Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/c937be-f5b1-43c6-9587-4e06621bd98a/1/mpLTBwi51OjHwoyX-AN8gCcUTEc.mft
File:                     mpLTBwi51OjHwoyX-AN8gCcUTEc.mft (raw, json)
Hash identifier:          hEpcaRnlVWwSMINsKgve9axZT1U6kPn0HR2te9IHw8k=
Subject key identifier:   0A:1F:B0:50:0C:C0:5A:F8:08:D7:04:7C:4F:45:3B:DD:42:12:FD:F9
Authority key identifier: 9A:92:D3:07:08:B9:D4:E8:C7:C2:8C:97:F8:03:7C:80:27:14:4C:47
Certificate issuer:       /CN=9a92d30708b9d4e8c7c28c97f8037c8027144c47
Certificate serial:       019CE59181B87EE7401B024F104B269D2DA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mpLTBwi51OjHwoyX-AN8gCcUTEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/c937be-f5b1-43c6-9587-4e06621bd98a/1/mpLTBwi51OjHwoyX-AN8gCcUTEc.mft
Manifest number:          186B
Signing time:             Fri 13 Mar 2026 05:00:44 +0000
Manifest this update:     Fri 13 Mar 2026 05:00:44 +0000
Manifest next update:     Sat 14 Mar 2026 05:00:44 +0000
Files and hashes:         1: _2TkYZ6m9S4gzCbJ7FSAH-2Y0_4.roa (hash: 29lPquUVvEOM2I/tYNxFjViie9vfaQqvcMnqW/106ho=)
                          2: mpLTBwi51OjHwoyX-AN8gCcUTEc.crl (hash: y/+ad+at5ElhwUfaB8eODpDPdMWnX+Rp1l1rMRQGN6A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/c937be-f5b1-43c6-9587-4e06621bd98a/1/mpLTBwi51OjHwoyX-AN8gCcUTEc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/c937be-f5b1-43c6-9587-4e06621bd98a/1/mpLTBwi51OjHwoyX-AN8gCcUTEc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mpLTBwi51OjHwoyX-AN8gCcUTEc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e5:91:81:b8:7e:e7:40:1b:02:4f:10:4b:26:9d:2d:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a92d30708b9d4e8c7c28c97f8037c8027144c47
        Validity
            Not Before: Mar 13 05:00:44 2026 GMT
            Not After : Mar 14 05:00:44 2026 GMT
        Subject: CN=0a1fb0500cc05af808d7047c4f453bdd4212fdf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:64:e3:87:3e:84:48:87:2b:87:16:93:c6:5b:
                    d9:61:05:5f:25:ef:03:a2:73:62:8c:07:df:3f:88:
                    ba:03:5b:42:74:e2:d6:55:54:56:fd:72:2c:77:3a:
                    1b:0d:f5:64:df:4d:ba:38:7a:71:ed:fc:07:cc:44:
                    c8:70:5a:8b:bb:d3:e1:74:18:15:b9:d3:73:39:21:
                    0a:f0:67:2c:a2:b1:29:38:d3:75:93:d9:56:4f:5c:
                    72:7d:0c:ba:35:bf:4a:9b:0e:2a:50:77:fd:a8:ab:
                    95:0d:f9:33:d8:39:22:8c:64:bc:2c:d5:92:f5:82:
                    59:fe:83:34:e5:76:d8:16:ea:82:0d:ed:cf:2d:46:
                    25:69:23:02:60:e8:9e:f0:82:f4:0b:37:e7:14:d8:
                    94:d5:1c:65:ea:c9:73:30:f6:bc:ff:14:80:5c:67:
                    dc:d6:79:2f:78:3b:d0:2b:ea:e8:f7:cc:c2:58:cf:
                    39:5a:85:e4:6f:eb:a9:9a:e1:2f:5e:bd:80:05:b7:
                    58:64:f5:5d:67:19:2c:9d:ad:ec:92:ec:88:df:e4:
                    57:cf:eb:0d:08:b1:99:e6:55:5a:e5:7c:08:09:8d:
                    1e:d4:77:82:1b:57:b6:9f:64:43:c5:63:01:45:85:
                    36:1a:ab:43:f0:fa:7a:78:57:8e:3f:40:3a:6a:9b:
                    80:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:1F:B0:50:0C:C0:5A:F8:08:D7:04:7C:4F:45:3B:DD:42:12:FD:F9
            X509v3 Authority Key Identifier:
                keyid:9A:92:D3:07:08:B9:D4:E8:C7:C2:8C:97:F8:03:7C:80:27:14:4C:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpLTBwi51OjHwoyX-AN8gCcUTEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c937be-f5b1-43c6-9587-4e06621bd98a/1/mpLTBwi51OjHwoyX-AN8gCcUTEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c937be-f5b1-43c6-9587-4e06621bd98a/1/mpLTBwi51OjHwoyX-AN8gCcUTEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:f5:0a:b4:a0:f8:a0:12:cf:65:0b:00:df:59:af:69:f7:46:
         a8:e1:f5:0b:89:f1:c8:87:99:4a:d9:ac:40:6c:25:a7:37:1e:
         f0:c9:b7:9e:45:54:68:61:b8:99:f7:f9:17:13:cd:46:fe:b4:
         a8:d0:0b:03:de:75:e5:e4:b5:d1:f1:af:7d:46:69:64:65:de:
         f3:cc:d0:77:24:9b:45:63:39:44:c3:49:72:62:a4:2e:a6:66:
         32:eb:f2:c5:e3:69:4a:d9:20:19:e9:bb:e8:b9:97:82:91:f3:
         1a:c3:9d:0e:18:71:0d:22:6a:2b:bd:64:02:3b:11:a2:ce:44:
         3d:2c:c5:63:3a:1a:28:09:2c:b9:85:a4:00:41:c7:f8:50:a9:
         06:54:cb:97:38:a0:4c:d7:d3:34:ea:cf:55:10:f0:cd:11:1f:
         33:4e:e8:14:16:41:c6:d9:4d:ed:05:57:e8:6c:cc:fe:bf:d9:
         84:57:57:e5:da:67:15:d8:84:11:1c:b7:16:05:96:60:5f:ac:
         02:36:46:e8:9e:ca:3c:29:4e:7b:2b:a6:68:61:1a:56:f9:79:
         0c:d6:a3:38:74:7c:70:f3:14:90:80:73:e7:71:d2:44:57:aa:
         a8:f9:3b:79:09:33:8f:31:46:02:17:f7:2e:9c:3d:15:db:11:
         79:d8:9b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 10:00:15 2026 by rpki-client