Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b648fb-f50b-4cc2-a2b1-2f68216b7424/1/MgEPcCduQY1Y8IxWp5qCuZrKF2M.mft
File:                     MgEPcCduQY1Y8IxWp5qCuZrKF2M.mft (raw, json)
Hash identifier:          djq/EjRZDlZbYZ7RYtOIwf78SD+mVlFs+F03PO8jUPs=
Subject key identifier:   35:9F:B1:3C:9A:C8:DD:0B:B8:D8:65:6B:B6:B8:3A:A6:32:06:5C:4A
Authority key identifier: 32:01:0F:70:27:6E:41:8D:58:F0:8C:56:A7:9A:82:B9:9A:CA:17:63
Certificate issuer:       /CN=32010f70276e418d58f08c56a79a82b99aca1763
Certificate serial:       019D9AAB9D784162B207E11325B9A24BE772
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MgEPcCduQY1Y8IxWp5qCuZrKF2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/b648fb-f50b-4cc2-a2b1-2f68216b7424/1/MgEPcCduQY1Y8IxWp5qCuZrKF2M.mft
Manifest number:          0B38
Signing time:             Fri 17 Apr 2026 09:00:31 +0000
Manifest this update:     Fri 17 Apr 2026 09:00:31 +0000
Manifest next update:     Sat 18 Apr 2026 09:00:31 +0000
Files and hashes:         1: 0hu74NT9Nl_eazTEnAcyb5h2InE.roa (hash: m6XuEPCt02s4/4h9V+rmT4i+jJ/Bk1HfFseea23UT9Y=)
                          2: MgEPcCduQY1Y8IxWp5qCuZrKF2M.crl (hash: 8casX0QB0cd4T69SJU/iwi3FafiDqm/8BJdYvWUmK+Y=)
                          3: Sjohw2kq71FHa4gPxaUKTKd6HR0.roa (hash: Ij9LgFLc0en2koC2Go8CCw321xI1XXKyMHvV0ylYHL8=)
                          4: joxndE8POQgSo8Jcd9jCNmlS5vQ.roa (hash: DniED2LTzPs96x/Too8QwFC0ZIE3r5JA+PWRXtxxs3Q=)
                          5: jq2tHX6PUnn9AoFzTs6WJu2R7Rc.roa (hash: z26r29JIiUw5dvtFWgvAx/Ux8ie9PkcwBpZcuL70X1g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/b648fb-f50b-4cc2-a2b1-2f68216b7424/1/MgEPcCduQY1Y8IxWp5qCuZrKF2M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/b648fb-f50b-4cc2-a2b1-2f68216b7424/1/MgEPcCduQY1Y8IxWp5qCuZrKF2M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MgEPcCduQY1Y8IxWp5qCuZrKF2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:ab:9d:78:41:62:b2:07:e1:13:25:b9:a2:4b:e7:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32010f70276e418d58f08c56a79a82b99aca1763
        Validity
            Not Before: Apr 17 09:00:31 2026 GMT
            Not After : Apr 18 09:00:31 2026 GMT
        Subject: CN=359fb13c9ac8dd0bb8d8656bb6b83aa632065c4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:5c:d7:7e:c8:20:b8:8a:92:3c:f2:f8:d9:1a:
                    51:48:10:b1:74:09:cd:3c:df:12:51:a3:fb:c1:49:
                    74:7d:c9:ce:d6:c7:50:18:1f:43:66:4c:dd:c7:f1:
                    3a:27:63:0a:f9:7a:a2:43:14:27:3d:c1:e5:13:a3:
                    f0:9b:a7:16:96:bc:50:73:a6:7d:fe:bb:bd:1a:d8:
                    f3:6c:6e:6e:ae:70:bc:e3:fd:f8:c3:90:3b:1f:92:
                    12:5f:4d:e3:92:29:7a:09:a1:a7:fc:9e:aa:40:f8:
                    f7:62:e1:35:4b:57:01:ec:89:20:68:c3:54:bb:14:
                    6a:0f:f1:63:79:19:82:95:95:0c:b0:48:70:e0:fe:
                    63:9e:4d:e3:0c:d5:63:fb:6a:43:58:08:e8:32:e8:
                    99:49:3c:e8:e9:35:a3:58:9f:23:1c:8c:49:7d:3d:
                    58:44:5f:d8:42:31:c8:5c:1c:e7:0b:d5:a3:77:b1:
                    34:00:37:e1:f3:62:aa:23:67:02:14:8c:16:5f:ff:
                    1f:98:af:c7:b2:10:29:a4:df:19:54:9c:eb:de:b5:
                    3a:58:de:24:5d:79:f8:52:f7:52:4e:d6:f3:0f:54:
                    0b:7a:69:33:e8:79:e4:05:64:64:c1:89:a2:74:95:
                    e3:3c:47:ec:e4:44:9b:b9:ad:83:ca:5d:01:e4:78:
                    57:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:9F:B1:3C:9A:C8:DD:0B:B8:D8:65:6B:B6:B8:3A:A6:32:06:5C:4A
            X509v3 Authority Key Identifier:
                keyid:32:01:0F:70:27:6E:41:8D:58:F0:8C:56:A7:9A:82:B9:9A:CA:17:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MgEPcCduQY1Y8IxWp5qCuZrKF2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b648fb-f50b-4cc2-a2b1-2f68216b7424/1/MgEPcCduQY1Y8IxWp5qCuZrKF2M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b648fb-f50b-4cc2-a2b1-2f68216b7424/1/MgEPcCduQY1Y8IxWp5qCuZrKF2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:13:a5:8d:89:1e:5c:c7:09:72:55:2e:d2:09:1f:f0:18:0f:
         74:0e:72:bd:4a:56:b1:2f:67:11:13:d4:ec:99:a5:b6:d8:fd:
         7b:e7:d7:bd:cb:83:9a:aa:3f:5a:82:81:03:ea:34:17:85:39:
         c0:73:64:1f:54:e5:37:83:63:a4:5e:6e:e6:0f:94:97:9b:dc:
         f2:25:b9:f5:3f:f2:1a:9d:bf:0c:20:f3:71:5c:87:dd:d7:8e:
         44:f8:ee:e1:04:db:eb:d6:80:e8:8e:c9:b7:29:b5:ae:68:bb:
         3e:19:ee:ba:f3:d7:c3:b4:9b:5b:a6:88:9b:0b:53:6a:25:0a:
         77:a9:36:c8:f5:31:db:e4:09:f5:42:49:a1:08:46:60:92:34:
         4b:d0:f0:0f:cd:ab:8f:b2:0f:b3:05:ea:f4:4c:bb:6e:55:7e:
         4a:2c:ad:0f:ce:e1:57:39:98:cf:f8:df:e5:9f:45:bf:c1:ee:
         29:99:3b:60:44:cb:5c:17:6c:2d:e3:46:2e:d6:27:d2:09:19:
         d8:c7:78:73:29:77:d9:b6:36:69:6d:8b:6c:27:6c:d2:6a:2c:
         d4:fc:e0:55:b9:61:94:43:85:85:10:7b:a0:34:f1:12:fa:61:
         1a:54:83:93:2b:b9:7e:ed:5a:94:53:f2:19:9d:be:98:da:c6:
         20:4a:99:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:17:50 2026 by rpki-client