Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.mft
File:                     MxvOLugG6TYhES29YYU293X0T7o.mft (raw, json)
Hash identifier:          MTTYZoYgFdaxa1Jlh7cLAlSBS8NFFdayZT1AMt+YuUo=
Subject key identifier:   55:FC:C2:A7:7A:3F:6C:12:11:F5:E3:56:8D:74:7E:7E:9C:4E:7F:0F
Authority key identifier: 33:1B:CE:2E:E8:06:E9:36:21:11:2D:BD:61:85:36:F7:75:F4:4F:BA
Certificate issuer:       /CN=331bce2ee806e93621112dbd618536f775f44fba
Certificate serial:       019EBFFF933066C89C076EC68215EB134A42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MxvOLugG6TYhES29YYU293X0T7o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.mft
Manifest number:          1972
Signing time:             Sat 13 Jun 2026 08:00:58 +0000
Manifest this update:     Sat 13 Jun 2026 08:00:58 +0000
Manifest next update:     Sun 14 Jun 2026 08:00:58 +0000
Files and hashes:         1: MxvOLugG6TYhES29YYU293X0T7o.crl (hash: H14SNBj1ASv3Wm9brHVOb0H8mydsP8ZQ3ZtJb9aTBk8=)
                          2: _nsHDGsxSW2xMTXJcSwiD-J3Jl4.roa (hash: mF6gTp6ZB9piQiXwLO2UJXYdCQJiTLfpyOjrPM5peb0=)
                          3: gU4rt6UfX908kKCYCroARSroPkQ.roa (hash: j63IJzIDAdlriUlQV4IJaH+lIR+tUTSbCwMefhCYMjM=)
                          4: x5dZH_p1jpQNmkzAGadQtc_NwNA.roa (hash: j7kE+HBT1mrUTqWPhu4yo406PYqylXV+5uj+qLftudY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MxvOLugG6TYhES29YYU293X0T7o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:ff:93:30:66:c8:9c:07:6e:c6:82:15:eb:13:4a:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=331bce2ee806e93621112dbd618536f775f44fba
        Validity
            Not Before: Jun 13 08:00:58 2026 GMT
            Not After : Jun 14 08:00:58 2026 GMT
        Subject: CN=55fcc2a77a3f6c1211f5e3568d747e7e9c4e7f0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4f:a0:0c:7a:77:8d:5d:6b:84:52:5c:a6:4b:
                    5f:db:a6:cd:3c:03:a8:21:ce:cc:e9:23:0a:03:1b:
                    13:0d:c0:94:37:76:0c:f5:32:4e:b8:89:e8:a7:e0:
                    55:12:5a:18:58:ee:d1:bd:f9:ba:c8:a9:25:e4:7d:
                    78:22:b5:e5:9e:3b:0c:02:be:e4:37:80:31:fb:67:
                    a5:85:3f:07:d5:65:65:23:0c:a5:c0:71:e7:83:1d:
                    49:5a:28:f5:b0:a6:28:1f:09:19:9b:99:32:f0:6a:
                    96:fd:9d:b9:18:a5:42:25:f1:b7:c9:42:49:f9:f9:
                    37:29:62:7b:3a:1e:bd:92:4f:de:da:e0:a8:d8:76:
                    0d:e7:50:cd:1e:9a:bf:e3:9f:31:20:8d:3a:c4:a6:
                    1d:1e:69:4a:05:3a:5f:fc:2b:f0:fe:d8:92:c1:26:
                    52:09:e1:30:da:95:21:fb:0f:ea:57:d1:6f:18:76:
                    72:90:45:ce:71:7e:94:3f:ac:5a:e2:bc:91:4c:ec:
                    d8:b7:d6:70:a3:1c:54:b9:db:6b:6e:09:f9:f8:98:
                    3d:41:e3:51:66:3b:b0:f2:3b:c0:b6:3c:a0:a9:9f:
                    f0:a4:f0:17:ef:bb:3e:fa:24:d5:26:50:3f:d8:c8:
                    e7:e7:66:d5:04:c0:e3:23:a9:52:ca:91:22:fa:65:
                    44:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:FC:C2:A7:7A:3F:6C:12:11:F5:E3:56:8D:74:7E:7E:9C:4E:7F:0F
            X509v3 Authority Key Identifier:
                keyid:33:1B:CE:2E:E8:06:E9:36:21:11:2D:BD:61:85:36:F7:75:F4:4F:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MxvOLugG6TYhES29YYU293X0T7o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:ef:20:0d:64:2e:8f:60:ba:b1:f1:56:64:a9:05:d5:3c:4b:
         2d:51:db:37:df:2f:67:89:00:6a:f8:77:64:f7:19:82:16:a6:
         47:c3:9c:4e:14:96:2f:38:8b:c2:62:ea:b5:47:4c:a3:dc:f3:
         77:76:31:61:73:84:70:e1:8f:7a:c1:d2:9b:ed:15:e9:0c:9c:
         ff:ce:a2:0f:1e:43:55:fe:a3:af:c3:ec:12:ef:ca:b1:fd:7a:
         0e:6e:24:75:d1:cf:53:c8:66:f6:b7:d4:aa:72:17:29:bd:fe:
         bd:1b:d4:1f:1f:fb:37:67:ab:70:ee:1c:ac:fe:f4:7d:b5:62:
         bb:ed:3d:25:ce:9c:f0:dc:64:41:3a:7e:35:23:87:42:99:26:
         c6:58:77:b1:c2:9c:70:37:76:d0:6a:b8:c2:ee:5e:94:99:28:
         74:c0:6e:d6:29:4d:f1:18:0b:8e:93:95:a7:33:60:bd:a3:75:
         66:d2:9b:56:a7:2b:e0:d8:2c:90:3e:5a:fc:d7:18:da:f6:cb:
         f7:ca:94:a6:73:04:37:9c:fa:61:58:72:99:9e:fe:ee:a3:0f:
         e9:79:85:34:4d:a1:da:dc:3b:bf:da:64:88:d5:6a:d8:7a:fe:
         cc:bf:f5:e4:81:32:86:b5:96:f3:69:5a:21:73:71:d5:85:4a:
         dc:89:eb:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:50:24 2026 by rpki-client