Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.mft
File:                     0mpECeqR9QbWM4ccbDVUDUYDN9E.mft (raw, json)
Hash identifier:          GFfBhmOx76RfTW8UIlx1eU9JW/JT5ZYJ/lxZjOxBaoU=
Subject key identifier:   B5:23:48:B2:90:39:F1:15:31:E4:82:E0:31:D9:B4:28:32:AD:EE:02
Authority key identifier: D2:6A:44:09:EA:91:F5:06:D6:33:87:1C:6C:35:54:0D:46:03:37:D1
Certificate issuer:       /CN=d26a4409ea91f506d633871c6c35540d460337d1
Certificate serial:       019CE447E8131A93385C092A6A7262DEC7A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0mpECeqR9QbWM4ccbDVUDUYDN9E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.mft
Manifest number:          1045
Signing time:             Thu 12 Mar 2026 23:00:43 +0000
Manifest this update:     Thu 12 Mar 2026 23:00:43 +0000
Manifest next update:     Fri 13 Mar 2026 23:00:43 +0000
Files and hashes:         1: 0mpECeqR9QbWM4ccbDVUDUYDN9E.crl (hash: ZMbKaI2JAir9quKVTBKSxomMDu1BxgC+3fJb9iv1UzA=)
                          2: AcTeoEML1ryHQtehrMdoz9pSMNk.roa (hash: 58HREcExgCm4jYk7OfR+la9NkSYLp6wFVz1Zv1g3G6w=)
                          3: wzoQWaU78B1JYcVEw1aU_m666Qg.roa (hash: YXxlzjY6ITzVnS2guD8G2HgvMXrNu1UDUO++sIfSdhw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0mpECeqR9QbWM4ccbDVUDUYDN9E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 23:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e4:47:e8:13:1a:93:38:5c:09:2a:6a:72:62:de:c7:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d26a4409ea91f506d633871c6c35540d460337d1
        Validity
            Not Before: Mar 12 23:00:43 2026 GMT
            Not After : Mar 13 23:00:43 2026 GMT
        Subject: CN=b52348b29039f11531e482e031d9b42832adee02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8d:fb:ed:00:04:cb:36:7f:45:f0:30:f2:75:
                    89:a4:0a:2c:3a:d4:33:05:bb:fc:e1:28:1e:7e:d5:
                    1f:97:b1:ee:f3:7c:d5:cb:ed:16:66:9b:53:0a:96:
                    63:e6:a1:68:24:4c:d5:53:75:23:c1:af:33:16:4f:
                    57:1a:78:78:c2:93:3d:cb:f9:b9:63:c5:39:6b:97:
                    f2:6d:33:e6:a3:4d:2b:d5:c0:65:40:18:aa:4c:91:
                    15:bb:38:d2:34:81:9d:a5:9e:a7:af:5f:99:ac:59:
                    8e:79:52:41:2a:ad:cb:0e:f8:14:e4:dd:17:df:bb:
                    51:bf:01:fa:4c:e2:2b:64:82:0a:ee:60:55:d6:cd:
                    fa:77:9e:7d:e1:e0:4d:78:6a:ff:1c:c3:43:5d:98:
                    08:74:e8:85:90:e9:49:da:6d:42:e2:0d:14:b0:cd:
                    0c:79:bd:32:89:e0:40:a7:78:bb:fe:bc:90:69:95:
                    b6:aa:e8:dd:86:1c:fe:d4:34:0a:23:70:1c:8d:bd:
                    e3:dd:df:22:39:33:ac:fa:7a:69:27:05:f8:16:74:
                    9b:94:31:9a:a0:fa:f6:51:c3:eb:16:44:d7:a4:33:
                    e7:7a:b8:31:28:4a:7a:02:d7:d1:91:0a:6d:5e:ba:
                    1c:28:ac:5e:8e:9a:1d:81:6b:82:b9:67:eb:e8:ab:
                    c9:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:23:48:B2:90:39:F1:15:31:E4:82:E0:31:D9:B4:28:32:AD:EE:02
            X509v3 Authority Key Identifier:
                keyid:D2:6A:44:09:EA:91:F5:06:D6:33:87:1C:6C:35:54:0D:46:03:37:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mpECeqR9QbWM4ccbDVUDUYDN9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:ec:f6:58:32:7e:42:b9:78:b2:f5:47:67:83:a2:26:ca:7a:
         45:8a:60:f2:2f:3c:a2:db:9f:00:54:6c:c1:58:5c:3b:03:fd:
         be:39:79:19:33:df:6a:70:00:81:a5:46:82:38:b5:73:83:2c:
         9d:16:01:1c:88:8c:62:97:67:5d:1a:21:78:9d:65:63:26:49:
         8d:6c:c3:71:3f:7e:77:f4:0b:89:cc:eb:b9:ae:50:9b:21:83:
         10:90:00:e8:1a:aa:ad:a2:c1:5d:ea:41:1b:94:d1:ad:f9:ed:
         e4:1d:9c:a0:23:c9:28:05:b5:5e:46:ad:d5:9e:99:e3:72:df:
         ed:26:77:53:57:35:a4:62:2f:0e:53:32:0f:0a:7f:a7:3a:97:
         63:3b:82:8c:69:84:d3:0e:0d:b5:a2:69:ed:af:80:bc:b9:85:
         b2:f8:7a:93:4f:d3:02:f0:00:e0:65:db:d8:3d:7d:a0:86:04:
         ce:d8:77:30:29:e1:fe:af:c4:69:fb:a7:3a:5f:df:6c:6d:1a:
         05:44:1d:e4:46:fc:76:6c:22:50:a4:92:50:b9:86:f9:73:d6:
         8a:e0:8b:fc:1b:9c:22:d6:f2:6e:96:40:c9:21:b4:1a:0d:e2:
         7c:de:a1:aa:fe:1b:b1:30:aa:f7:77:20:60:e6:65:52:22:d9:
         8a:56:62:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:55:25 2026 by rpki-client