Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft
File:                     MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft (raw, json)
Hash identifier:          KzlFkoKgeZuVCst2ETaPj3c0SV73jv8Ci6mujLrN2zo=
Subject key identifier:   5A:4E:15:6E:7D:A3:4F:74:86:9F:D3:7D:C7:0A:8C:16:AF:B7:B0:F1
Authority key identifier: 30:14:B8:C7:F5:09:E1:00:51:B0:CD:29:FD:8D:69:F2:85:50:8D:87
Certificate issuer:       /CN=3014b8c7f509e10051b0cd29fd8d69f285508d87
Certificate serial:       019EC17FD27968AD932C0371911A99A5C798
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft
Manifest number:          165E
Signing time:             Sat 13 Jun 2026 15:00:40 +0000
Manifest this update:     Sat 13 Jun 2026 15:00:40 +0000
Manifest next update:     Sun 14 Jun 2026 15:00:40 +0000
Files and hashes:         1: MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.crl (hash: RmtfmGP0BWgxrkAj/mQrWCJLABEYN0Iak9e12Xpr5u0=)
                          2: sGm0vU9oSC-btG4YiEKa4VaTO0s.roa (hash: Z7crjxHBjgD6BdGuonNkIQvXjn5E/Ot91T2B7Xj3rsM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 15:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:7f:d2:79:68:ad:93:2c:03:71:91:1a:99:a5:c7:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3014b8c7f509e10051b0cd29fd8d69f285508d87
        Validity
            Not Before: Jun 13 15:00:40 2026 GMT
            Not After : Jun 14 15:00:40 2026 GMT
        Subject: CN=5a4e156e7da34f74869fd37dc70a8c16afb7b0f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:46:9c:f5:6d:3e:33:2a:fd:5a:d8:92:9d:b4:
                    20:9c:9f:2f:ba:23:d0:d1:32:9b:6c:89:e2:0f:82:
                    16:59:4f:f0:53:f3:2a:d1:5b:71:e6:b8:a6:21:e9:
                    88:fc:d9:f2:c3:7b:11:b0:c5:30:a9:3e:43:1f:88:
                    81:ed:69:94:65:28:e2:ee:4c:26:44:9b:a7:7e:c8:
                    6e:39:00:80:a5:b9:a9:a6:85:e5:35:00:16:34:56:
                    0e:76:28:6a:18:c7:52:d8:5b:0d:b7:f1:bd:69:81:
                    12:01:2b:22:5c:1f:07:83:0a:83:92:eb:51:e5:66:
                    11:94:de:4e:91:c6:35:57:f6:93:b3:68:ae:4f:a9:
                    2d:f2:94:e3:df:60:c3:06:75:3e:c4:9f:ed:ba:c6:
                    eb:8d:c9:16:45:e8:d1:18:cf:59:90:a9:1d:9c:6b:
                    ba:f7:62:96:5a:f5:70:f3:07:a8:c1:e0:bd:89:c6:
                    6b:d7:ee:4e:5f:a0:fa:35:16:98:df:f2:22:a0:64:
                    4e:96:30:c1:aa:3f:b1:f2:d6:1b:8d:c9:aa:c0:b9:
                    99:34:14:81:58:f6:de:85:5f:7b:c1:fb:19:64:39:
                    e9:fd:94:1d:14:46:47:fd:20:14:68:fd:33:a6:55:
                    39:8e:b2:9a:65:84:65:71:90:84:1d:3b:b9:64:8d:
                    d7:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:4E:15:6E:7D:A3:4F:74:86:9F:D3:7D:C7:0A:8C:16:AF:B7:B0:F1
            X509v3 Authority Key Identifier:
                keyid:30:14:B8:C7:F5:09:E1:00:51:B0:CD:29:FD:8D:69:F2:85:50:8D:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:ed:b4:69:0b:1c:8c:a7:33:53:6a:6d:2c:70:21:9d:02:18:
         84:c6:91:10:1e:a8:95:32:37:54:23:16:db:a3:59:4b:a3:e7:
         f7:69:fd:eb:97:ba:68:eb:5b:fc:06:ad:6c:be:04:63:eb:54:
         4a:57:70:5b:70:0e:13:fc:ef:72:68:ee:03:2f:79:5b:dd:a5:
         7f:cb:46:41:f2:c7:79:ea:31:73:76:6d:34:e4:8d:3f:ac:9e:
         11:23:c9:f6:9c:66:3d:55:cd:1b:2d:41:c9:31:e8:43:73:3e:
         10:fc:47:83:26:52:68:54:1c:7f:25:d9:14:b0:e7:f7:27:c8:
         0e:78:90:37:04:fb:a3:a3:17:4d:43:f5:f3:01:da:17:8f:8d:
         1e:4c:ab:15:28:66:77:f3:11:da:68:5e:29:70:fe:99:f4:e7:
         8a:7a:8f:d8:cf:ee:9c:ef:be:ee:51:ce:b1:0c:44:a7:ad:34:
         9e:55:59:d1:f0:df:5f:18:87:a4:44:b0:62:c9:ad:fb:49:d2:
         cb:a7:55:11:c8:8b:f8:6f:ba:16:94:c0:db:c7:6b:7a:97:46:
         27:f2:78:d9:ab:c3:16:c1:85:4d:30:eb:2f:a1:93:8b:c2:42:
         51:04:6d:4a:e1:3c:1c:fe:13:db:1b:1c:8f:79:04:85:fe:ad:
         3d:7d:0f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:24:08 2026 by rpki-client