Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft
File:                     MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft (raw, json)
Hash identifier:          8CnYv9nbGklFXtU4ZBh6vqrhfBLJxx+M77qzaIcmrcs=
Subject key identifier:   E1:66:9C:58:44:41:40:37:E3:35:03:D0:8E:E0:60:03:09:4F:7E:BD
Authority key identifier: 30:14:B8:C7:F5:09:E1:00:51:B0:CD:29:FD:8D:69:F2:85:50:8D:87
Certificate issuer:       /CN=3014b8c7f509e10051b0cd29fd8d69f285508d87
Certificate serial:       019D9BF57D6BAE94AD1736057B7F8DD87F0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft
Manifest number:          15C6
Signing time:             Fri 17 Apr 2026 15:00:49 +0000
Manifest this update:     Fri 17 Apr 2026 15:00:49 +0000
Manifest next update:     Sat 18 Apr 2026 15:00:49 +0000
Files and hashes:         1: MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.crl (hash: e06KxLpSmUzWOqh5+eeS9yyVXvYUFIrFbeR58c2OGT8=)
                          2: sGm0vU9oSC-btG4YiEKa4VaTO0s.roa (hash: Z7crjxHBjgD6BdGuonNkIQvXjn5E/Ot91T2B7Xj3rsM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 14:47:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:f5:7d:6b:ae:94:ad:17:36:05:7b:7f:8d:d8:7f:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3014b8c7f509e10051b0cd29fd8d69f285508d87
        Validity
            Not Before: Apr 17 15:00:49 2026 GMT
            Not After : Apr 18 15:00:49 2026 GMT
        Subject: CN=e1669c5844414037e33503d08ee06003094f7ebd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:3f:4d:b4:d0:be:1a:c6:41:67:36:ba:8d:f6:
                    5c:f5:ce:34:8c:f2:52:fd:27:b9:3d:42:45:86:f5:
                    8e:ad:1d:b4:42:cd:b9:ae:86:1b:f2:37:55:d6:d9:
                    ce:38:48:4a:5b:6f:fe:cb:86:39:28:06:84:16:9f:
                    e0:5d:35:63:c7:df:23:60:b9:48:af:74:a4:41:75:
                    f6:59:a6:a7:2b:7c:81:ef:09:53:4b:57:ec:d0:f6:
                    e9:bf:45:93:28:5b:f6:fa:d9:51:27:a4:ea:9c:a8:
                    40:69:84:c3:f4:a1:ef:b0:7d:f6:30:63:61:c6:19:
                    47:b6:c4:da:c8:71:2b:ce:de:ff:3e:cb:f5:0c:20:
                    0e:03:30:35:ea:ea:9e:51:22:7a:50:a4:1a:65:bf:
                    e9:f1:29:82:fc:dd:3e:37:62:f1:d8:9d:32:ff:ff:
                    76:fb:74:a2:60:3a:61:97:09:6f:b9:a5:dd:98:7e:
                    72:37:31:e9:03:64:59:a5:1f:17:a9:8c:c7:04:9c:
                    88:83:5d:f6:8f:85:3f:7c:76:c2:6a:d8:cd:44:46:
                    64:82:a0:be:e3:cd:db:17:68:bc:85:ab:61:f2:59:
                    fd:24:96:94:d0:2a:bc:39:8e:c4:af:70:4a:38:32:
                    7d:6a:2d:44:c0:aa:66:fb:79:0f:70:a5:9e:96:b4:
                    73:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:66:9C:58:44:41:40:37:E3:35:03:D0:8E:E0:60:03:09:4F:7E:BD
            X509v3 Authority Key Identifier:
                keyid:30:14:B8:C7:F5:09:E1:00:51:B0:CD:29:FD:8D:69:F2:85:50:8D:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:ce:76:a3:cb:8a:73:4d:e4:ec:5c:09:9b:d8:cb:00:cb:cb:
         f9:43:fd:e9:1d:33:ba:0b:59:f8:53:a0:dd:0d:d9:fe:2f:2e:
         87:26:e7:53:54:80:48:00:fe:3a:2b:e6:f6:e3:80:c3:65:12:
         81:b1:9b:fc:1a:b6:04:e4:29:e3:93:27:2e:09:10:85:1f:fa:
         cf:9c:ad:6b:77:8a:58:c7:77:33:8b:b2:e5:68:d3:0f:4a:3a:
         d7:94:3b:b2:8e:0f:a6:70:14:43:18:20:68:ec:32:29:e2:96:
         ee:1c:79:31:fe:7a:81:62:e0:6e:25:e0:f6:2d:ea:74:69:c2:
         4f:35:95:7e:ce:98:4f:c5:b7:2b:17:2d:a2:97:90:8a:be:cd:
         05:03:3a:fb:51:be:fb:b6:32:6b:74:eb:8d:55:37:37:15:92:
         44:df:ad:4a:7e:78:65:49:b6:d2:7d:b3:04:55:ae:8a:9b:2b:
         07:3d:69:96:2a:ff:7a:fe:41:bf:62:d4:7b:17:56:6b:4f:5a:
         22:f5:14:27:c4:e6:10:a1:36:0f:da:a3:8a:8e:07:89:5e:fb:
         88:98:a9:cf:32:3d:68:0a:7f:23:c7:fe:13:86:d7:43:16:30:
         aa:b8:45:f4:ca:11:c7:76:fc:17:2f:d7:b6:e7:84:b4:dc:72:
         2b:6f:fb:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:12:00 2026 by rpki-client