Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.mft
File:                     mb99XHDGMlTQzeNMK6SdlAf8JPM.mft (raw, json)
Hash identifier:          0o77gNnQdVUdWgA7IbnobaOUi4uGzm8rfSJjfUGqUJc=
Subject key identifier:   3B:50:1E:8E:9D:C7:5E:0C:2A:86:64:F5:FF:77:F9:19:06:43:9D:4B
Authority key identifier: 99:BF:7D:5C:70:C6:32:54:D0:CD:E3:4C:2B:A4:9D:94:07:FC:24:F3
Certificate issuer:       /CN=99bf7d5c70c63254d0cde34c2ba49d9407fc24f3
Certificate serial:       019FAB630991CF39FFB075F086C49082A301
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mb99XHDGMlTQzeNMK6SdlAf8JPM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.mft
Manifest number:          0B30
Signing time:             Wed 29 Jul 2026 01:00:22 +0000
Manifest this update:     Wed 29 Jul 2026 01:00:22 +0000
Manifest next update:     Thu 30 Jul 2026 01:00:22 +0000
Files and hashes:         1: T8N7nCQnGIjhbsR3LmsuRAA0G8M.roa (hash: PEOG98xvhnROQhfBX1D6hwED9IIyduE7r0HR6hXEDLk=)
                          2: mb99XHDGMlTQzeNMK6SdlAf8JPM.crl (hash: 8zs3JxThHE9I0TUkSTtGKuS42XCpvaC3MvRZRykEwoU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mb99XHDGMlTQzeNMK6SdlAf8JPM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:63:09:91:cf:39:ff:b0:75:f0:86:c4:90:82:a3:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99bf7d5c70c63254d0cde34c2ba49d9407fc24f3
        Validity
            Not Before: Jul 29 01:00:22 2026 GMT
            Not After : Jul 30 01:00:22 2026 GMT
        Subject: CN=3b501e8e9dc75e0c2a8664f5ff77f91906439d4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2d:33:b8:ab:14:b8:31:1b:74:2c:83:6d:96:
                    76:24:b8:3e:f5:48:42:d7:38:ff:de:32:93:23:2e:
                    1a:c6:5f:2d:00:38:34:fe:6c:24:2e:c6:cf:aa:e2:
                    48:60:d6:4d:14:0d:a6:ca:c1:40:7a:ef:b8:ed:df:
                    6b:4d:7a:8f:fc:af:6c:36:cf:0b:20:ea:0d:b7:fa:
                    b0:d2:70:5a:a1:85:e1:6f:06:28:83:58:e9:a5:8e:
                    a4:b2:77:5b:48:89:94:17:ec:5e:08:ca:61:de:61:
                    cb:39:13:7d:2c:11:03:2d:07:8a:f9:fe:60:be:ee:
                    ec:72:be:91:cc:d8:04:4c:19:38:de:65:e8:ab:9c:
                    8f:b3:6d:da:ba:85:53:fb:1e:84:5e:63:76:2c:97:
                    d8:f2:c5:50:df:68:1e:99:33:f6:44:a9:d1:6f:51:
                    19:f7:17:31:fc:a4:2e:78:c2:46:c7:aa:10:19:ed:
                    4f:30:57:4f:c1:42:21:c0:e6:00:be:25:12:3e:6e:
                    7c:b0:bc:b2:79:0d:22:fb:48:da:8a:f8:dc:47:b0:
                    ce:c8:0e:a5:54:3a:c3:1a:c0:6c:37:63:fb:67:03:
                    e4:4a:3d:d1:fd:19:a3:13:3c:69:c8:d2:c4:f1:da:
                    28:72:2d:6e:9d:3e:04:99:48:8e:af:a6:df:59:16:
                    4e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:50:1E:8E:9D:C7:5E:0C:2A:86:64:F5:FF:77:F9:19:06:43:9D:4B
            X509v3 Authority Key Identifier:
                keyid:99:BF:7D:5C:70:C6:32:54:D0:CD:E3:4C:2B:A4:9D:94:07:FC:24:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mb99XHDGMlTQzeNMK6SdlAf8JPM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:78:2b:8e:0f:18:7f:25:2a:15:00:a4:16:32:bc:8f:6a:c7:
         8a:45:d8:d4:6a:ee:0f:13:4b:c2:14:19:91:70:25:8e:89:60:
         b2:23:00:41:fd:10:b6:1f:73:2d:8b:9c:31:02:39:8c:ae:d0:
         52:22:4c:68:5a:04:06:b4:5e:82:4b:75:f0:fc:08:bf:02:5e:
         30:a4:d9:d3:6a:00:75:cd:07:46:a7:70:47:65:2d:e7:a5:0a:
         47:26:7a:b3:35:7f:8f:82:d1:2b:08:19:69:f9:d2:3b:73:c4:
         e4:e1:c0:92:e8:b1:23:b0:36:68:cb:c5:bd:05:00:4f:d5:f3:
         75:ca:03:91:db:54:5f:36:88:2a:6d:72:8f:97:52:f4:db:a7:
         b9:fa:0d:4c:c4:89:47:68:06:69:ec:0e:c2:59:75:43:65:65:
         9c:d8:3c:2e:79:46:7c:67:67:5f:85:e2:0d:91:68:47:2f:5c:
         74:0e:06:26:7e:a4:ae:58:3c:9f:cf:08:54:88:f7:ab:ff:be:
         00:06:62:65:df:37:62:0d:63:5c:91:4a:53:06:42:c1:f6:b8:
         75:d3:4a:94:de:99:b5:ad:1a:af:4c:8e:ab:ea:ae:a3:a8:fb:
         bf:1c:58:e2:35:b8:44:82:39:60:74:7c:54:fa:d2:51:bc:67:
         4a:27:17:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:02:05 2026 by rpki-client