Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.mft
File:                     MBc-_VmPqpjUtSWOUfs6txbXrHE.mft (raw, json)
Hash identifier:          Q4xQNDlFu8lU2mXnu+GcHcnHkYzbncENv4l4VxZXcIA=
Subject key identifier:   D4:EE:16:82:98:2E:67:35:A6:46:19:1A:77:6C:DA:D3:75:7E:AC:69
Authority key identifier: 30:17:3E:FD:59:8F:AA:98:D4:B5:25:8E:51:FB:3A:B7:16:D7:AC:71
Certificate issuer:       /CN=30173efd598faa98d4b5258e51fb3ab716d7ac71
Certificate serial:       019D97AB0B6C19BD54F7E2E7DD72BCE33038
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MBc-_VmPqpjUtSWOUfs6txbXrHE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.mft
Manifest number:          176B
Signing time:             Thu 16 Apr 2026 19:01:02 +0000
Manifest this update:     Thu 16 Apr 2026 19:01:02 +0000
Manifest next update:     Fri 17 Apr 2026 19:01:02 +0000
Files and hashes:         1: MBc-_VmPqpjUtSWOUfs6txbXrHE.crl (hash: Qzgk6R18tdsimM0EMwUMIzfN9bmtl1fwhG9sfmMAAtQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MBc-_VmPqpjUtSWOUfs6txbXrHE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 19:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:97:ab:0b:6c:19:bd:54:f7:e2:e7:dd:72:bc:e3:30:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30173efd598faa98d4b5258e51fb3ab716d7ac71
        Validity
            Not Before: Apr 16 19:01:02 2026 GMT
            Not After : Apr 17 19:01:02 2026 GMT
        Subject: CN=d4ee1682982e6735a646191a776cdad3757eac69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:60:ff:34:ef:65:c4:99:c1:e7:7c:72:89:8e:
                    3d:c2:8a:88:c5:47:31:42:b2:36:48:02:be:fb:64:
                    1b:e4:9e:06:49:ed:3e:b5:24:51:b5:a6:47:de:34:
                    16:1a:92:39:b1:bb:f7:a5:3e:c7:c4:c7:a2:fa:77:
                    61:68:d1:28:cb:5f:47:d9:b4:22:4f:81:61:1f:b0:
                    8b:39:f2:61:1d:d8:df:b0:09:53:e0:e6:cd:01:87:
                    6d:6f:52:a3:43:ec:77:e9:50:37:aa:50:ff:59:ab:
                    1c:45:ff:29:4f:5c:62:44:ca:a2:4e:95:35:e7:24:
                    15:3f:f7:be:d2:79:2a:24:47:c0:c4:be:a2:10:13:
                    3f:fd:98:89:05:ba:2d:cb:5d:3a:cc:29:ce:3b:70:
                    b1:dc:1e:7b:ed:9f:10:3f:68:09:a9:4f:b0:ae:b7:
                    72:81:21:8a:23:b4:05:d9:e4:70:07:74:b9:58:86:
                    d6:c7:0a:b8:5e:2c:36:29:6c:3a:50:3b:53:4e:c8:
                    ef:fb:37:c7:a9:ea:6d:76:07:f0:0e:99:e5:51:72:
                    92:e1:fb:54:1d:10:a3:0c:f8:8a:fb:06:3b:24:be:
                    04:9b:1d:bd:56:d0:e5:47:8d:79:d4:d1:7c:04:0e:
                    80:e0:57:4e:34:11:76:a5:b1:d1:66:ed:20:c6:f5:
                    69:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:EE:16:82:98:2E:67:35:A6:46:19:1A:77:6C:DA:D3:75:7E:AC:69
            X509v3 Authority Key Identifier:
                keyid:30:17:3E:FD:59:8F:AA:98:D4:B5:25:8E:51:FB:3A:B7:16:D7:AC:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBc-_VmPqpjUtSWOUfs6txbXrHE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:8f:07:e3:c8:bf:3b:59:fb:cd:f2:ac:45:a4:12:1e:29:9d:
         2e:fc:9a:e5:a4:93:51:65:62:44:c7:d3:ec:95:eb:4a:98:d5:
         fe:d3:c9:50:08:ed:49:16:7f:63:28:3a:30:04:04:15:fa:8e:
         86:92:7b:94:de:21:b8:f2:42:90:9b:78:32:2f:3e:e2:7f:6a:
         a8:df:4b:97:02:0e:0c:13:df:a5:26:40:ab:f8:d5:0c:c1:91:
         b7:8e:fc:85:11:cf:ae:d0:ff:57:ff:ae:6a:8c:40:2d:6c:68:
         9b:5f:6f:1a:48:c1:a2:32:83:53:e7:21:7d:3e:29:e6:02:b0:
         36:30:8e:40:0d:e5:c0:71:3e:0d:b5:c3:34:f1:ac:df:6a:bd:
         be:a9:ef:9f:b3:65:fb:6e:2d:f1:83:e7:0c:03:a6:74:cf:5f:
         29:30:7a:8b:93:a3:ad:be:23:0d:1b:81:e3:fc:b4:2d:fa:59:
         d4:06:c1:4e:ca:a6:4d:50:78:60:5d:01:13:37:d1:9a:b6:b7:
         9d:15:63:b2:9f:69:41:b1:3a:25:05:ec:20:66:a6:8b:ac:9f:
         1b:3a:0d:8f:52:41:0f:89:25:36:7f:ca:59:5e:8a:45:0a:8d:
         a5:b5:05:bf:61:4a:bc:4f:14:cc:23:cd:d6:8d:f8:bb:62:71:
         f5:9d:f5:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:24:35 2026 by rpki-client