Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.mft
File:                     MXvyYLzaMCviwgdijPsWRHhhT-U.mft (raw, json)
Hash identifier:          kW9jxZm2VvYtQxc5MBGW7BzYzXL1oZmafQJIoP7nyD4=
Subject key identifier:   94:AC:76:DA:B1:0C:95:F9:8A:52:8C:AE:59:7C:30:B8:3B:AF:2F:12
Authority key identifier: 31:7B:F2:60:BC:DA:30:2B:E2:C2:07:62:8C:FB:16:44:78:61:4F:E5
Certificate issuer:       /CN=317bf260bcda302be2c207628cfb164478614fe5
Certificate serial:       019DA3AEF81FE0BA831B17530E2354645522
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MXvyYLzaMCviwgdijPsWRHhhT-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.mft
Manifest number:          103B
Signing time:             Sun 19 Apr 2026 03:00:46 +0000
Manifest this update:     Sun 19 Apr 2026 03:00:46 +0000
Manifest next update:     Mon 20 Apr 2026 03:00:46 +0000
Files and hashes:         1: MXvyYLzaMCviwgdijPsWRHhhT-U.crl (hash: SeQSygJVo3xlAQzXrESa91p3vXO4isss1Qegftf3fs0=)
                          2: xerBMxNW-woKiA8KHx0KcXB634A.roa (hash: AR2Ndl4ICAGHIwDUvuX6ce4+Y2SPrh5ql1qQ6H1YP74=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MXvyYLzaMCviwgdijPsWRHhhT-U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:ae:f8:1f:e0:ba:83:1b:17:53:0e:23:54:64:55:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=317bf260bcda302be2c207628cfb164478614fe5
        Validity
            Not Before: Apr 19 03:00:46 2026 GMT
            Not After : Apr 20 03:00:46 2026 GMT
        Subject: CN=94ac76dab10c95f98a528cae597c30b83baf2f12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:62:7c:ca:4b:01:70:ab:0d:13:e3:43:24:ca:
                    c9:19:01:a6:4b:2f:51:31:b7:0c:66:2a:8d:59:69:
                    89:27:83:9e:88:5c:45:a7:8f:0b:52:e4:85:30:14:
                    84:37:81:48:eb:fa:7b:c3:f3:e2:55:e2:37:04:e8:
                    f3:6d:91:5c:0e:ae:d0:4c:51:1c:34:ff:b8:ed:ea:
                    88:c5:2b:5d:ec:c6:ad:77:39:03:7a:8c:8a:97:9e:
                    ab:cd:ac:9e:4d:4e:77:16:39:cb:ef:a9:6d:6c:b6:
                    d8:b8:58:1a:f8:58:60:d8:40:52:5d:31:13:b1:85:
                    a8:91:9b:88:d4:cb:2f:07:bf:4e:52:d7:cd:44:b5:
                    52:b8:31:6a:f3:cf:40:e3:5c:62:52:c7:5f:b7:23:
                    6a:a8:50:0c:f7:4c:13:47:65:1c:f8:f5:4c:a4:7b:
                    5c:6a:5c:2d:9c:10:b7:ae:ad:ca:9f:30:26:ec:14:
                    38:67:5f:83:98:1a:b4:2d:a1:f7:56:a8:1e:9b:a5:
                    58:34:0b:d2:25:c7:1c:9e:7b:d9:6f:c4:22:e8:72:
                    91:75:0f:c1:15:0a:da:c5:f7:d5:6f:f8:71:7d:25:
                    89:89:f3:da:20:98:53:eb:d6:2a:08:77:82:5b:15:
                    b2:9e:15:bf:db:39:2e:53:a8:b2:1e:b7:a6:03:24:
                    61:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:AC:76:DA:B1:0C:95:F9:8A:52:8C:AE:59:7C:30:B8:3B:AF:2F:12
