Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft
File:                     MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft (raw, json)
Hash identifier:          PyyZ09FyPzDTmTZ7HRKrL1X/P5lc8cYUHeIznlz2W4M=
Subject key identifier:   C0:D8:74:ED:36:A9:20:17:FA:61:A4:BF:FA:09:C6:DE:4D:4C:E6:4F
Authority key identifier: 30:14:B8:C7:F5:09:E1:00:51:B0:CD:29:FD:8D:69:F2:85:50:8D:87
Certificate issuer:       /CN=3014b8c7f509e10051b0cd29fd8d69f285508d87
Certificate serial:       019F93FF7595E5638FBFDE400C898CB5401F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft
Manifest number:          16CB
Signing time:             Fri 24 Jul 2026 12:00:20 +0000
Manifest this update:     Fri 24 Jul 2026 12:00:20 +0000
Manifest next update:     Sat 25 Jul 2026 12:00:20 +0000
Files and hashes:         1: MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.crl (hash: pxi0gh4Z9/FIUvrZ1HTaxSETQc9v35AI0FnKJDB7akQ=)
                          2: sGm0vU9oSC-btG4YiEKa4VaTO0s.roa (hash: Z7crjxHBjgD6BdGuonNkIQvXjn5E/Ot91T2B7Xj3rsM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 12:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:ff:75:95:e5:63:8f:bf:de:40:0c:89:8c:b5:40:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3014b8c7f509e10051b0cd29fd8d69f285508d87
        Validity
            Not Before: Jul 24 12:00:20 2026 GMT
            Not After : Jul 25 12:00:20 2026 GMT
        Subject: CN=c0d874ed36a92017fa61a4bffa09c6de4d4ce64f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:61:76:b6:67:d5:f5:68:39:89:7f:09:a3:7c:
                    a5:2a:32:62:8f:fa:47:30:df:8b:0d:92:8e:63:72:
                    9c:e2:6c:ef:ce:aa:b2:52:80:4e:ae:49:82:3a:c7:
                    34:d3:16:51:fe:4a:33:9b:16:fd:12:b9:20:5a:9e:
                    66:b7:46:a2:8d:de:9c:ad:32:99:4e:38:4c:e0:cf:
                    11:76:bc:96:49:42:e6:0b:6e:82:19:0a:7c:72:65:
                    6f:71:33:12:b1:af:44:44:4f:e0:c9:d2:34:e6:00:
                    ee:bb:ba:b2:7a:46:d0:5b:87:5a:c9:05:25:97:6c:
                    60:cc:fd:d8:2d:78:ff:88:e3:9b:94:20:ec:11:17:
                    5b:78:c8:46:27:23:97:c5:03:11:4f:ed:07:a7:fe:
                    e9:c7:ea:98:e1:c5:9f:fc:15:d8:06:ff:87:64:23:
                    f3:ce:69:11:79:7c:5d:c4:f4:c7:55:21:1c:71:da:
                    b1:62:7c:c8:31:db:4d:26:c3:d1:12:5f:0d:f3:c2:
                    13:6d:87:db:89:3c:8b:a1:09:aa:09:ed:f7:9a:9b:
                    0d:a8:b6:cd:0d:c9:2b:9f:47:f4:16:18:b8:b2:48:
                    28:33:fb:36:31:b5:2c:7b:fe:f0:a1:21:fe:cd:ce:
                    09:46:e1:8f:8d:8d:a7:c2:d0:66:c6:78:b0:b8:76:
                    10:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:D8:74:ED:36:A9:20:17:FA:61:A4:BF:FA:09:C6:DE:4D:4C:E6:4F
            X509v3 Authority Key Identifier:
                keyid:30:14:B8:C7:F5:09:E1:00:51:B0:CD:29:FD:8D:69:F2:85:50:8D:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:17:4a:b5:69:79:89:88:e5:1d:37:f1:03:69:98:4e:82:3b:
         45:92:2a:79:b2:5f:c9:d6:82:40:db:39:23:fa:6e:31:ae:d4:
         3a:44:22:0f:b4:5d:91:1e:af:59:fd:6f:3b:6e:3e:6c:73:5c:
         0f:fa:2b:c1:63:da:6f:60:8a:3f:85:a4:73:f0:a5:83:dc:fa:
         b2:67:0a:94:ed:e9:4f:cb:d5:0f:d7:80:ad:b1:3b:dc:12:32:
         f2:39:2a:32:1a:28:05:4c:e8:e9:32:fc:1b:54:85:77:5b:25:
         19:f7:3a:48:2c:c9:1a:6f:78:b5:cb:ef:d7:c9:b3:31:a9:06:
         25:d0:59:c1:dc:18:fc:0a:db:f7:0a:8a:9b:7c:25:dd:d7:9c:
         26:10:38:40:2b:ef:c0:40:38:ab:d5:78:4a:f5:6d:cb:28:5e:
         59:4a:57:da:ab:46:94:d1:74:b6:c2:b1:07:ec:fa:4f:f8:11:
         c1:f9:8a:16:e7:54:78:d5:34:8d:0c:ba:c1:94:b1:c0:9b:f8:
         87:f4:66:05:80:77:11:22:09:52:a8:e9:bb:7d:7b:14:09:4b:
         4d:d7:07:ee:99:0e:f1:94:8a:b0:a0:29:ff:0e:a6:62:0d:08:
         46:bc:5f:b2:dc:8e:d4:8e:7f:33:76:f5:af:16:ae:ce:ff:02:
         4b:a5:26:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:53:02 2026 by rpki-client