Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft
File:                     MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft (raw, json)
Hash identifier:          Ae1HpMSQtm0SNukOvOwp/bqt7wRTJI9NgE2xFHRM3ow=
Subject key identifier:   74:A8:FE:7A:29:B4:28:BE:3D:B0:6C:DC:A3:38:FE:A3:88:A9:87:92
Authority key identifier: 30:F0:8F:84:0E:31:7E:95:20:5B:A1:34:97:D9:DB:C7:37:7B:9E:57
Certificate issuer:       /CN=30f08f840e317e95205ba13497d9dbc7377b9e57
Certificate serial:       019E1D905F044CE0535AB5830595B3FBD85C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MPCPhA4xfpUgW6E0l9nbxzd7nlc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft
Manifest number:          0981
Signing time:             Tue 12 May 2026 19:01:01 +0000
Manifest this update:     Tue 12 May 2026 19:01:01 +0000
Manifest next update:     Wed 13 May 2026 19:01:01 +0000
Files and hashes:         1: MPCPhA4xfpUgW6E0l9nbxzd7nlc.crl (hash: CJrbNR30VHW6tjqQVGX7ykt4C5Pt6v/Muiw8eOsaql0=)
                          2: zlryn4mko1wRxoOR9PxP0fcxrmE.roa (hash: AIH8NLSlPfR8dAuRGSz5mVvImvbLrLk/0uPHSLREnZ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MPCPhA4xfpUgW6E0l9nbxzd7nlc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 19:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:5f:04:4c:e0:53:5a:b5:83:05:95:b3:fb:d8:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30f08f840e317e95205ba13497d9dbc7377b9e57
        Validity
            Not Before: May 12 19:01:01 2026 GMT
            Not After : May 13 19:01:01 2026 GMT
        Subject: CN=74a8fe7a29b428be3db06cdca338fea388a98792
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:75:8f:48:89:d6:dd:1d:fc:2a:69:1b:e4:f0:
                    cf:b7:b7:5f:99:6a:38:a3:9c:e7:24:6f:a7:bb:18:
                    02:68:35:d3:db:95:04:6b:b1:1d:c0:7b:6a:b9:47:
                    6c:53:73:0a:d8:c5:c7:3f:8e:bc:62:5b:c7:1a:41:
                    29:1a:64:2f:c2:2a:ec:aa:00:f8:80:ac:be:f7:10:
                    ce:42:31:34:dc:4e:e0:76:f8:91:9b:56:d8:b3:49:
                    76:9e:91:a5:d9:5b:fd:af:5d:39:c1:c0:8b:1a:82:
                    9c:19:0a:c8:3a:bd:3b:e2:cb:ea:bb:28:2d:99:f7:
                    b5:db:69:ee:83:57:34:69:67:b9:d0:57:08:af:bd:
                    03:47:65:39:33:d1:8c:39:94:f4:84:c3:59:9d:2e:
                    0d:ce:ec:e4:6d:76:e9:25:5a:84:44:aa:89:0a:10:
                    00:4e:ae:eb:c2:52:7f:5b:dc:f0:fa:26:87:75:83:
                    50:6b:f7:1c:e9:26:c3:a3:3d:ab:72:45:f5:28:fd:
                    62:0b:ce:07:bf:13:92:17:67:f6:30:78:7d:c6:3f:
                    29:6f:74:40:45:fc:39:1d:a4:21:f5:9a:13:78:48:
                    fd:b9:c4:92:8f:aa:76:0a:ac:5b:a6:43:12:2d:62:
                    3b:db:c7:5b:c1:5b:95:db:5f:b8:17:d7:b4:1b:3b:
                    1a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:A8:FE:7A:29:B4:28:BE:3D:B0:6C:DC:A3:38:FE:A3:88:A9:87:92
            X509v3 Authority Key Identifier:
                keyid:30:F0:8F:84:0E:31:7E:95:20:5B:A1:34:97:D9:DB:C7:37:7B:9E:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPCPhA4xfpUgW6E0l9nbxzd7nlc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:27:72:47:0e:60:8a:60:3f:22:09:d5:46:82:c7:8d:42:e4:
         f0:51:92:43:e7:cc:1a:1a:11:fb:66:47:b3:6d:18:92:aa:12:
         23:20:ef:31:f1:6d:1f:c5:55:e0:eb:a7:9b:e7:cf:93:44:a4:
         73:10:93:f2:5e:17:0b:b5:53:07:32:1e:be:c4:1b:04:60:62:
         d2:c9:8e:9b:d2:c2:c5:c3:81:5b:a9:43:0a:23:b5:1f:e2:f5:
         91:c1:ab:c2:c2:c7:50:61:cf:8a:20:7d:d8:24:6a:e4:5c:3a:
         87:b9:0c:32:9e:30:dc:de:8b:dc:b3:db:1f:fc:47:db:fd:0f:
         72:e6:f9:2a:2b:6b:84:ea:4f:e2:d5:70:79:69:5b:53:51:6a:
         19:b3:05:7b:6d:20:31:27:b7:66:0c:96:97:fb:5f:fc:07:0d:
         77:da:cc:66:57:79:8a:b7:ec:79:89:d0:84:05:dc:fe:b9:eb:
         9e:75:5b:07:7b:b1:fc:cb:05:4a:f3:7c:5c:53:2b:f6:9d:4a:
         a4:8d:9b:1b:5d:7e:f6:82:7c:8a:db:21:3b:34:86:24:db:78:
         04:e8:61:26:b8:3d:78:f0:52:ab:0c:42:fb:79:04:04:7c:67:
         38:91:30:e9:10:e9:fc:d9:1c:e3:b5:ba:11:12:69:5f:38:af:
         a4:72:a0:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:09:17 2026 by rpki-client