9:f1:a3:9d:c8:60:fa:a0:0d:
                    c2:0d:9e:ec:72:31:47:63:f9:1b:f5:52:82:18:eb:
                    c1:14:a6:ca:68:cf:16:68:cb:8c:a3:8c:4d:2c:3a:
                    40:4f:3c:db:68:22:fd:75:89:9f:2b:c8:6c:df:8a:
                    aa:9e:17:68:61:f7:9b:8c:5b:19:92:63:a5:d2:7f:
                    ab:4d:0d:e4:ef:4a:83:0a:1b:01:0f:77:7d:29:92:
                    46:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:56:EB:E1:FA:AE:A3:CC:C4:9B:62:5A:E4:CD:E3:EA:4C:CE:24:85
            X509v3 Authority Key Identifier:
                keyid:99:12:D9:45:AC:2A:49:F3:B4:DA:22:21:C2:7B:82:9A:AF:CC:B2:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRLZRawqSfO02iIhwnuCmq_MsvI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/mRLZRawqSfO02iIhwnuCmq_MsvI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/mRLZRawqSfO02iIhwnuCmq_MsvI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:37:c6:5e:a8:48:03:42:de:b9:15:6a:a5:cf:b9:62:43:93:
         20:32:78:80:d8:50:a5:8d:1b:2d:da:66:6b:4a:c1:73:81:59:
         87:d9:c5:1c:fe:38:eb:af:f0:16:0d:f9:a9:c3:2d:2c:9a:1e:
         28:72:2d:17:2d:04:c5:3c:bb:f6:f5:bc:bc:51:68:55:5d:e7:
         4d:1f:84:1f:04:02:f6:bb:a6:f9:c9:99:2d:0e:c4:5a:ee:e4:
         bf:f3:37:c7:f8:b0:42:bc:c8:29:22:0d:fb:13:2a:55:fc:04:
         da:3f:f2:ab:ee:9d:ed:4a:56:55:e6:4f:3b:ab:55:64:fc:ca:
         5d:cb:41:43:08:91:08:ac:ed:5d:db:a6:b4:5f:bf:37:3e:95:
         dd:4b:d1:21:fb:00:9b:59:f8:bd:d2:24:55:02:67:f0:22:35:
         d3:05:70:cf:6a:fc:63:db:8c:d1:43:e6:3e:19:52:91:f1:2d:
         6f:07:f8:65:4f:b3:92:01:45:54:32:0d:20:48:e8:bf:2b:68:
         7d:58:b0:4d:9c:46:0a:fd:07:b3:fc:18:d8:66:bb:39:d4:4c:
         3c:52:67:70:4b:86:36:8c:4d:f2:82:fc:ea:e5:af:09:fc:ca:
         8c:76:d8:a0:b2:79:38:7b:01:99:3e:e5:6f:86:82:7b:f5:b0:
         28:08:fb:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 20:19:22 2026 by rpki-client