Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/7efb35-9787-46f0-b799-d5c211eb3956/1/mPt_CPlW06-VcZxTf7P5t-MwBrM.mft
File:                     mPt_CPlW06-VcZxTf7P5t-MwBrM.mft (raw, json)
Hash identifier:          jy4WZGc60bhALX/8mc1Oq2DWj5osL4k0RLAHFKngDO8=
Subject key identifier:   42:84:A9:D8:3B:E1:04:76:0D:58:BE:A1:BD:A9:89:32:46:97:CE:F9
Authority key identifier: 98:FB:7F:08:F9:56:D3:AF:95:71:9C:53:7F:B3:F9:B7:E3:30:06:B3
Certificate issuer:       /CN=98fb7f08f956d3af95719c537fb3f9b7e33006b3
Certificate serial:       019D9A74C24C126F10CEF7DAF3B8F7DA087C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mPt_CPlW06-VcZxTf7P5t-MwBrM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/7efb35-9787-46f0-b799-d5c211eb3956/1/mPt_CPlW06-VcZxTf7P5t-MwBrM.mft
Manifest number:          17B5
Signing time:             Fri 17 Apr 2026 08:00:36 +0000
Manifest this update:     Fri 17 Apr 2026 08:00:36 +0000
Manifest next update:     Sat 18 Apr 2026 08:00:36 +0000
Files and hashes:         1: J45EAD_kEtjBXGYLVqLDQT5JeLQ.roa (hash: +bn5GNQ981Cor98nOGEnbtJBrJvB+NRvavwCrVsojT8=)
                          2: mPt_CPlW06-VcZxTf7P5t-MwBrM.crl (hash: Iieg4ntKRk6YtM1qujqsOIxQEDLgLdNJF0ZYS7GqUtk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/7efb35-9787-46f0-b799-d5c211eb3956/1/mPt_CPlW06-VcZxTf7P5t-MwBrM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/7efb35-9787-46f0-b799-d5c211eb3956/1/mPt_CPlW06-VcZxTf7P5t-MwBrM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mPt_CPlW06-VcZxTf7P5t-MwBrM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:74:c2:4c:12:6f:10:ce:f7:da:f3:b8:f7:da:08:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98fb7f08f956d3af95719c537fb3f9b7e33006b3
        Validity
            Not Before: Apr 17 08:00:36 2026 GMT
            Not After : Apr 18 08:00:36 2026 GMT
        Subject: CN=4284a9d83be104760d58bea1bda989324697cef9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:df:ec:57:46:b1:b4:7b:e6:dc:46:7c:19:51:
                    d1:b4:60:8a:02:56:ba:64:b5:82:33:0f:82:72:ca:
                    b0:4a:9e:9f:d9:c0:31:df:0d:f8:16:25:48:a6:00:
                    3d:e0:85:d5:9a:63:e1:63:72:06:2f:0d:de:70:72:
                    aa:cc:1f:24:9c:f6:df:3c:b8:17:c7:31:52:f5:02:
                    43:3f:a5:90:0e:e3:8f:ac:58:4a:18:fc:73:47:67:
                    e6:64:1b:da:f5:b1:b9:1d:9e:d6:2b:77:92:24:22:
                    93:d2:78:1d:9e:a4:17:13:e6:bc:a6:0e:c5:36:b8:
                    e4:27:8b:ed:5f:97:83:0f:fd:d0:73:b3:58:18:29:
                    63:70:a2:bd:86:9f:bf:08:bb:70:0b:a8:9f:2c:a1:
                    96:b1:a0:d2:e8:6b:e0:d1:7e:f7:c6:b4:b3:8d:b8:
                    8f:46:bc:94:46:d1:53:e0:0f:a1:22:79:d7:0e:bc:
                    cb:ed:ab:32:72:07:92:45:1f:17:d8:4f:85:56:c2:
                    3f:0a:24:a3:a9:e7:05:b2:50:9c:cb:a4:19:43:ed:
                    08:65:bf:41:ca:68:16:d3:f7:e0:08:04:e8:dc:8b:
                    3e:2f:d7:72:a7:b7:68:bd:44:10:92:ee:ae:b5:10:
                    2e:e6:f6:02:d7:a0:8d:e1:19:73:a8:d4:05:7e:5b:
                    df:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:84:A9:D8:3B:E1:04:76:0D:58:BE:A1:BD:A9:89:32:46:97:CE:F9
            X509v3 Authority Key Identifier:
                keyid:98:FB:7F:08:F9:56:D3:AF:95:71:9C:53:7F:B3:F9:B7:E3:30:06:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mPt_CPlW06-VcZxTf7P5t-MwBrM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7efb35-9787-46f0-b799-d5c211eb3956/1/mPt_CPlW06-VcZxTf7P5t-MwBrM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7efb35-9787-46f0-b799-d5c211eb3956/1/mPt_CPlW06-VcZxTf7P5t-MwBrM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:51:6f:b5:4e:7d:fd:a6:f0:c5:0d:ab:73:e9:e2:3a:55:55:
         08:c7:bc:ab:79:4f:a8:4c:d9:f4:97:82:66:a9:00:48:46:44:
         45:f1:88:41:59:e6:97:3c:6f:f1:21:48:45:e7:c3:13:06:ba:
         07:64:40:9a:29:cf:52:0f:c0:9d:60:6b:94:98:3c:df:76:d5:
         6f:14:d3:f5:9c:59:0f:d2:c3:83:c2:c7:88:26:b5:65:cc:9b:
         7e:f2:aa:9d:7d:47:a5:ee:f8:ba:a4:72:69:d4:d2:d7:39:d9:
         c4:95:66:51:85:b4:d8:fc:ad:8f:27:e9:21:a8:a6:12:85:79:
         4d:25:ad:cb:bc:bc:81:f0:b2:61:cd:31:75:a8:cb:99:d3:dc:
         3d:b8:20:ca:6e:08:2c:89:a3:0e:2f:e7:3f:f9:88:a3:01:de:
         77:e7:0a:02:a8:58:7c:f7:72:72:fa:be:68:ce:77:4f:94:bf:
         a1:5d:01:6e:be:32:74:29:d8:3d:43:14:64:e6:b9:59:20:9b:
         5c:44:2c:9b:a9:77:3b:c4:a3:6f:d4:3a:72:e2:80:cd:2c:d4:
         c9:e4:10:4c:bb:3c:b2:df:df:15:d6:fb:fe:bc:c5:96:15:86:
         23:0f:32:f5:df:d4:2c:6c:de:38:dd:e1:09:d8:79:32:9d:16:
         ba:0f:8d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:57:52 2026 by rpki-client