Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.mft
File:                     mlVQ6QipuWiMKarJiVNT3qg2xFo.mft (raw, json)
Hash identifier:          tmGMx9qnanbWo3ilxGRXNBdMjRlh7xfchUxRGIoQWMM=
Subject key identifier:   D4:B2:63:69:E8:BE:8D:FF:D4:63:23:8D:32:B8:F7:4C:29:44:71:28
Authority key identifier: 9A:55:50:E9:08:A9:B9:68:8C:29:AA:C9:89:53:53:DE:A8:36:C4:5A
Certificate issuer:       /CN=9a5550e908a9b9688c29aac9895353dea836c45a
Certificate serial:       019CCA88033A53BDFC9009F9F15831E4F65F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mlVQ6QipuWiMKarJiVNT3qg2xFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.mft
Manifest number:          185D
Signing time:             Sat 07 Mar 2026 23:00:37 +0000
Manifest this update:     Sat 07 Mar 2026 23:00:37 +0000
Manifest next update:     Sun 08 Mar 2026 23:00:37 +0000
Files and hashes:         1: 9WusnEA7UsiroKwVXFKCOaUJb3c.roa (hash: fb+KrV1ZjwlDY775gAvNE53AejRLewrgw0HPLBs+ie0=)
                          2: EpVqLX2wGdjg6RHIKlcFAYrzxZM.roa (hash: I+GdKkkhDVqSQlbstKKL56Ml+Mm3LF7CHLrw/iB8Sm0=)
                          3: IkDgMGh9UUmRviqmiJ_OYP1f9S4.roa (hash: RuDafgx85YwCS+Dkl1AZk67UPodQ/qCtU6vOrFp0Dc8=)
                          4: aT21_RL1m6rGeB-ld5KbAq-VyRY.roa (hash: igzeABuSc631EbNOWtmlhHktMnf95zdqHlwzunblRoQ=)
                          5: ahiZqqU1sLMyuZr836gd9oxj7Kw.roa (hash: ihPj0GX7KiHEc0nRL0sGVIybPI61K8/7t6F6pKkft+0=)
                          6: mlVQ6QipuWiMKarJiVNT3qg2xFo.crl (hash: A9OZ+spoge7jchHxp/hATPxrOF+cDhDSJudjbzHT73k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mlVQ6QipuWiMKarJiVNT3qg2xFo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Mar 2026 20:09:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ca:88:03:3a:53:bd:fc:90:09:f9:f1:58:31:e4:f6:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a5550e908a9b9688c29aac9895353dea836c45a
        Validity
            Not Before: Mar  7 23:00:37 2026 GMT
            Not After : Mar  8 23:00:37 2026 GMT
        Subject: CN=d4b26369e8be8dffd463238d32b8f74c29447128
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:39:cf:17:c9:ca:55:7e:88:3a:80:29:ea:dd:
                    c8:05:0c:63:8a:3e:4e:dc:8a:0f:1a:54:8a:34:2f:
                    d6:bd:dd:87:fd:a0:96:64:a5:9d:9b:fd:22:ec:72:
                    a0:95:28:08:50:e2:fb:2c:ef:63:35:1b:c9:ba:dd:
                    1e:60:fa:a4:e4:16:b9:f9:fb:cf:30:1f:5d:58:40:
                    13:8a:6d:cb:77:ae:03:8b:ec:2b:78:07:66:6e:5d:
                    59:5d:80:b5:8b:1d:f9:ab:53:97:0b:f6:e9:b6:eb:
                    54:83:f9:e4:1d:25:b8:41:b8:31:b4:c9:a2:d2:f1:
                    e4:50:58:70:3f:41:32:de:83:ce:c0:82:65:15:29:
                    93:b3:9c:5d:f2:5c:2f:81:e8:7c:c5:4e:89:81:61:
                    63:f4:e2:67:94:99:31:a0:03:08:e2:04:16:92:ea:
                    5d:b7:ef:b9:c6:1c:22:9d:27:14:55:b0:a2:89:ab:
                    bb:0a:ef:b3:17:b1:45:b3:4c:14:61:1d:3c:16:8f:
                    1c:a8:1c:dc:b3:01:94:8f:27:7c:dd:91:20:28:72:
                    be:da:aa:2c:83:31:be:d4:f6:c4:8c:56:ce:29:72:
                    04:f2:3f:19:a5:e4:7c:d7:7a:f3:92:36:94:f9:f7:
                    53:0e:60:0c:d2:e1:22:d4:c7:60:67:8f:51:24:52:
                    70:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:B2:63:69:E8:BE:8D:FF:D4:63:23:8D:32:B8:F7:4C:29:44:71:28
            X509v3 Authority Key Identifier:
                keyid:9A:55:50:E9:08:A9:B9:68:8C:29:AA:C9:89:53:53:DE:A8:36:C4:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mlVQ6QipuWiMKarJiVNT3qg2xFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:f8:f9:65:c7:e6:5e:7f:a6:9f:50:d8:97:c3:a1:0e:76:b1:
         ab:be:bb:db:aa:8a:74:c8:39:e4:a9:a5:67:ab:a8:4b:e6:b0:
         b4:6b:00:d8:a8:14:1f:20:c5:74:60:77:a2:9a:8b:ef:61:3b:
         66:53:3b:65:2d:ee:c0:cb:06:7d:86:35:5b:b7:4b:83:0a:7e:
         58:d4:bc:72:2e:b8:81:8f:79:91:25:39:4d:81:0f:19:a7:38:
         7a:03:0e:b7:84:b0:78:6f:54:b0:a8:14:ed:f8:12:0c:b6:2c:
         b9:6e:cf:e2:c8:e6:1a:4a:87:2c:19:4f:ea:8e:b6:b4:14:1e:
         7f:16:90:2c:66:b1:2c:1b:d9:40:f1:7c:d5:50:fd:5c:e1:78:
         ba:61:da:f3:5e:43:ca:3c:60:c1:52:7d:55:da:74:91:4c:a8:
         b4:90:42:50:ee:fb:b9:ca:12:6c:22:00:54:fb:ab:8d:12:fa:
         2d:57:2c:4f:31:d1:85:9b:38:c8:e2:8f:3b:b1:63:90:29:15:
         91:40:f2:8b:90:0a:96:de:77:7e:a1:94:f5:69:73:00:79:24:
         09:dc:05:de:fc:23:28:1e:d8:90:49:70:69:0c:69:1d:11:03:
         41:4b:22:00:43:85:a1:8a:6c:20:b6:d1:af:19:de:4b:ba:67:
         f3:19:e0:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 01:47:52 2026 by rpki-client