Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.mft
File:                     MHFOgRmzE03MBg_lkAp82Gj8WXM.mft (raw, json)
Hash identifier:          wvvhjfX1ZHXBCcZhiWc0+v6dIA2oRA0mbaZhxh2vork=
Subject key identifier:   9F:67:51:E1:7C:44:7E:2B:93:91:A8:07:57:4A:4E:63:FF:92:55:76
Authority key identifier: 30:71:4E:81:19:B3:13:4D:CC:06:0F:E5:90:0A:7C:D8:68:FC:59:73
Certificate issuer:       /CN=30714e8119b3134dcc060fe5900a7cd868fc5973
Certificate serial:       019EC06DA37E1A641D8111F646BACE623384
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MHFOgRmzE03MBg_lkAp82Gj8WXM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.mft
Manifest number:          0501
Signing time:             Sat 13 Jun 2026 10:01:11 +0000
Manifest this update:     Sat 13 Jun 2026 10:01:11 +0000
Manifest next update:     Sun 14 Jun 2026 10:01:11 +0000
Files and hashes:         1: 1vFJ7mkLHt8e-FnbPQ2sGqPMkOA.roa (hash: nP67zUvgCEBny+IrA1V7eCj0Omps26STL5vjKxKHFGM=)
                          2: MHFOgRmzE03MBg_lkAp82Gj8WXM.crl (hash: o6QLbmlhEbB28BzANtXHJPvVhDnJ+UoifXRN34YcoCY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MHFOgRmzE03MBg_lkAp82Gj8WXM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:6d:a3:7e:1a:64:1d:81:11:f6:46:ba:ce:62:33:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30714e8119b3134dcc060fe5900a7cd868fc5973
        Validity
            Not Before: Jun 13 10:01:11 2026 GMT
            Not After : Jun 14 10:01:11 2026 GMT
        Subject: CN=9f6751e17c447e2b9391a807574a4e63ff925576
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:85:e0:f0:46:f5:68:9b:c1:65:1a:a8:f9:4f:
                    37:85:05:89:b7:a3:e1:0f:78:ac:9b:0b:62:ee:00:
                    b2:40:bb:e1:ee:86:50:ac:a4:e6:cd:7b:a6:11:5c:
                    8c:1c:c7:a4:e1:ac:31:d4:18:1f:17:57:32:8a:bb:
                    3f:60:0f:f7:fc:5b:71:cb:4f:a8:a0:5a:4b:2c:99:
                    f0:bc:1c:60:44:0f:49:fc:6f:46:a2:3a:c1:e2:f2:
                    af:68:3d:97:8c:f6:e8:6a:1a:f8:01:ac:1b:8c:e7:
                    d2:2f:05:1e:a7:eb:66:45:d2:0c:c9:ed:50:3a:34:
                    14:98:31:cf:c6:e5:46:97:15:df:ae:8d:9b:5f:e2:
                    0a:ee:c5:7f:ad:61:df:16:9d:e0:f0:6a:aa:a0:11:
                    37:b4:82:f3:c1:33:64:be:79:de:b3:58:b8:c0:bb:
                    c3:80:4f:6c:24:2e:3d:c9:ea:b0:a6:fe:bd:69:39:
                    8e:24:31:ba:f8:51:81:ad:9c:6b:c1:82:e8:d4:27:
                    e3:54:09:c4:d7:b9:c1:5b:97:9e:a5:65:ef:16:e2:
                    25:8b:1b:19:7e:a7:e9:6e:fa:97:6b:21:85:f6:b4:
                    2b:71:3b:a9:d8:06:61:28:5e:e3:c4:b7:e4:69:c8:
                    02:4b:cb:cf:fd:97:bf:64:fe:95:73:79:a5:15:1e:
                    53:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:67:51:E1:7C:44:7E:2B:93:91:A8:07:57:4A:4E:63:FF:92:55:76
            X509v3 Authority Key Identifier:
                keyid:30:71:4E:81:19:B3:13:4D:CC:06:0F:E5:90:0A:7C:D8:68:FC:59:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHFOgRmzE03MBg_lkAp82Gj8WXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:47:5c:e3:df:b7:1b:f0:94:1e:ea:88:0f:60:37:66:3e:02:
         a3:06:5f:cb:ad:62:40:df:df:ae:18:c3:52:8f:fe:7e:f2:4a:
         26:0a:ab:ab:29:71:1a:f2:81:62:8b:82:09:97:42:49:1b:3c:
         05:71:e7:06:f2:83:8c:72:fd:f9:e3:3b:01:7b:89:97:60:14:
         41:32:33:4b:e1:10:51:52:6a:85:25:da:5c:1a:d6:fb:72:6c:
         f2:a9:9d:d8:2f:6c:74:10:f4:7e:69:26:bc:a9:f2:13:95:8e:
         3c:34:6b:a4:e1:3a:c4:6c:6b:b9:65:da:1b:3a:d2:78:e6:f2:
         f8:cd:18:f2:c1:91:15:2b:10:91:74:9c:c5:0f:47:42:ab:2e:
         c3:d5:94:7d:ca:30:fe:8b:6e:29:81:c9:20:a0:73:7f:e0:de:
         70:3f:ed:fb:47:2f:37:11:0e:69:02:d3:2a:29:93:a0:5a:0b:
         9a:95:46:e1:ae:8d:e2:83:4d:9e:29:50:c1:c8:2b:1f:29:8e:
         91:34:ca:b5:9e:e7:07:c1:64:3a:f8:cc:d3:0b:55:ac:58:51:
         7c:63:ab:1a:92:a8:6f:06:e2:60:97:43:e5:7b:c2:58:51:df:
         eb:e4:d7:62:f3:3b:42:b2:78:65:4e:32:66:c6:34:47:e3:1d:
         c6:e6:23:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:36:53 2026 by rpki-client