Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.mft
File:                     McsA0vhEAYEMMgC1L6OI6TZR3fM.mft (raw, json)
Hash identifier:          UxsoiN/IOt+h3dMIkuSmp1YEGPZGy/SYX9CHsgMUioY=
Subject key identifier:   99:E5:2D:DB:0B:D3:22:D9:23:08:90:13:09:7A:F1:4D:57:4C:5A:33
Authority key identifier: 31:CB:00:D2:F8:44:01:81:0C:32:00:B5:2F:A3:88:E9:36:51:DD:F3
Certificate issuer:       /CN=31cb00d2f84401810c3200b52fa388e93651ddf3
Certificate serial:       019F927F74F956F2B9CFA6247E4A843DEC95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/McsA0vhEAYEMMgC1L6OI6TZR3fM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.mft
Manifest number:          094D
Signing time:             Fri 24 Jul 2026 05:00:54 +0000
Manifest this update:     Fri 24 Jul 2026 05:00:54 +0000
Manifest next update:     Sat 25 Jul 2026 05:00:54 +0000
Files and hashes:         1: 1-p3HaYx4IqX4cWvi0vNEwtBCaHk.roa (hash: i3bN04ehC6KNjZ/mU1aU2Jp/6ScotgzMImvrL9el+ok=)
                          2: McsA0vhEAYEMMgC1L6OI6TZR3fM.crl (hash: ky42//KRbC+D+bsTu5aRX2B1OcH2Fbxi4b55mfKU7n8=)
                          3: YHYbmuz_pM9wn1qc-egcCE-kAEA.roa (hash: 6Tz9Tz8OM7622P+63dPrrdM/er/OUWTKt1lvg0lixIg=)
                          4: pIxw3KC603JdsybhpGY7_5Fn_9o.roa (hash: Ci8maKrft1TBBCcPJqKFYTduIXPenh2T5qk94PPEQ08=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/McsA0vhEAYEMMgC1L6OI6TZR3fM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 05:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:7f:74:f9:56:f2:b9:cf:a6:24:7e:4a:84:3d:ec:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31cb00d2f84401810c3200b52fa388e93651ddf3
        Validity
            Not Before: Jul 24 05:00:54 2026 GMT
            Not After : Jul 25 05:00:54 2026 GMT
        Subject: CN=99e52ddb0bd322d923089013097af14d574c5a33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2a:a1:ef:6d:0c:bc:51:c9:66:b5:29:19:3d:
                    b6:54:f3:1f:e4:35:ce:8d:64:fe:bc:c6:56:64:cc:
                    30:1e:71:a1:48:ef:d9:90:e6:d8:c7:80:36:da:b7:
                    24:9f:4b:5a:91:27:1c:66:31:8f:af:ee:24:09:ec:
                    40:6b:f8:e4:cc:fa:c8:c9:11:79:99:5d:e5:de:5a:
                    f8:b7:89:57:f2:0a:8a:c9:6a:3e:c5:d8:8e:28:6e:
                    8b:d6:79:6c:c9:71:30:1e:d8:96:ca:bd:76:f8:a4:
                    52:ee:ce:44:47:1a:82:a4:a2:f4:47:ee:c2:69:d9:
                    18:0c:71:48:36:e8:80:2e:b8:90:bc:45:83:62:e1:
                    3e:d3:80:d0:80:2d:88:41:32:59:5c:08:6f:3c:ae:
                    0c:48:24:fb:9a:cf:d4:c9:f8:2f:28:c2:8c:4f:c7:
                    fb:e6:dc:c6:77:63:c0:4d:f5:18:fd:c8:8c:e5:53:
                    9b:74:03:0a:4a:a5:86:b1:a6:c3:5d:0d:57:70:10:
                    00:c3:df:c4:85:c2:cb:9b:5a:d8:94:3a:f8:6c:28:
                    15:d6:c9:fb:96:e1:0b:10:a9:c2:0d:90:55:24:2f:
                    39:47:91:f6:46:6d:e0:cd:49:44:0e:d6:31:f5:a1:
                    71:b7:38:34:39:64:13:59:c9:52:d4:c2:3b:92:aa:
                    18:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:E5:2D:DB:0B:D3:22:D9:23:08:90:13:09:7A:F1:4D:57:4C:5A:33
            X509v3 Authority Key Identifier:
                keyid:31:CB:00:D2:F8:44:01:81:0C:32:00:B5:2F:A3:88:E9:36:51:DD:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/McsA0vhEAYEMMgC1L6OI6TZR3fM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:35:9a:7c:64:38:7e:9b:8e:2c:e5:f3:bf:38:bd:24:00:fb:
         0d:81:eb:29:ca:0f:47:2c:3d:3e:dd:f7:18:f5:78:3b:15:72:
         d8:51:d4:a2:36:89:72:6e:ae:ef:c3:15:06:85:ac:28:46:79:
         ed:30:67:36:a9:4f:2c:3f:95:d8:6b:8a:49:28:f2:83:6e:d2:
         33:b2:85:32:44:ec:78:9f:f7:ba:b0:af:e8:05:fb:db:aa:0e:
         fb:2a:34:21:8d:2d:17:cd:34:e2:bc:a2:b0:a3:95:00:fe:5f:
         5f:fe:1d:da:86:37:6f:e2:9f:43:62:55:57:46:16:a1:77:4f:
         6b:eb:1b:db:be:98:7c:92:92:25:97:a2:d4:00:c5:7f:ed:9e:
         c8:64:81:56:84:e7:72:cd:13:6b:f4:02:57:a6:83:1d:d0:a7:
         b1:00:97:0a:31:8b:3f:c7:4d:7b:17:67:b3:13:9f:4c:6d:cf:
         51:d5:55:1e:fb:95:24:4f:1b:fb:14:49:02:2e:d7:77:b2:39:
         ee:d5:fc:50:1a:d2:d5:bc:d0:d5:b1:54:25:a1:df:b4:af:c2:
         67:eb:1d:4b:7f:c6:cd:fb:5c:1e:25:eb:98:cf:ae:70:fb:9b:
         3c:8e:51:3f:79:f6:f8:1e:17:d6:b4:d6:c2:8b:0d:72:62:c6:
         3a:ad:98:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:17:34 2026 by rpki-client