Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.mft
File:                     MBpkhyXuJqRgy5scvNnJyDLESa8.mft (raw, json)
Hash identifier:          FP4ufM8e0661BKtNNcqIW33TYtGqYU7naC2Ht8rfeTI=
Subject key identifier:   17:F8:8D:63:6D:57:C0:50:40:47:B1:62:8A:2C:76:9C:60:CB:4B:54
Authority key identifier: 30:1A:64:87:25:EE:26:A4:60:CB:9B:1C:BC:D9:C9:C8:32:C4:49:AF
Certificate issuer:       /CN=301a648725ee26a460cb9b1cbcd9c9c832c449af
Certificate serial:       019FAC082DB0E1F5D50FC655AB49B8E1EB94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MBpkhyXuJqRgy5scvNnJyDLESa8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.mft
Manifest number:          0FF2
Signing time:             Wed 29 Jul 2026 04:00:44 +0000
Manifest this update:     Wed 29 Jul 2026 04:00:44 +0000
Manifest next update:     Thu 30 Jul 2026 04:00:44 +0000
Files and hashes:         1: LMyd5AVVPstuPC5E7pVL_2qH79c.roa (hash: tZV4ibO3L7V8SZM1mv/sUwiQCz0xJaX2spb6v95tdyA=)
                          2: MBpkhyXuJqRgy5scvNnJyDLESa8.crl (hash: r77NCHiba3VQd83nhmSNWEPYBYkqzjL17AyGQS/hRI8=)
                          3: N5As3_5f02c5s8zn2uyxGXeV7es.roa (hash: agj60RbD37HPgv9kIsdcj8QWRgmWH3ok7Fvf9vYBX/k=)
                          4: f69K1aG7WjoLOs2Y1pAtNPdEc1U.roa (hash: cGXoJfZUx/B5ZqQ+rwCKHOTNtBGcpBtjUB50pxeKDJw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MBpkhyXuJqRgy5scvNnJyDLESa8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 04:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:08:2d:b0:e1:f5:d5:0f:c6:55:ab:49:b8:e1:eb:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=301a648725ee26a460cb9b1cbcd9c9c832c449af
        Validity
            Not Before: Jul 29 04:00:44 2026 GMT
            Not After : Jul 30 04:00:44 2026 GMT
        Subject: CN=17f88d636d57c0504047b1628a2c769c60cb4b54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4f:dd:13:13:98:84:7d:7f:03:8b:ff:d5:2b:
                    93:85:9f:83:22:b0:74:09:ce:ad:92:18:69:88:9b:
                    2d:48:0b:4e:8e:6d:fa:a5:f7:c9:da:82:1a:21:97:
                    de:e5:68:24:09:5f:2a:18:6c:20:c8:33:af:16:86:
                    e7:5b:13:01:15:e3:66:f3:15:d1:6f:8d:78:5e:31:
                    a5:31:f1:84:cd:d8:89:f6:6c:84:30:81:e1:97:66:
                    b8:5d:a6:9d:52:42:5e:83:65:1a:95:da:50:50:ed:
                    8b:5a:9d:36:7d:5a:6d:8c:49:ac:87:f4:8d:35:43:
                    8d:b8:b1:b7:d7:4e:9b:b3:7f:96:e2:1d:21:8c:ea:
                    19:94:54:2c:f7:ee:4f:38:fc:d8:3b:40:c0:c0:d3:
                    e1:4c:39:b0:13:23:e6:e0:6b:dd:43:10:44:ea:7f:
                    a7:8c:ff:5e:1f:76:0e:59:24:46:7b:b9:d6:4a:b7:
                    3a:59:32:55:8b:e0:3c:12:aa:a8:5a:a9:69:86:7c:
                    c6:26:7e:45:4d:1f:74:2c:e6:43:cb:80:7c:6b:07:
                    72:f4:96:f7:90:01:1f:84:27:99:cb:15:00:cf:77:
                    cd:72:38:ac:88:85:2a:15:1d:19:80:48:0c:7c:4e:
                    24:cb:06:ad:64:f9:79:5a:e3:74:90:4f:68:82:b9:
                    8a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:F8:8D:63:6D:57:C0:50:40:47:B1:62:8A:2C:76:9C:60:CB:4B:54
            X509v3 Authority Key Identifier:
                keyid:30:1A:64:87:25:EE:26:A4:60:CB:9B:1C:BC:D9:C9:C8:32:C4:49:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBpkhyXuJqRgy5scvNnJyDLESa8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:fd:ac:cc:ef:c7:9a:84:e7:ac:71:f3:0f:1c:71:ea:a1:40:
         e8:41:7b:5a:f8:bf:14:14:66:5d:5f:46:6c:28:04:a3:45:35:
         9d:5f:ca:b9:93:9b:0d:4f:a5:5c:13:ef:80:90:69:19:3e:f2:
         81:f5:f5:37:31:85:87:8f:df:49:b5:ec:b7:19:49:83:52:30:
         e3:07:50:04:f8:fc:87:92:01:16:1f:08:5e:88:b1:72:5b:0a:
         8e:7f:07:07:b2:d2:a9:dd:51:c7:5f:d4:55:39:bd:ee:b7:36:
         ad:55:0f:70:1d:ba:f9:9e:37:9f:38:f3:c8:2a:c8:ec:c1:7f:
         b9:8f:b7:01:e5:24:50:6a:ea:ac:bd:83:29:78:65:2e:2b:26:
         fd:cc:9f:f4:15:eb:82:af:b8:5b:0c:f1:16:8e:f7:0d:f5:de:
         39:7d:a8:8b:7f:8b:87:67:3f:95:7f:60:2a:f0:9c:8d:b1:51:
         3e:74:6f:41:ad:0f:78:d1:51:9e:f1:06:57:c0:85:7d:5b:7f:
         14:06:da:87:2d:b2:c3:cf:6b:82:c9:57:27:73:d3:98:7f:91:
         40:25:79:7c:3c:ee:66:0b:89:b3:ba:19:73:f2:ee:fe:e7:63:
         4e:e0:ac:41:38:e0:c7:ed:3b:8a:7b:96:d6:33:28:64:f0:97:
         a4:93:e3:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:05:27 2026 by rpki-client