Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.mft
File:                     mb99XHDGMlTQzeNMK6SdlAf8JPM.mft (raw, json)
Hash identifier:          7eJ4v2QC/GKdxV8c5KZqB9axDHfy5tc5IxbG2LjXkCw=
Subject key identifier:   71:EC:89:9A:71:BB:F8:16:17:8E:50:3C:24:B3:4E:99:95:65:3A:0A
Authority key identifier: 99:BF:7D:5C:70:C6:32:54:D0:CD:E3:4C:2B:A4:9D:94:07:FC:24:F3
Certificate issuer:       /CN=99bf7d5c70c63254d0cde34c2ba49d9407fc24f3
Certificate serial:       019EC1B732054FAEEB988CF7E7C750A9C560
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mb99XHDGMlTQzeNMK6SdlAf8JPM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.mft
Manifest number:          0AB7
Signing time:             Sat 13 Jun 2026 16:01:08 +0000
Manifest this update:     Sat 13 Jun 2026 16:01:08 +0000
Manifest next update:     Sun 14 Jun 2026 16:01:08 +0000
Files and hashes:         1: T8N7nCQnGIjhbsR3LmsuRAA0G8M.roa (hash: PEOG98xvhnROQhfBX1D6hwED9IIyduE7r0HR6hXEDLk=)
                          2: mb99XHDGMlTQzeNMK6SdlAf8JPM.crl (hash: ZlllPdOdvYTOX5NX/08r8SUojFav9Gld0H8u9a7k+0g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mb99XHDGMlTQzeNMK6SdlAf8JPM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 16:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:b7:32:05:4f:ae:eb:98:8c:f7:e7:c7:50:a9:c5:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99bf7d5c70c63254d0cde34c2ba49d9407fc24f3
        Validity
            Not Before: Jun 13 16:01:08 2026 GMT
            Not After : Jun 14 16:01:08 2026 GMT
        Subject: CN=71ec899a71bbf816178e503c24b34e9995653a0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:53:ce:6a:80:28:77:78:05:24:16:fa:b1:dd:
                    80:67:40:5c:50:b3:0b:85:e0:98:e9:89:b7:4f:af:
                    dc:f2:16:cf:fc:a0:75:16:4b:b4:6b:21:9b:ba:31:
                    8d:08:42:ce:c9:e4:86:2c:b2:0b:e4:0e:d3:8e:dc:
                    f2:39:97:fe:9e:bc:98:d6:d4:ff:76:78:4c:ba:03:
                    a3:13:6f:4a:21:6b:31:fc:39:69:54:da:49:a5:16:
                    0e:73:82:e6:d2:e3:e4:28:31:11:1f:28:55:62:1a:
                    14:fc:11:86:c6:4b:62:8d:41:09:c2:46:4a:fb:d8:
                    89:1d:25:1d:96:06:05:11:1f:02:bd:48:a3:18:2e:
                    6b:0a:a2:de:dc:7d:af:67:00:b8:cf:36:44:b5:90:
                    8b:85:b5:c1:c0:de:9c:b3:ee:4f:8a:56:51:1f:f9:
                    0a:0b:f4:1b:4c:f1:ea:98:6d:b6:52:82:e4:24:12:
                    b7:34:e4:86:08:0d:02:c7:0c:4c:59:40:dd:cf:ce:
                    94:0e:c7:17:a9:d8:ca:ca:24:da:df:37:db:f1:44:
                    3b:8b:5a:c6:63:5f:14:52:ac:16:6f:c3:48:65:16:
                    cd:37:b3:e6:65:b4:f8:38:ed:85:c9:30:8e:ad:fd:
                    f0:bf:6e:4e:f6:7a:a1:6c:c1:b2:d3:cd:e0:40:ac:
                    05:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:EC:89:9A:71:BB:F8:16:17:8E:50:3C:24:B3:4E:99:95:65:3A:0A
            X509v3 Authority Key Identifier:
                keyid:99:BF:7D:5C:70:C6:32:54:D0:CD:E3:4C:2B:A4:9D:94:07:FC:24:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mb99XHDGMlTQzeNMK6SdlAf8JPM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:0f:cd:2e:02:84:b6:7e:60:78:98:14:61:6a:5c:90:d3:59:
         56:c7:e3:d7:32:86:a5:93:dd:ff:ee:51:c1:ee:45:82:af:93:
         13:75:ef:a1:26:7c:b0:a7:3c:ae:0a:f5:fe:9e:ee:12:63:3c:
         8b:db:ba:1a:43:4a:f6:d2:7a:ee:8c:4f:9c:e1:6e:ea:d3:b0:
         c5:6f:44:bf:3d:87:be:99:b9:53:a7:5f:26:54:bb:fd:8d:2f:
         27:2a:92:5e:78:fe:8e:34:92:a1:57:2f:18:e6:59:84:5a:2c:
         62:5b:43:da:4f:5d:a2:84:60:f1:b7:3e:49:cc:be:4b:c0:66:
         7d:1d:c4:61:b2:a2:cd:c1:53:0d:84:d5:16:bd:7d:6b:e0:1d:
         61:36:26:c0:65:d7:4f:d7:15:88:71:cf:46:c3:43:bd:7a:4e:
         66:cb:23:d0:8c:c3:2a:01:4a:fd:49:93:ab:1c:a2:02:f0:be:
         d1:0a:6e:2b:5d:2d:31:a4:18:7d:15:f3:aa:68:5d:d2:76:5c:
         bb:12:a1:11:6e:16:5e:79:bd:fd:6e:ec:b4:11:41:a9:7b:03:
         e5:29:31:ac:6b:d3:41:ea:ab:20:2f:32:7f:d9:33:65:ec:9a:
         e3:a8:17:01:09:a9:1e:22:6a:ff:8d:8e:9b:80:7c:fa:9c:53:
         72:58:ae:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:05:18 2026 by rpki-client