Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft
File:                     MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft (raw, json)
Hash identifier:          bxmBPO6hbZhUXYfqUUeY6qoXEQtfbW1E1rKYbxLawWw=
Subject key identifier:   A4:96:AC:EF:50:FC:23:42:F3:5F:29:8F:C8:2D:09:72:79:BF:0F:02
Authority key identifier: 30:F0:8F:84:0E:31:7E:95:20:5B:A1:34:97:D9:DB:C7:37:7B:9E:57
Certificate issuer:       /CN=30f08f840e317e95205ba13497d9dbc7377b9e57
Certificate serial:       019EBFC8C91E52F5EA870E1952186637292E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MPCPhA4xfpUgW6E0l9nbxzd7nlc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft
Manifest number:          09D5
Signing time:             Sat 13 Jun 2026 07:01:07 +0000
Manifest this update:     Sat 13 Jun 2026 07:01:07 +0000
Manifest next update:     Sun 14 Jun 2026 07:01:07 +0000
Files and hashes:         1: MPCPhA4xfpUgW6E0l9nbxzd7nlc.crl (hash: mn5u33dcGqjZ8oqgm6w7n3qw5LI/k2I8Wfg3EKF2PfQ=)
                          2: zlryn4mko1wRxoOR9PxP0fcxrmE.roa (hash: AIH8NLSlPfR8dAuRGSz5mVvImvbLrLk/0uPHSLREnZ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MPCPhA4xfpUgW6E0l9nbxzd7nlc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 07:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c8:c9:1e:52:f5:ea:87:0e:19:52:18:66:37:29:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30f08f840e317e95205ba13497d9dbc7377b9e57
        Validity
            Not Before: Jun 13 07:01:07 2026 GMT
            Not After : Jun 14 07:01:07 2026 GMT
        Subject: CN=a496acef50fc2342f35f298fc82d097279bf0f02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:21:6a:e6:61:7d:23:be:70:c3:ce:94:6e:eb:
                    90:bd:d1:a8:63:b0:57:e4:dd:03:ec:aa:47:9d:3f:
                    dc:0d:be:bf:a4:8b:d8:1a:19:10:37:be:4d:a9:c2:
                    83:0c:6f:3d:7e:cf:ac:f0:68:c2:7c:33:6c:84:13:
                    da:4c:89:e0:79:4b:f0:08:85:95:18:a3:46:26:28:
                    97:2e:36:32:cb:1e:3b:21:0b:b7:37:a4:dc:8c:b4:
                    4d:40:f2:61:35:15:cd:6e:54:57:5b:df:84:93:58:
                    e7:91:5a:d3:a0:4e:88:a6:98:c5:7a:0c:ad:fc:b3:
                    ec:bd:eb:5d:7c:4e:0e:10:3d:94:71:70:3f:06:68:
                    eb:f4:93:c2:1e:26:02:2f:5a:db:c8:bf:9e:30:c2:
                    9f:15:a4:e4:22:48:e2:db:78:2f:22:0f:ef:df:ff:
                    c4:6d:46:30:a0:39:ba:f3:f2:d6:6c:92:88:19:ad:
                    5b:13:68:3d:c9:8c:64:e5:be:fa:83:b0:e4:55:b3:
                    cb:df:35:0b:d5:44:bf:d6:1d:c2:2b:9f:40:31:02:
                    31:e3:98:bd:0f:3e:53:1f:00:a7:18:fa:c7:3f:d3:
                    27:15:7c:1b:93:66:8b:77:be:31:1e:e0:4a:a9:4a:
                    89:e7:5e:4e:39:70:e4:76:34:eb:84:03:84:43:30:
                    10:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:96:AC:EF:50:FC:23:42:F3:5F:29:8F:C8:2D:09:72:79:BF:0F:02
            X509v3 Authority Key Identifier:
                keyid:30:F0:8F:84:0E:31:7E:95:20:5B:A1:34:97:D9:DB:C7:37:7B:9E:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPCPhA4xfpUgW6E0l9nbxzd7nlc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d7:b6:c3:e1:ae:3d:3f:11:a8:25:6d:34:a9:64:60:94:4c:cc:
         41:1b:3e:f3:e9:72:92:81:ab:a9:b1:d1:c6:c5:18:02:7e:ef:
         cf:53:03:6b:7f:1a:0c:1f:38:ae:96:1e:ff:b6:a9:26:38:88:
         c3:5a:5e:c8:2e:57:a5:11:b3:9e:35:10:ce:d8:a2:58:1c:6e:
         47:f2:49:2a:9b:f8:be:b8:13:31:e2:aa:f3:1d:6f:2f:95:40:
         e1:75:60:98:ac:fa:78:87:49:15:b5:9f:58:43:36:d9:ee:ba:
         e8:0f:2e:d1:a0:ae:68:1b:bc:e0:81:87:fc:01:60:7b:70:9f:
         fc:1f:52:8c:e2:e2:b3:2c:6c:70:bd:52:6c:3c:f8:d9:5a:70:
         0f:d2:25:e6:10:da:33:9a:fc:17:60:b9:d9:b1:a9:a0:a8:ac:
         47:91:a8:44:2d:d6:50:10:6d:ca:54:78:e1:56:0a:57:b6:95:
         d5:40:4f:07:21:42:67:c8:53:7b:e2:49:2f:17:88:de:17:19:
         9f:d9:72:49:1d:9b:20:b6:94:5d:45:6f:8b:7e:61:ed:06:ec:
         ef:a8:ee:e8:7f:56:ae:1e:13:d7:df:14:d7:c4:b2:4b:8b:97:
         d0:de:23:c8:ee:6e:ba:91:b7:21:95:60:4a:55:5b:d2:c8:02:
         b3:73:10:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:59:33 2026 by rpki-client