Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft
File:                     MRhMnotqpAfA1z7QugYwdfYxTjY.mft (raw, json)
Hash identifier:          A3Wpf/XxeXDy4T/n9Npd2bYfbdW213Ci6LkNFUea5pg=
Subject key identifier:   D6:4A:A4:E1:07:D3:40:B3:AE:08:EE:8D:16:A8:6E:C9:44:0C:CE:40
Authority key identifier: 31:18:4C:9E:8B:6A:A4:07:C0:D7:3E:D0:BA:06:30:75:F6:31:4E:36
Certificate issuer:       /CN=31184c9e8b6aa407c0d73ed0ba063075f6314e36
Certificate serial:       019EC1488C1B1D2D37F6DB77F1A915FF0D71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MRhMnotqpAfA1z7QugYwdfYxTjY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft
Manifest number:          0A30
Signing time:             Sat 13 Jun 2026 14:00:17 +0000
Manifest this update:     Sat 13 Jun 2026 14:00:17 +0000
Manifest next update:     Sun 14 Jun 2026 14:00:17 +0000
Files and hashes:         1: MRhMnotqpAfA1z7QugYwdfYxTjY.crl (hash: MUh0lx5cfDARIlwFipuXZaqY7D4r1zC0LhfLnuWRcKQ=)
                          2: NOQAIGhcVOk-dG-3LT-WabylerQ.roa (hash: 3dTs8E+Gd9ybSoS4mvqWxm0nC0/sPxnqwKVqAc/Y2E8=)
                          3: gXOqQHCWpJeap3Of6MCl2Jvf4-U.roa (hash: dm1irguKJX1M1N4BpGlN5fXMYwn1fhmqM78moCK0+Kk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MRhMnotqpAfA1z7QugYwdfYxTjY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:48:8c:1b:1d:2d:37:f6:db:77:f1:a9:15:ff:0d:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31184c9e8b6aa407c0d73ed0ba063075f6314e36
        Validity
            Not Before: Jun 13 14:00:17 2026 GMT
            Not After : Jun 14 14:00:17 2026 GMT
        Subject: CN=d64aa4e107d340b3ae08ee8d16a86ec9440cce40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:72:13:b0:74:53:4b:c4:8b:bd:de:e6:0b:83:
                    63:35:b1:30:88:5d:e3:03:23:51:2b:2e:e0:7c:64:
                    a4:b6:5e:01:63:a3:e8:96:e4:ab:33:4b:c9:bc:e9:
                    ae:44:92:9b:97:2c:a5:d4:dd:cc:50:d4:0f:d1:16:
                    87:08:1f:0a:ac:90:03:72:79:17:9e:eb:77:ed:04:
                    62:ed:c5:cb:30:ef:43:7e:1d:05:8d:6a:be:09:d3:
                    e6:bb:c1:e3:11:f0:02:5d:76:dd:8e:7f:05:86:a6:
                    2d:28:e9:0f:c6:6a:4f:5e:cf:09:c0:cb:d7:12:8d:
                    5e:3b:b0:cb:81:f4:e2:db:7b:93:81:4c:7f:f6:50:
                    e9:13:94:ad:af:2f:53:f0:31:5c:4b:90:ad:e4:39:
                    3a:88:d3:83:53:df:62:5e:a8:25:f4:7b:77:eb:95:
                    d6:44:38:70:1c:0a:a4:aa:be:13:ae:3a:80:f4:71:
                    b2:a4:38:32:3a:7b:29:b8:28:db:44:c9:81:d1:49:
                    89:c1:6b:d2:56:15:d3:6b:39:fb:27:ed:ba:71:be:
                    ed:4f:97:67:47:9f:53:21:7f:40:6d:a3:ed:45:0f:
                    75:b5:3b:9d:39:77:2c:1a:84:c5:a2:3b:69:69:1e:
                    db:b0:0a:7b:c9:c8:fa:ce:6a:c5:86:58:02:f1:a0:
                    87:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:4A:A4:E1:07:D3:40:B3:AE:08:EE:8D:16:A8:6E:C9:44:0C:CE:40
            X509v3 Authority Key Identifier:
                keyid:31:18:4C:9E:8B:6A:A4:07:C0:D7:3E:D0:BA:06:30:75:F6:31:4E:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MRhMnotqpAfA1z7QugYwdfYxTjY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:c3:9a:b0:e1:3c:69:1f:b3:b1:68:c1:3b:18:8b:9d:e5:1a:
         b7:38:dc:70:35:7e:8a:dc:4e:e3:44:7d:ea:af:5e:eb:f5:f6:
         ab:ee:81:96:a2:96:0a:72:bb:ff:29:b2:bc:d4:eb:2f:09:2f:
         f1:67:d5:0b:e7:c7:e1:6e:e5:fd:fb:15:a0:e7:58:2b:63:a0:
         24:e7:a9:ed:ab:78:fd:a9:ed:49:c3:5f:a0:2d:c2:7d:f1:36:
         f4:a7:3c:c4:b5:4c:b5:38:f1:30:2c:48:d0:a9:64:44:7b:d7:
         e1:8d:5f:b2:40:ce:64:72:31:48:c9:8d:b3:5d:61:59:81:1d:
         0f:86:6d:bb:0d:e6:35:65:de:df:7b:e8:e9:22:9a:d8:c6:f4:
         88:6f:2d:d7:47:5b:7c:45:02:46:9d:40:66:63:23:a3:95:3f:
         fa:da:cb:7a:a1:d2:11:31:0d:18:80:49:b4:61:f8:6d:4f:2d:
         73:5f:e4:b4:8f:cc:18:19:d8:4d:78:1e:6a:1c:00:da:02:e0:
         7a:6c:72:ff:cb:29:a1:68:64:67:70:95:59:4e:d3:4b:4e:36:
         1a:16:4a:86:25:0e:ee:cb:6f:fa:a9:80:57:2d:b6:f8:02:12:
         3d:85:06:58:ad:e0:8c:88:c3:e9:49:ce:f6:9a:e5:31:98:e5:
         91:f1:d3:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:16:05 2026 by rpki-client