Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.mft
File:                     MduEfR2x4LLCwlUCIQ_1pxmWehk.mft (raw, json)
Hash identifier:          SH/EX8zYSkaeqmtlbdtfbQuR1sQ13hf2uSMo4Jb/vP0=
Subject key identifier:   91:00:AB:4A:49:FB:2B:2F:BF:4A:CC:DE:89:42:6A:F6:BE:2A:9B:CE
Authority key identifier: 31:DB:84:7D:1D:B1:E0:B2:C2:C2:55:02:21:0F:F5:A7:19:96:7A:19
Certificate issuer:       /CN=31db847d1db1e0b2c2c25502210ff5a719967a19
Certificate serial:       019D98F45C6C144083FC3447D5C09C83E507
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MduEfR2x4LLCwlUCIQ_1pxmWehk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.mft
Manifest number:          114B
Signing time:             Fri 17 Apr 2026 01:00:44 +0000
Manifest this update:     Fri 17 Apr 2026 01:00:44 +0000
Manifest next update:     Sat 18 Apr 2026 01:00:44 +0000
Files and hashes:         1: 0PROOXHWtrqTshebWInvLwz5dVE.roa (hash: kuqhwuodobpmINYueeYw21Gf/m1l+ZCaG7GCFJgXBC4=)
                          2: MduEfR2x4LLCwlUCIQ_1pxmWehk.crl (hash: bYCDJ8PNVzUkf6Gqc9AXTT055GKjmFol8hR9dzvqjCk=)
                          3: Pky97jBwdyUgYzg1_AI-qFYMT1o.roa (hash: nbaHUKHv0TZLnVM+2128xVj9F0Kn5xH6nruz/6y8MI8=)
                          4: nge1u5LMthh69_mO6tYKWBjnSBE.roa (hash: qNcn7K4jDXvzhu4do4cfBL/ruII09KDI1rZLPsg+Hug=)
                          5: yCDwwVBWdVeCJB3paV68yEm0bEQ.roa (hash: jb11BCbq+94ZB4w8Ms7QY8fhTLtofYi5pYcgB+s+Sf0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MduEfR2x4LLCwlUCIQ_1pxmWehk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 01:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f4:5c:6c:14:40:83:fc:34:47:d5:c0:9c:83:e5:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31db847d1db1e0b2c2c25502210ff5a719967a19
        Validity
            Not Before: Apr 17 01:00:44 2026 GMT
            Not After : Apr 18 01:00:44 2026 GMT
        Subject: CN=9100ab4a49fb2b2fbf4accde89426af6be2a9bce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:1c:17:9b:0c:13:3f:62:a0:c9:8d:6e:49:8d:
                    8b:27:ad:12:6b:6e:5f:ad:cb:4f:37:24:b9:29:4f:
                    16:7b:b2:ba:2e:73:05:f4:39:71:7b:a9:e6:6f:85:
                    75:f5:5a:78:b6:05:08:3c:48:f9:2a:09:05:34:cb:
                    ba:e7:9b:0f:89:f2:0c:c7:5b:be:20:41:a8:82:a5:
                    da:a5:e1:46:d0:ba:95:9e:8c:e4:67:73:40:96:33:
                    62:3c:16:2d:65:d5:8f:f5:a6:42:36:2e:81:76:86:
                    da:aa:e8:a6:15:cc:6d:7a:44:5a:47:92:a9:40:69:
                    c4:72:24:a5:20:6c:ec:a1:de:a0:12:f6:df:f8:c4:
                    f1:8f:ed:0e:69:40:1f:2c:7d:b6:46:ef:95:44:de:
                    ea:17:99:31:11:cd:0b:2a:0a:7f:49:49:1c:25:c2:
                    2b:b3:fb:9a:f9:bd:5a:12:00:1c:04:9f:4b:1c:47:
                    ad:d3:ef:16:a6:28:9f:ea:ef:fb:bb:a2:d4:73:68:
                    52:24:f6:ba:bb:e5:5f:cf:3b:66:4b:cc:42:06:eb:
                    d0:f8:e1:b5:2b:89:50:2c:45:65:3a:ac:ac:ce:22:
                    0d:4c:86:74:82:11:d0:85:7c:ca:f1:a3:26:90:83:
                    3a:35:83:e6:fa:97:39:a7:e8:8e:f3:d4:c7:7a:0c:
                    6c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:00:AB:4A:49:FB:2B:2F:BF:4A:CC:DE:89:42:6A:F6:BE:2A:9B:CE
            X509v3 Authority Key Identifier:
                keyid:31:DB:84:7D:1D:B1:E0:B2:C2:C2:55:02:21:0F:F5:A7:19:96:7A:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MduEfR2x4LLCwlUCIQ_1pxmWehk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:24:b8:90:0f:cc:9b:6b:92:98:34:53:ca:71:be:1f:37:5c:
         93:3e:65:b7:ba:db:b4:b1:66:43:a7:1f:ae:3e:67:bc:39:d0:
         10:92:ec:c2:ea:22:59:1f:04:ad:f8:67:cf:4a:af:0b:b6:6b:
         e2:8b:ac:93:4c:38:8c:2c:10:bb:ca:50:12:61:fd:a4:48:63:
         d6:16:06:e2:5a:23:60:65:af:26:79:e8:87:c6:19:00:61:40:
         04:86:68:52:68:b5:eb:47:e1:65:27:19:67:96:35:36:82:eb:
         59:e9:c4:fc:11:67:20:17:00:3f:9a:b3:1c:5f:2f:c4:d8:cf:
         1c:43:63:75:a7:c6:18:0e:51:36:2e:58:52:e4:36:ed:df:98:
         54:a6:af:ef:72:86:1c:0c:a1:0c:dd:43:81:60:c4:bf:a9:31:
         8a:f4:0a:2b:6d:05:70:f4:29:f6:dd:c5:02:c2:26:b8:04:dd:
         f0:de:35:69:ef:60:dd:f9:01:9f:84:0e:d7:51:ae:4a:1f:f3:
         43:7b:ac:45:5b:69:4f:9f:cb:5a:1e:12:67:9c:9c:76:91:9d:
         ec:83:7c:36:bd:4d:c6:7b:a7:d1:fe:1b:33:e9:33:d2:ba:e5:
         39:9b:d9:97:56:f5:a6:5d:03:c4:93:2e:51:a0:ac:52:d3:bc:
         68:06:e4:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:26:38 2026 by rpki-client