Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3d93a5-5fbd-402e-ad87-e986904c8d0c/1/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.mft
File:                     MbtzCxs_U-c6JXQi5bvs5Dtnf-M.mft (raw, json)
Hash identifier:          3yPvplnDlwHVIRQ5lAIGqUeZCU8IBqrpNNr6OOGdiK8=
Subject key identifier:   9B:76:16:10:BA:3C:D9:C7:38:82:2B:95:AC:CD:5D:0E:38:B5:DC:77
Authority key identifier: 31:BB:73:0B:1B:3F:53:E7:3A:25:74:22:E5:BB:EC:E4:3B:67:7F:E3
Certificate issuer:       /CN=31bb730b1b3f53e73a257422e5bbece43b677fe3
Certificate serial:       019E1FB5CB962561925A288A4D09171D9636
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/3d93a5-5fbd-402e-ad87-e986904c8d0c/1/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.mft
Manifest number:          0322
Signing time:             Wed 13 May 2026 05:01:08 +0000
Manifest this update:     Wed 13 May 2026 05:01:08 +0000
Manifest next update:     Thu 14 May 2026 05:01:08 +0000
Files and hashes:         1: MbtzCxs_U-c6JXQi5bvs5Dtnf-M.crl (hash: bgV/eJK05FlhBA2Aexc5/yyAA5w+zQVrWFlHmMyNI6I=)
                          2: x3o94WH-TgOrV8YIjfYebD2ph7I.roa (hash: CyAtLVMGC2bxnLh65hikiQFqfdhP3gxbZnIoqvK7pGA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/3d93a5-5fbd-402e-ad87-e986904c8d0c/1/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/3d93a5-5fbd-402e-ad87-e986904c8d0c/1/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:b5:cb:96:25:61:92:5a:28:8a:4d:09:17:1d:96:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31bb730b1b3f53e73a257422e5bbece43b677fe3
        Validity
            Not Before: May 13 05:01:08 2026 GMT
            Not After : May 14 05:01:08 2026 GMT
        Subject: CN=9b761610ba3cd9c738822b95accd5d0e38b5dc77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d8:43:6f:fc:3f:15:cf:18:ae:20:c0:14:4d:
                    52:cc:cb:e6:22:6f:c1:2e:cf:ee:a3:c0:f8:af:ca:
                    f5:c3:43:52:d0:75:64:65:29:b6:60:2b:06:09:51:
                    fa:79:74:08:50:e5:33:3a:11:be:56:6d:82:f7:09:
                    08:ef:c1:d2:3f:87:2b:b1:a6:ab:ce:87:ac:b6:76:
                    e7:f3:20:d6:10:49:05:d9:a0:2d:7a:e0:85:85:3f:
                    1f:f9:f6:b7:19:e5:76:c4:fd:e2:06:c9:80:76:3c:
                    d5:03:0e:cb:e6:89:8d:fd:57:5f:ae:d0:fc:95:a3:
                    78:df:f9:08:c4:c7:24:9c:3b:e9:80:33:ba:5f:c6:
                    73:88:f2:21:b9:4e:98:b0:01:63:8e:96:e4:ef:83:
                    81:d5:a1:7e:d9:08:82:bb:22:07:18:7c:70:a9:2a:
                    de:23:58:89:1a:74:ce:67:e2:7b:b7:08:7f:8e:68:
                    0b:cd:f0:97:b0:1d:b9:06:0a:c6:eb:c7:63:9f:b9:
                    4b:38:d5:cb:88:93:45:2d:4e:7f:21:09:76:18:a5:
                    ea:a2:4a:ef:ec:e4:e4:aa:40:58:dc:38:f6:f1:ce:
                    07:64:99:22:6c:14:34:07:b3:7c:ed:34:db:8f:42:
                    52:6d:db:c1:e8:f1:f2:b6:1d:fc:72:5e:f5:cd:b7:
                    c3:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:76:16:10:BA:3C:D9:C7:38:82:2B:95:AC:CD:5D:0E:38:B5:DC:77
            X509v3 Authority Key Identifier:
                keyid:31:BB:73:0B:1B:3F:53:E7:3A:25:74:22:E5:BB:EC:E4:3B:67:7F:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3d93a5-5fbd-402e-ad87-e986904c8d0c/1/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3d93a5-5fbd-402e-ad87-e986904c8d0c/1/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:91:11:3e:21:1b:3d:60:14:3f:9e:72:03:39:b3:5d:9d:72:
         63:80:52:49:03:86:80:7f:4a:18:f8:f2:24:71:c2:1e:e1:e6:
         ca:ac:55:a4:41:78:ea:bc:f9:3c:ff:03:8a:4f:19:e4:e0:cd:
         27:e8:4c:20:78:57:63:11:b6:31:d0:ca:6f:06:89:c2:99:42:
         9a:70:20:bf:80:7a:d7:2c:fa:d2:de:78:6b:32:b0:45:30:5d:
         8e:af:8a:53:97:35:27:05:20:65:9e:ee:d9:38:26:f7:1a:20:
         71:97:47:bb:f4:8f:31:cd:86:dd:1f:59:68:76:08:34:73:bb:
         d1:53:40:47:ff:0d:dd:45:c2:21:85:f2:19:28:3b:ad:44:1a:
         0d:bf:f1:39:89:1e:98:a8:03:24:2b:36:6e:6f:a1:a1:fb:f2:
         0b:4e:94:a8:af:b4:17:3b:40:f6:28:db:8a:5f:64:b7:74:ba:
         8f:00:36:16:b6:f1:20:34:19:15:89:aa:11:8c:b1:59:0b:97:
         d9:60:12:53:ef:ce:c7:a9:71:45:cf:4d:88:5b:f1:08:c0:43:
         dd:29:c7:a6:05:78:84:69:27:f2:63:46:7f:f5:66:d0:5d:38:
         40:af:18:64:63:96:f5:c1:9e:56:b5:58:88:eb:c3:a3:de:8b:
         35:a8:6e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:00:02 2026 by rpki-client