Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/MvbeMKm492SENE0M07bAJz6t028.mft
File:                     MvbeMKm492SENE0M07bAJz6t028.mft (raw, json)
Hash identifier:          F57Q9GsV69cx9fgqHGVlcBqcYYujZ1DqP/C4Pa0qkr4=
Subject key identifier:   46:62:36:8B:79:4E:97:6E:57:77:EB:4A:D9:53:3F:5A:85:DA:4E:AC
Authority key identifier: 32:F6:DE:30:A9:B8:F7:64:84:34:4D:0C:D3:B6:C0:27:3E:AD:D3:6F
Certificate issuer:       /CN=32f6de30a9b8f76484344d0cd3b6c0273eadd36f
Certificate serial:       019D9AABB32146D4A120DE4C3CBF3ED2D093
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MvbeMKm492SENE0M07bAJz6t028.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/MvbeMKm492SENE0M07bAJz6t028.mft
Manifest number:          056E
Signing time:             Fri 17 Apr 2026 09:00:36 +0000
Manifest this update:     Fri 17 Apr 2026 09:00:36 +0000
Manifest next update:     Sat 18 Apr 2026 09:00:36 +0000
Files and hashes:         1: MvbeMKm492SENE0M07bAJz6t028.crl (hash: AaNx/4b46iypWG5wRRfExAp7YdsCLjCyTUjnOYkr/vE=)
                          2: fTxk1v0fF8AuZDNoAxUqc_RyNH4.roa (hash: Lw+QNTmoYW+7xrFoYnex4ne1svS2EO7auyLRmtTAxxI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/MvbeMKm492SENE0M07bAJz6t028.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/MvbeMKm492SENE0M07bAJz6t028.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MvbeMKm492SENE0M07bAJz6t028.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:ab:b3:21:46:d4:a1:20:de:4c:3c:bf:3e:d2:d0:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32f6de30a9b8f76484344d0cd3b6c0273eadd36f
        Validity
            Not Before: Apr 17 09:00:36 2026 GMT
            Not After : Apr 18 09:00:36 2026 GMT
        Subject: CN=4662368b794e976e5777eb4ad9533f5a85da4eac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:06:9a:e5:78:91:c7:fe:1e:45:ec:19:27:57:
                    03:c7:96:a7:40:ce:f7:d8:01:50:ff:4f:04:3a:26:
                    9c:38:d6:bc:59:f0:a5:53:b0:0b:74:f5:cf:f9:3e:
                    f8:08:70:68:58:fa:e8:7b:dd:a1:62:9e:e7:07:19:
                    a7:58:45:32:f8:fa:d5:29:2b:26:82:02:8f:a7:37:
                    b3:5e:c9:85:3c:8a:d0:8e:d0:34:97:3d:e4:6e:21:
                    43:72:a0:33:ad:10:f5:72:b4:ec:12:0f:f1:e4:7c:
                    1d:f6:f6:87:8d:3d:68:73:88:b3:cb:19:fa:93:b0:
                    b4:a6:64:22:7a:55:eb:0f:f8:a2:be:e0:96:58:21:
                    2e:d5:ab:bb:1b:64:52:73:4e:6d:c2:5d:9a:81:85:
                    b3:4b:8e:a0:37:d7:95:3b:f7:bc:18:5a:a8:34:05:
                    5e:8d:0d:dc:51:f5:8a:62:58:a3:66:45:d1:8a:b0:
                    99:c9:38:57:ed:e8:c5:44:a3:91:3b:7c:70:e2:e6:
                    0b:1b:cd:2e:14:d5:8b:45:93:21:1a:d8:72:68:59:
                    8a:ba:40:3c:3b:11:ea:c0:22:8b:12:57:e4:5f:88:
                    51:33:f5:5f:0d:40:a4:6c:5f:40:2c:3d:e6:ea:9e:
                    48:ec:d4:5d:3c:91:f1:0e:53:b0:7e:57:c4:97:c0:
                    fc:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:62:36:8B:79:4E:97:6E:57:77:EB:4A:D9:53:3F:5A:85:DA:4E:AC
            X509v3 Authority Key Identifier:
                keyid:32:F6:DE:30:A9:B8:F7:64:84:34:4D:0C:D3:B6:C0:27:3E:AD:D3:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MvbeMKm492SENE0M07bAJz6t028.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/MvbeMKm492SENE0M07bAJz6t028.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/MvbeMKm492SENE0M07bAJz6t028.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:54:56:e9:e0:10:59:d0:11:57:c0:6d:0d:cb:22:77:03:cf:
         dc:55:af:ae:1c:df:38:f7:d2:7f:28:2e:ef:5c:24:b3:17:1e:
         ea:bb:cd:96:94:ac:0e:d6:e6:a4:55:c6:c0:66:e2:b3:2c:83:
         a3:9f:0d:f6:30:bd:ee:45:24:89:a5:21:28:b7:22:c2:a5:50:
         4b:45:93:7e:44:72:fd:24:e0:e8:62:db:77:89:58:66:5b:9a:
         78:01:7d:d1:c4:68:96:ca:37:cc:3d:b4:2f:62:41:fb:ae:78:
         73:0d:83:a6:39:a2:61:3b:15:be:55:3a:cc:eb:00:4b:ac:2b:
         44:ec:3d:17:9f:98:60:10:c6:ca:3f:71:48:2c:84:5a:7d:ef:
         25:1d:62:67:97:61:cb:de:1e:91:5a:be:5d:14:12:af:71:78:
         44:95:6f:ae:e4:94:e7:91:ac:68:88:c6:ea:3b:d9:d8:5f:8e:
         da:e3:1b:02:f1:de:55:a7:9f:4e:77:fa:54:91:a8:f0:e4:c5:
         73:86:20:05:bd:cb:8f:a7:8c:06:b1:c9:7e:56:d2:90:ca:a8:
         fa:8c:e9:d2:b0:9f:53:31:6a:14:52:bf:06:40:77:a8:d5:88:
         f7:94:b9:ed:c9:9f:d9:90:35:02:57:57:f4:a3:d3:6d:51:f2:
         3e:36:83:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:31:29 2026 by rpki-client