Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.mft
File:                     mjzlxacwzY4v8fVdGA8agbMADMg.mft (raw, json)
Hash identifier:          qikWwiy93aNhkx7ulOxmUfYL1cmxPkcTdiPXM2AI7Zg=
Subject key identifier:   5A:24:E6:D0:33:37:7E:1C:AE:32:9E:DB:DC:4B:98:79:ED:95:D7:99
Authority key identifier: 9A:3C:E5:C5:A7:30:CD:8E:2F:F1:F5:5D:18:0F:1A:81:B3:00:0C:C8
Certificate issuer:       /CN=9a3ce5c5a730cd8e2ff1f55d180f1a81b3000cc8
Certificate serial:       019CEFDE88C43E651C2A96D59D93743F3C04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mjzlxacwzY4v8fVdGA8agbMADMg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.mft
Manifest number:          186B
Signing time:             Sun 15 Mar 2026 05:01:04 +0000
Manifest this update:     Sun 15 Mar 2026 05:01:04 +0000
Manifest next update:     Mon 16 Mar 2026 05:01:04 +0000
Files and hashes:         1: C8JQF4zr-4aK_RwcjE56-DT6Wxg.roa (hash: rY/9eLA6NM4GP5yGoqQdoz+NjeXxPxDAiu09l4Q28uQ=)
                          2: mjzlxacwzY4v8fVdGA8agbMADMg.crl (hash: Lio8ET3hToSr7BJSHGkccQJaEW0eZaQXzhA26MHui90=)
                          3: n_2sX8oetXRh3eKs3u3UutqLTuo.roa (hash: h6ff979Rmb1Z+QDtHv0xtctucpVS/vaN2I+2M9Q0tyw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mjzlxacwzY4v8fVdGA8agbMADMg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Mar 2026 05:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ef:de:88:c4:3e:65:1c:2a:96:d5:9d:93:74:3f:3c:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a3ce5c5a730cd8e2ff1f55d180f1a81b3000cc8
        Validity
            Not Before: Mar 15 05:01:04 2026 GMT
            Not After : Mar 16 05:01:04 2026 GMT
        Subject: CN=5a24e6d033377e1cae329edbdc4b9879ed95d799
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:79:4c:aa:ae:a4:2b:8a:25:73:8d:a2:3e:a1:
                    3f:1b:f3:9c:c7:58:a7:4b:37:a5:0f:02:ef:3b:91:
                    1c:4e:73:ff:b4:e7:92:16:ec:c3:7b:63:52:3e:e1:
                    91:5d:1b:91:bd:c1:23:35:5c:f5:ac:40:b0:7b:90:
                    a9:d8:be:14:c7:04:21:1d:b1:f1:97:c8:d3:cd:03:
                    e3:ea:56:f6:1e:46:4e:73:6b:a1:bb:66:c4:6c:30:
                    12:c5:ed:50:64:de:d6:a1:e3:71:87:c1:f9:60:4a:
                    5e:af:7d:d2:22:a0:25:b3:87:9d:7a:ae:c5:6c:e2:
                    22:06:9c:90:23:44:78:43:2b:6c:d0:40:db:66:86:
                    ef:f6:59:20:e2:bf:d7:3d:a4:3d:9a:ee:0d:41:38:
                    c8:64:99:06:01:4e:92:82:54:1b:58:92:6b:94:63:
                    20:0e:26:c6:15:b5:54:f4:63:03:0f:3f:02:42:96:
                    10:83:ca:58:c8:84:40:0c:97:0b:40:a0:94:66:bd:
                    80:6d:3c:91:62:a2:56:07:7d:a2:80:e8:88:c5:e6:
                    53:62:6e:6a:c8:0a:02:be:a0:85:92:1d:a3:c8:83:
                    15:f0:32:a2:e0:84:e4:62:37:fc:54:a6:e4:5e:da:
                    8c:d6:7b:28:49:30:36:83:9f:b6:50:bc:21:77:8b:
                    7f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:24:E6:D0:33:37:7E:1C:AE:32:9E:DB:DC:4B:98:79:ED:95:D7:99
            X509v3 Authority Key Identifier:
                keyid:9A:3C:E5:C5:A7:30:CD:8E:2F:F1:F5:5D:18:0F:1A:81:B3:00:0C:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mjzlxacwzY4v8fVdGA8agbMADMg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:11:36:07:0e:1c:df:32:2b:32:31:63:93:5e:9c:6e:53:8d:
         be:be:9c:64:6f:c7:08:7a:b2:40:ad:31:bc:79:05:72:01:5a:
         30:fc:c8:4a:36:aa:4d:23:68:7f:5f:94:54:42:bf:fb:17:39:
         56:f3:48:83:df:78:df:92:86:ea:b3:e7:59:96:f4:60:57:cd:
         99:e1:9c:1b:f2:ab:cf:fe:54:64:8c:4f:26:2f:29:4c:b8:a4:
         7b:12:17:28:72:db:d9:3d:29:4f:00:39:f5:67:dc:99:7f:17:
         e2:06:07:e7:de:86:5d:b8:63:27:07:3c:9d:57:71:da:df:71:
         87:32:8e:ad:11:21:b1:e7:2a:96:dd:07:37:ab:c5:4e:64:5e:
         84:1d:41:f3:39:d9:8e:45:75:6d:f5:b7:aa:f7:e2:99:f6:3b:
         4b:1e:60:f0:21:42:09:e9:b2:ae:af:93:5c:47:34:43:a2:1b:
         07:ad:bd:50:82:b0:6b:6e:40:2f:75:b1:15:4f:8d:f6:f8:88:
         54:09:c9:f1:4f:27:2a:6b:49:4a:ef:6e:59:69:1d:d5:b5:9b:
         81:f7:f0:fe:84:f0:82:72:91:01:74:11:77:85:70:d1:0f:12:
         e5:7c:78:2c:13:80:9d:d8:bc:4f:30:44:27:68:7e:f5:ac:71:
         15:a9:8e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 13:16:39 2026 by rpki-client