Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft
File:                     MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft (raw, json)
Hash identifier:          98d/Y228VbyZnyavSQzqNDgWV6RBg2VhzbcVHlpaEFI=
Subject key identifier:   37:60:56:57:5E:83:56:B3:56:DE:08:5E:40:09:C8:DD:7F:E5:C9:81
Authority key identifier: 30:14:B8:C7:F5:09:E1:00:51:B0:CD:29:FD:8D:69:F2:85:50:8D:87
Certificate issuer:       /CN=3014b8c7f509e10051b0cd29fd8d69f285508d87
Certificate serial:       01A125AFC001988A8D4A4B34180C2A913192
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft
Manifest number:          179B
Signing time:             Sat 10 Oct 2026 12:00:37 +0000
Manifest this update:     Sat 10 Oct 2026 12:00:37 +0000
Manifest next update:     Sun 11 Oct 2026 12:00:37 +0000
Files and hashes:         1: MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.crl (hash: yXS8NY0Zz3hvhMLsVRl0YCkktRSXSDfebw4d2xWieKE=)
                          2: sGm0vU9oSC-btG4YiEKa4VaTO0s.roa (hash: Z7crjxHBjgD6BdGuonNkIQvXjn5E/Ot91T2B7Xj3rsM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 11:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:25:af:c0:01:98:8a:8d:4a:4b:34:18:0c:2a:91:31:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3014b8c7f509e10051b0cd29fd8d69f285508d87
        Validity
            Not Before: Oct 10 12:00:37 2026 GMT
            Not After : Oct 11 12:00:37 2026 GMT
        Subject: CN=376056575e8356b356de085e4009c8dd7fe5c981
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:1f:41:c7:2c:f1:50:57:06:e8:04:0a:52:29:
                    26:51:04:2d:15:c0:41:08:c1:46:5a:c1:0f:26:4e:
                    c4:a2:ea:08:3a:f9:bd:b2:30:6c:4d:cd:4d:b1:d8:
                    2d:83:dd:01:27:0e:f0:3d:7d:e3:57:57:a0:a9:b1:
                    7b:d7:ed:98:0f:a9:15:05:53:1b:7e:f5:6f:a0:17:
                    62:60:b0:c2:42:81:6b:6e:18:ab:01:69:e8:d6:6e:
                    99:85:8a:ac:6b:28:17:23:99:93:cb:80:d2:bd:de:
                    9b:29:c0:cd:26:56:33:9e:68:c5:8b:61:bb:ee:7f:
                    1c:a8:0c:fc:49:98:b4:59:af:d7:65:c9:5c:c1:76:
                    04:dc:fa:93:e0:cf:f4:3a:03:81:e2:4f:eb:af:39:
                    95:55:7c:c3:54:72:a9:1c:8b:e2:cf:37:d7:32:e4:
                    4d:a0:26:ed:d4:7e:56:4f:08:7a:e1:e8:53:63:2b:
                    2c:a8:e5:9f:f4:c7:d6:14:9f:1f:ac:7d:9a:3e:49:
                    e6:af:bf:0b:6b:84:ed:a7:29:35:59:fe:f6:fb:cb:
                    57:4e:78:20:0a:cf:90:bd:6b:11:b0:70:0f:e1:f0:
                    16:74:94:e1:80:cb:d9:b3:a3:e2:2a:2c:f2:2d:ca:
                    90:32:17:d4:3d:e2:00:be:74:88:38:54:8c:5d:2b:
                    56:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:60:56:57:5E:83:56:B3:56:DE:08:5E:40:09:C8:DD:7F:E5:C9:81
            X509v3 Authority Key Identifier:
                keyid:30:14:B8:C7:F5:09:E1:00:51:B0:CD:29:FD:8D:69:F2:85:50:8D:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:02:ca:8d:98:77:d1:1c:a3:b2:1a:b9:5a:96:14:f4:d3:bb:
         d4:00:b9:b0:93:11:c4:b6:70:ac:eb:a7:20:7b:de:a3:0a:51:
         b9:43:e2:98:76:02:30:22:bb:23:a9:e0:60:35:10:44:ca:33:
         49:2c:06:35:27:18:0d:ca:09:6e:f4:6d:a8:61:3c:1f:d7:ec:
         5b:6b:ab:51:7c:ff:d8:50:fe:1f:76:6d:f1:5f:67:6d:08:f0:
         1a:2f:1e:f7:2b:16:ba:44:a5:49:dc:74:84:ce:e1:ef:1a:4b:
         0b:6c:6d:b5:5c:1b:fd:5b:f5:f6:f1:c8:c7:78:b2:ba:ed:34:
         42:08:0e:1b:92:75:b4:c2:8b:1c:68:2d:c5:b4:ce:f2:28:dc:
         a1:bd:91:d5:40:0b:3e:af:a8:fd:7d:80:1f:dc:9d:d3:e1:fe:
         67:64:f7:92:18:b6:ff:0a:24:3e:53:ed:49:fa:97:20:69:c9:
         e3:2a:8c:4e:c7:b0:70:0d:2a:f6:b7:b8:ed:91:59:c5:eb:56:
         af:e8:fb:de:96:bb:26:8b:e2:11:09:79:38:aa:78:10:b8:49:
         3b:cf:ba:7d:ef:4f:a7:f4:aa:5b:0f:05:3a:ae:9a:95:d4:7c:
         d9:76:de:05:d9:e6:70:8b:43:f4:6a:45:b5:27:11:d0:be:bd:
         d3:aa:74:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 16:47:43 2026 by rpki-client