            X509v3 Authority Key Identifier:
                keyid:31:7B:F2:60:BC:DA:30:2B:E2:C2:07:62:8C:FB:16:44:78:61:4F:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MXvyYLzaMCviwgdijPsWRHhhT-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:bf:06:bb:7d:8b:ed:29:87:13:45:4a:c8:2b:c7:25:a5:b5:
         7f:26:4f:15:06:fa:a2:27:0b:83:d9:b2:08:07:39:cf:3b:61:
         f3:e5:a8:e7:e9:86:3e:6b:d0:04:42:18:96:e0:c4:98:68:57:
         6f:3c:f0:c3:1d:93:29:db:5f:41:55:b2:4c:b7:44:2c:20:2c:
         91:6a:12:05:cf:92:26:b4:fe:79:36:15:44:e3:f2:84:fb:d0:
         04:64:93:ec:22:43:91:1c:51:30:7c:3d:84:f2:04:b7:90:3a:
         58:c3:d7:da:ff:2e:5b:23:54:55:16:ac:80:43:12:a4:12:ff:
         91:17:dc:1c:70:93:a0:cf:ed:c8:1c:83:7a:12:b1:1b:ad:6b:
         15:df:63:8c:cc:0b:f9:e7:6e:f8:b5:16:34:e5:b9:b6:cf:67:
         35:ea:ff:a8:48:0b:8d:57:97:86:1d:4b:dc:9e:c5:be:97:28:
         0e:c7:fd:dd:c5:14:36:4c:6e:4f:68:be:bb:2c:39:21:30:4c:
         b6:be:d0:d6:b5:6d:c5:0b:1d:da:c1:1d:66:1e:43:a3:5e:53:
         d9:81:c0:6a:b9:98:6c:f3:c3:36:4a:5a:fe:51:c7:0d:7d:8b:
         13:48:63:cc:68:a5:08:4a:c3:9a:be:7d:65:f6:b9:05:d4:89:
         04:c3:95:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2jrvgf4LqDGxdTDiNUZFUiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxN2JmMjYwYmNkYTMwMmJlMmMyMDc2MjhjZmIxNjQ0Nzg2
MTRmZTUwHhcNMjYwNDE5MDMwMDQ2WhcNMjYwNDIwMDMwMDQ2WjAzMTEwLwYDVQQD
Eyg5NGFjNzZkYWIxMGM5NWY5OGE1MjhjYWU1OTdjMzBiODNiYWYyZjEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmJ8yksBcKsNE+NDJMrJGQGmSy9R
MbcMZiqNWWmJJ4OeiFxFp48LUuSFMBSEN4FI6/p7w/PiVeI3BOjzbZFcDq7QTFEc
NP+47eqIxStd7MatdzkDeoyKl56rzayeTU53FjnL76ltbLbYuFga+Fhg2EBSXTET
sYWokZuI1MsvB79OUtfNRLVSuDFq889A41xiUsdftyNqqFAM90wTR2Uc+PVMpHtc
alwtnBC3rq3KnzAm7BQ4Z1+DmBq0LaH3Vqgem6VYNAvSJcccnnvZb8Qi6HKRdQ/B
FQraxffVb/hxfSWJifPaIJhT69YqCHeCWxWynhW/2zkuU6iyHremAyRh3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJSsdtqxDJX5ilKMrll8MLg7ry8SMB8GA1UdIwQY
MBaAFDF78mC82jAr4sIHYoz7FkR4YU/lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVh2eVlMemFNQ3Zpd2dkaWpQc1dSSGhoVC1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8wN2QxNDYtZWYyMi00ZTVjLWJkNWMt
NDJlZDNlMzczNjc5LzEvTVh2eVlMemFNQ3Zpd2dkaWpQc1dSSGhoVC1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy8wN2QxNDYtZWYyMi00ZTVjLWJkNWMtNDJlZDNlMzczNjc5
LzEvTVh2eVlMemFNQ3Zpd2dkaWpQc1dSSGhoVC1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm78Gu32L
7SmHE0VKyCvHJaW1fyZPFQb6oicLg9myCAc5zzth8+Wo5+mGPmvQBEIYluDEmGhX
bzzwwx2TKdtfQVWyTLdELCAskWoSBc+SJrT+eTYVROPyhPvQBGST7CJDkRxRMHw9
hPIEt5A6WMPX2v8uWyNUVRasgEMSpBL/kRfcHHCToM/tyByDehKxG61rFd9jjMwL
+edu+LUWNOW5ts9nNer/qEgLjVeXhh1L3J7FvpcoDsf93cUUNkxuT2i+uyw5ITBM
tr7Q1rVtxQsd2sEdZh5Do15T2YHAarmYbPPDNkpa/lHHDX2LE0hjzGilCErDmr59
Zfa5BdSJBMOVBQ==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:29:30 2026 by rpki-client