Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.mft
File:                     MduEfR2x4LLCwlUCIQ_1pxmWehk.mft (raw, json)
Hash identifier:          5EYqbZ3rc8bDeIY1JXNHYQkNKnuuPgFo6Ss3IQigc20=
Subject key identifier:   33:D0:FC:3B:1F:15:71:EB:52:72:22:BE:C0:F6:95:DA:12:5A:62:A8
Authority key identifier: 31:DB:84:7D:1D:B1:E0:B2:C2:C2:55:02:21:0F:F5:A7:19:96:7A:19
Certificate issuer:       /CN=31db847d1db1e0b2c2c25502210ff5a719967a19
Certificate serial:       019EBE7EEF0D7EE2AB9AC0F9AFBA45FD5670
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MduEfR2x4LLCwlUCIQ_1pxmWehk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.mft
Manifest number:          11E3
Signing time:             Sat 13 Jun 2026 01:00:50 +0000
Manifest this update:     Sat 13 Jun 2026 01:00:50 +0000
Manifest next update:     Sun 14 Jun 2026 01:00:50 +0000
Files and hashes:         1: 0PROOXHWtrqTshebWInvLwz5dVE.roa (hash: kuqhwuodobpmINYueeYw21Gf/m1l+ZCaG7GCFJgXBC4=)
                          2: MduEfR2x4LLCwlUCIQ_1pxmWehk.crl (hash: +1qDy55UWHXW3Jxi2HbGruDkJQ2KiUtoY8vqK8KXSy4=)
                          3: Pky97jBwdyUgYzg1_AI-qFYMT1o.roa (hash: nbaHUKHv0TZLnVM+2128xVj9F0Kn5xH6nruz/6y8MI8=)
                          4: nge1u5LMthh69_mO6tYKWBjnSBE.roa (hash: qNcn7K4jDXvzhu4do4cfBL/ruII09KDI1rZLPsg+Hug=)
                          5: yCDwwVBWdVeCJB3paV68yEm0bEQ.roa (hash: jb11BCbq+94ZB4w8Ms7QY8fhTLtofYi5pYcgB+s+Sf0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MduEfR2x4LLCwlUCIQ_1pxmWehk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:7e:ef:0d:7e:e2:ab:9a:c0:f9:af:ba:45:fd:56:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31db847d1db1e0b2c2c25502210ff5a719967a19
        Validity
            Not Before: Jun 13 01:00:50 2026 GMT
            Not After : Jun 14 01:00:50 2026 GMT
        Subject: CN=33d0fc3b1f1571eb527222bec0f695da125a62a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:65:48:86:a8:f9:f0:1c:f6:d5:10:7c:00:c3:
                    ba:2e:26:13:f9:a0:c1:e8:fe:a0:d7:80:13:f1:d5:
                    ec:96:80:69:8d:a1:3c:de:95:cd:3a:99:07:63:b1:
                    a8:2f:68:f1:0e:79:97:43:d0:12:69:8d:05:72:1e:
                    7d:65:d6:8b:1b:5e:04:8b:0a:0e:da:f6:7b:8f:29:
                    23:1a:99:fd:27:73:6f:cf:95:c3:7c:db:13:ea:27:
                    e3:63:d2:e8:a0:a6:d9:d1:5e:a4:98:ff:5c:59:91:
                    27:a8:b6:59:a8:60:7c:1a:33:cb:9e:2b:a7:cb:9c:
                    1f:a6:9e:1e:47:41:fe:4b:f4:71:e8:85:71:b8:26:
                    e5:39:7b:ea:57:a7:9d:c4:74:3f:39:24:94:de:0b:
                    8d:d0:78:bc:85:cf:a3:7a:64:8c:a1:fa:10:1f:08:
                    a0:b1:27:8e:e4:06:32:5e:65:1c:96:32:3e:f1:7f:
                    e3:7f:e7:08:83:9a:d7:a6:f0:65:4d:f2:f5:01:33:
                    1d:c7:8b:b6:7c:ae:6e:18:93:e8:54:3a:f8:fb:de:
                    14:95:eb:87:20:68:56:5a:52:62:2b:fa:19:5c:c1:
                    53:3a:57:dc:a4:5b:88:04:26:02:08:c5:b7:7d:5f:
                    6c:8f:74:ff:04:55:0d:73:ad:ba:b1:de:8c:91:98:
                    e7:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:D0:FC:3B:1F:15:71:EB:52:72:22:BE:C0:F6:95:DA:12:5A:62:A8
            X509v3 Authority Key Identifier:
                keyid:31:DB:84:7D:1D:B1:E0:B2:C2:C2:55:02:21:0F:F5:A7:19:96:7A:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MduEfR2x4LLCwlUCIQ_1pxmWehk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:a6:4d:2c:37:74:13:4a:47:02:2c:a8:fa:56:78:09:d2:cd:
         36:b2:22:c0:07:57:d5:23:0a:cb:73:eb:5d:3f:ef:46:d5:8b:
         97:7a:ce:71:ff:2d:92:b3:15:ef:04:b8:82:ac:f4:48:a4:8f:
         37:0c:b7:9c:53:2c:d0:d4:c1:80:1e:59:8f:50:3a:4d:4b:50:
         56:dc:2b:1b:d8:ea:87:18:d8:7e:66:15:b5:3d:19:ad:ae:b1:
         7d:47:91:e3:25:a5:47:26:4f:54:c3:3b:bc:c1:db:ab:9e:f7:
         3d:35:81:6c:3e:9b:a0:84:fd:d1:cb:3d:22:c5:38:6f:22:9f:
         59:ff:55:4f:aa:66:6c:f7:e5:21:ca:44:ea:66:67:23:0a:3e:
         5d:62:d9:86:23:82:dd:ca:5e:c8:91:14:f6:13:61:53:83:6a:
         78:07:7e:52:cf:14:11:b5:05:1d:d5:07:ce:97:d3:49:dc:24:
         7f:31:49:db:85:ca:68:87:20:75:02:9e:b1:d7:f2:b1:d9:b8:
         00:73:38:0b:09:70:56:7b:1c:b1:77:e4:03:e4:25:29:62:61:
         9c:6f:77:6d:ac:38:20:1f:60:66:a2:a9:37:d3:9f:39:f3:c9:
         df:85:fc:06:3a:cc:07:12:06:6a:56:50:73:25:b9:e7:4b:0f:
         9e:43:77:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:10:02 2026 by rpki-client