Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/524bfe-c5ae-4f67-8413-2748c4002c2e/1/MZLFLzYKOnL-IkQaw_x-DlIl7pE.mft
File:                     MZLFLzYKOnL-IkQaw_x-DlIl7pE.mft (raw, json)
Hash identifier:          jkHk3wERZz2KXvZYZ+6ibZDePeFYHsGuXDODH+52Zk8=
Subject key identifier:   F4:04:84:F4:A2:16:02:AF:D6:48:D7:0E:80:9C:9B:C8:88:7F:60:05
Authority key identifier: 31:92:C5:2F:36:0A:3A:72:FE:22:44:1A:C3:FC:7E:0E:52:25:EE:91
Certificate issuer:       /CN=3192c52f360a3a72fe22441ac3fc7e0e5225ee91
Certificate serial:       019E3297FC610374156D02DCC9B50605B29B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MZLFLzYKOnL-IkQaw_x-DlIl7pE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/524bfe-c5ae-4f67-8413-2748c4002c2e/1/MZLFLzYKOnL-IkQaw_x-DlIl7pE.mft
Manifest number:          1866
Signing time:             Sat 16 May 2026 21:01:21 +0000
Manifest this update:     Sat 16 May 2026 21:01:21 +0000
Manifest next update:     Sun 17 May 2026 21:01:21 +0000
Files and hashes:         1: MZLFLzYKOnL-IkQaw_x-DlIl7pE.crl (hash: brcLkd1aHj6d/2MjchhVM4O3ZttB2MtVH4JQIsinS18=)
                          2: niPFA17j7uRHpaTYenf6Cly67RI.roa (hash: OfpHBcAsXXX8TZPERzrr+Zdymzn7MUaqne9gmeiSJVo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/524bfe-c5ae-4f67-8413-2748c4002c2e/1/MZLFLzYKOnL-IkQaw_x-DlIl7pE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/524bfe-c5ae-4f67-8413-2748c4002c2e/1/MZLFLzYKOnL-IkQaw_x-DlIl7pE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MZLFLzYKOnL-IkQaw_x-DlIl7pE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:32:97:fc:61:03:74:15:6d:02:dc:c9:b5:06:05:b2:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3192c52f360a3a72fe22441ac3fc7e0e5225ee91
        Validity
            Not Before: May 16 21:01:21 2026 GMT
            Not After : May 17 21:01:21 2026 GMT
        Subject: CN=f40484f4a21602afd648d70e809c9bc8887f6005
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:24:08:14:33:64:1b:da:13:34:d1:9b:61:19:
                    0b:92:5b:82:50:1a:11:40:27:e5:ce:9d:c0:21:a1:
                    11:31:f4:f4:5f:fc:78:94:20:64:e0:87:7c:43:4d:
                    b7:d4:f4:d2:c2:cf:e5:ab:34:db:ec:f3:21:90:92:
                    99:dd:88:cf:ce:8f:0a:66:bb:98:91:5e:0c:69:48:
                    b0:f4:e3:f4:f4:49:f9:87:af:8b:93:34:93:c0:52:
                    02:d6:2c:84:19:5f:28:78:c0:1d:71:3b:d5:d4:73:
                    ab:96:97:f3:4b:b7:8b:ba:12:21:92:97:4b:f5:d5:
                    da:f8:03:69:20:33:3b:c0:6d:2a:ad:53:7b:6d:3e:
                    ef:58:8a:7e:45:bf:7b:30:68:e3:84:7a:54:2e:a9:
                    9c:2b:8d:ff:cc:14:fe:9a:79:88:4a:04:bd:9f:58:
                    9c:79:f9:22:30:f9:59:05:e3:56:4c:92:8c:7d:9a:
                    9c:42:32:72:55:13:2c:95:42:2f:25:29:94:7c:b0:
                    21:be:4f:d5:5e:f3:71:7f:95:50:c9:28:78:da:ac:
                    b0:e0:9e:cb:30:66:a9:c2:1f:fb:22:19:b8:6c:be:
                    20:3c:ae:39:ab:4c:c6:3f:c5:9b:3e:99:fa:99:dc:
                    34:dd:f6:75:97:45:a2:cc:4a:b7:b0:ca:e4:13:f5:
                    55:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:04:84:F4:A2:16:02:AF:D6:48:D7:0E:80:9C:9B:C8:88:7F:60:05
            X509v3 Authority Key Identifier:
                keyid:31:92:C5:2F:36:0A:3A:72:FE:22:44:1A:C3:FC:7E:0E:52:25:EE:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MZLFLzYKOnL-IkQaw_x-DlIl7pE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/524bfe-c5ae-4f67-8413-2748c4002c2e/1/MZLFLzYKOnL-IkQaw_x-DlIl7pE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/524bfe-c5ae-4f67-8413-2748c4002c2e/1/MZLFLzYKOnL-IkQaw_x-DlIl7pE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:fd:3c:13:7e:2c:ff:3d:7d:c1:27:52:76:33:8e:ef:03:5b:
         82:59:bf:ee:e5:b0:b4:64:e7:55:bd:1d:da:dd:c7:59:07:59:
         e6:3e:ef:25:81:dd:8a:98:78:22:51:38:df:58:ae:95:48:26:
         70:60:70:9a:a4:e3:2c:9e:bc:dc:0b:ec:55:db:7e:49:05:42:
         23:6c:d9:c1:e7:24:e1:54:36:f5:36:97:de:57:3d:20:18:a7:
         92:08:cb:2c:07:95:18:e6:84:2a:eb:85:9d:bd:bf:c6:44:6b:
         ee:71:17:1a:d0:e5:8f:c7:2f:68:2a:db:9f:8b:e4:47:6d:2c:
         f6:23:1d:e5:3b:f5:87:d8:83:64:30:98:eb:a9:76:c0:57:a9:
         94:f1:71:7b:6e:4c:15:3c:82:4e:58:26:83:4f:b9:d1:fa:98:
         0b:67:52:52:ef:8a:db:b2:65:b9:51:d0:f7:25:5b:6b:aa:91:
         b5:86:f7:93:7a:e2:eb:b8:11:bd:42:86:f6:5b:b3:9a:eb:7f:
         66:63:1d:24:1f:9e:1d:83:27:de:05:c6:fb:2f:94:d8:7d:76:
         60:eb:0b:95:34:02:aa:df:07:91:fe:49:fd:ab:6a:21:4a:26:
         6e:1e:30:3c:ac:31:99:02:3f:5c:e7:a8:02:63:ec:b9:98:61:
         ea:99:97:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:41:24 2026 by rpki-client