Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/07560a-062b-4802-89af-19192e81b831/1/MfePPgBBCSbb2JyOj1xACxArA3k.mft
File:                     MfePPgBBCSbb2JyOj1xACxArA3k.mft (raw, json)
Hash identifier:          ELCbsRr3e2O7A6UAjWYGvqZMkBYyngn9G2hvCdtDaEE=
Subject key identifier:   36:6D:58:81:B2:81:BE:91:A3:F5:D9:72:F9:60:B2:41:6E:36:89:1A
Authority key identifier: 31:F7:8F:3E:00:41:09:26:DB:D8:9C:8E:8F:5C:40:0B:10:2B:03:79
Certificate issuer:       /CN=31f78f3e00410926dbd89c8e8f5c400b102b0379
Certificate serial:       019D97E1B17BBADB23738BEA5D0406D0032C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MfePPgBBCSbb2JyOj1xACxArA3k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/07560a-062b-4802-89af-19192e81b831/1/MfePPgBBCSbb2JyOj1xACxArA3k.mft
Manifest number:          0AEB
Signing time:             Thu 16 Apr 2026 20:00:43 +0000
Manifest this update:     Thu 16 Apr 2026 20:00:43 +0000
Manifest next update:     Fri 17 Apr 2026 20:00:43 +0000
Files and hashes:         1: Fr6b4AVwH2MD_S5KRr6HbDmC_uM.roa (hash: mdYZJP/5rf2B6ZKd33FY0BFdNm1Mr6jeRDpydtaZ020=)
                          2: MfePPgBBCSbb2JyOj1xACxArA3k.crl (hash: wzeRdNfqlY/6l+I4tEhDEZn5b1sj1OTMVSg7HEw/cXc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/07560a-062b-4802-89af-19192e81b831/1/MfePPgBBCSbb2JyOj1xACxArA3k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/07560a-062b-4802-89af-19192e81b831/1/MfePPgBBCSbb2JyOj1xACxArA3k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MfePPgBBCSbb2JyOj1xACxArA3k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 20:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:97:e1:b1:7b:ba:db:23:73:8b:ea:5d:04:06:d0:03:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31f78f3e00410926dbd89c8e8f5c400b102b0379
        Validity
            Not Before: Apr 16 20:00:43 2026 GMT
            Not After : Apr 17 20:00:43 2026 GMT
        Subject: CN=366d5881b281be91a3f5d972f960b2416e36891a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:66:dd:81:24:33:fb:be:29:61:78:03:cc:9c:
                    14:7d:57:85:2e:d4:2c:34:f9:be:64:13:7f:c2:97:
                    91:8b:4c:94:c0:c0:ff:da:0a:c3:57:13:51:ce:35:
                    d4:29:e5:d3:72:ae:85:23:6b:c5:e9:f8:34:9e:3a:
                    ca:a7:1c:7f:8c:05:c9:fe:e2:9d:67:1d:6a:63:42:
                    c1:40:dc:cb:f0:e8:8a:89:7f:86:39:4b:1b:19:12:
                    f7:c4:c6:57:4a:11:c0:cf:af:19:a2:50:08:08:da:
                    f9:a6:e3:a9:0e:44:dc:72:ed:d7:2c:1d:8e:26:0a:
                    3d:0f:4e:1d:05:f4:78:1d:c4:78:b0:b9:2b:27:fe:
                    1d:ea:65:00:19:82:e5:7c:d9:0d:d6:69:55:d6:90:
                    6f:78:89:6b:ee:38:c4:83:fa:9b:ae:8c:dd:57:7f:
                    ad:aa:57:8c:63:7f:ff:ed:96:28:2e:7e:d4:80:34:
                    6c:50:ed:9a:d8:26:76:d1:1b:70:35:eb:8b:8e:cd:
                    0b:1b:9d:54:c6:b9:5d:76:3b:ab:65:49:d7:92:71:
                    c2:01:76:c2:1d:b4:6e:c1:a7:bb:43:53:55:72:79:
                    01:2a:89:4c:70:50:9f:b9:7e:fd:08:88:c9:50:91:
                    e6:93:3b:cc:f1:b5:b9:9f:8b:91:19:5c:60:6e:36:
                    37:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:6D:58:81:B2:81:BE:91:A3:F5:D9:72:F9:60:B2:41:6E:36:89:1A
            X509v3 Authority Key Identifier:
                keyid:31:F7:8F:3E:00:41:09:26:DB:D8:9C:8E:8F:5C:40:0B:10:2B:03:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MfePPgBBCSbb2JyOj1xACxArA3k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/07560a-062b-4802-89af-19192e81b831/1/MfePPgBBCSbb2JyOj1xACxArA3k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/07560a-062b-4802-89af-19192e81b831/1/MfePPgBBCSbb2JyOj1xACxArA3k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:e4:b7:b8:d0:c7:af:a4:e7:51:07:dd:7e:c7:8d:de:80:e7:
         24:47:ea:48:67:05:a1:74:d7:35:08:20:98:bf:40:65:4f:bd:
         50:6c:c7:5d:ae:ee:4a:8c:8e:16:54:fd:c7:e9:d9:94:c9:2b:
         c6:6c:27:04:9d:19:51:cf:f5:0d:ca:c2:4a:35:84:b4:f3:79:
         55:1c:20:27:b5:5d:2b:97:36:4a:5d:ff:45:74:23:8a:a2:47:
         53:54:b5:87:e0:8c:f7:a5:45:16:55:53:2e:1f:e1:4b:ba:06:
         80:f2:a1:65:54:70:15:25:7f:10:85:bc:c8:d2:a7:ba:89:2a:
         90:b3:d3:2c:ab:b5:60:75:3a:1d:ab:ee:1c:cf:44:0a:ae:27:
         64:a0:f0:a4:a8:70:d7:39:2d:d7:16:ee:d4:5c:cf:ef:9a:48:
         8d:a9:31:0f:0b:51:51:43:09:60:18:71:1a:35:4d:1c:64:b7:
         1e:eb:e8:a7:2f:d8:85:5e:94:0b:55:ad:d8:b4:2b:fa:81:97:
         2e:65:00:5b:9a:3c:69:2a:6f:2a:06:d5:76:7a:06:c7:49:42:
         65:c2:bf:ae:81:69:56:b5:c5:a1:24:97:69:41:db:6e:37:56:
         91:bd:a9:b5:e1:bc:d5:9d:d6:5d:86:2e:ce:ca:18:3f:c9:d8:
         7e:b0:25:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:26:22 2026 by rpki-client