Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/ccdc8f-285d-43b6-8def-4b39fcabc371/1/MBYKH8YoL1eCp6in6g7SBrlEQSM.mft
File:                     MBYKH8YoL1eCp6in6g7SBrlEQSM.mft (raw, json)
Hash identifier:          Pu79m+SHO8OdCyrViFo874q4FYlOepvWySf17IknAqc=
Subject key identifier:   A4:5A:F5:46:9E:5D:7A:F2:F5:28:6B:04:1A:65:70:E7:8F:E2:EB:1B
Authority key identifier: 30:16:0A:1F:C6:28:2F:57:82:A7:A8:A7:EA:0E:D2:06:B9:44:41:23
Certificate issuer:       /CN=30160a1fc6282f5782a7a8a7ea0ed206b9444123
Certificate serial:       019F90C77FE32DD900D3D24C9FE6311F3528
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MBYKH8YoL1eCp6in6g7SBrlEQSM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/ccdc8f-285d-43b6-8def-4b39fcabc371/1/MBYKH8YoL1eCp6in6g7SBrlEQSM.mft
Manifest number:          0916
Signing time:             Thu 23 Jul 2026 21:00:21 +0000
Manifest this update:     Thu 23 Jul 2026 21:00:21 +0000
Manifest next update:     Fri 24 Jul 2026 21:00:21 +0000
Files and hashes:         1: 1SJhyocRudC4i3a4wpxvnXhK1TE.roa (hash: Q8DohD/O4S8CVYT18myTFMGAt4L6+jeYMfQ4zRODCWc=)
                          2: MBYKH8YoL1eCp6in6g7SBrlEQSM.crl (hash: CQ6JJNS7qjn2cheCaVjSfd2H1CDWrzeKkSs5lGwtc6k=)
                          3: XpKKyExlunDnIgewiAZPtg86MrQ.roa (hash: wS0s5Zz3UFUtCAGlt2SFNPs++jwDVKFp6MczP/XrPT8=)
                          4: yYnjMSBD0N1GdUhW8b3gkCvcBTY.roa (hash: UXD6Z2ZYC62V3GCh/SczjWuD8By0eruoWG1wzac/bwU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/ccdc8f-285d-43b6-8def-4b39fcabc371/1/MBYKH8YoL1eCp6in6g7SBrlEQSM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/ccdc8f-285d-43b6-8def-4b39fcabc371/1/MBYKH8YoL1eCp6in6g7SBrlEQSM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MBYKH8YoL1eCp6in6g7SBrlEQSM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:c7:7f:e3:2d:d9:00:d3:d2:4c:9f:e6:31:1f:35:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30160a1fc6282f5782a7a8a7ea0ed206b9444123
        Validity
            Not Before: Jul 23 21:00:21 2026 GMT
            Not After : Jul 24 21:00:21 2026 GMT
        Subject: CN=a45af5469e5d7af2f5286b041a6570e78fe2eb1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b0:04:4e:e2:1b:5f:4d:bd:85:e3:17:61:b3:
                    2b:84:fd:ea:b9:0f:81:30:44:d3:84:8b:12:24:e2:
                    79:69:e6:a4:b9:7c:d8:4b:af:6f:fd:23:7f:ee:cd:
                    14:1b:1f:b3:03:ea:14:b5:31:8f:de:ef:4b:2a:3a:
                    8b:9f:e3:64:e9:3f:6a:c3:2e:87:39:50:15:ba:32:
                    fc:df:70:30:2b:44:ce:1e:4b:68:2b:a7:98:c7:72:
                    7c:f7:9d:33:ad:88:9c:48:a7:81:9e:b9:33:62:22:
                    28:66:f6:f0:55:93:80:0b:70:06:67:40:a2:84:fc:
                    4c:67:c9:c8:b0:38:eb:a9:84:1f:6a:6f:f5:20:fd:
                    33:08:9c:1d:3a:54:6f:5c:d8:e4:2e:19:65:cc:42:
                    b5:34:08:61:fc:d7:4c:c9:d5:70:57:87:4a:13:53:
                    a4:2b:0f:6f:90:1d:fb:9a:42:42:d4:b1:5d:75:d2:
                    31:eb:df:ca:5a:81:88:1a:ed:2b:f4:13:f6:89:02:
                    a1:5b:71:a7:a2:d3:f8:51:b5:11:66:99:13:e0:d7:
                    2f:65:cf:86:cc:f9:7c:3e:75:c0:ca:df:89:a3:50:
                    e2:a4:56:73:c4:8d:0a:fc:ce:bb:12:00:e5:15:e1:
                    ed:1e:06:fd:f5:dc:1b:11:15:d7:95:6d:57:5a:6b:
                    c9:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:5A:F5:46:9E:5D:7A:F2:F5:28:6B:04:1A:65:70:E7:8F:E2:EB:1B
            X509v3 Authority Key Identifier:
                keyid:30:16:0A:1F:C6:28:2F:57:82:A7:A8:A7:EA:0E:D2:06:B9:44:41:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBYKH8YoL1eCp6in6g7SBrlEQSM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/ccdc8f-285d-43b6-8def-4b39fcabc371/1/MBYKH8YoL1eCp6in6g7SBrlEQSM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/ccdc8f-285d-43b6-8def-4b39fcabc371/1/MBYKH8YoL1eCp6in6g7SBrlEQSM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:c5:6b:94:a3:0e:8a:fb:e4:e2:0e:c8:98:6c:bf:7a:fd:ac:
         43:2c:47:5d:70:01:36:ef:96:43:d9:7f:56:41:12:74:eb:d6:
         41:b7:d1:b2:d3:a4:ba:7f:ae:e4:52:6b:a5:83:eb:9e:d8:00:
         25:8f:fb:ef:fc:ca:f7:f1:42:34:5b:44:fc:37:32:96:e4:59:
         c8:dd:9b:85:c1:50:a5:35:86:60:24:fa:2e:c6:cb:6d:1a:87:
         18:e1:d3:7e:de:5a:41:64:02:bb:f8:66:27:7d:68:93:81:26:
         ae:a7:80:11:a6:46:7c:75:db:be:92:26:82:4d:89:b3:93:3e:
         eb:a0:06:d9:fc:98:e4:26:a5:22:97:e3:30:7c:9c:45:4d:a7:
         6a:e4:64:11:29:db:de:ae:07:96:90:27:15:f7:df:70:89:16:
         7f:32:47:54:f2:f7:f4:e6:61:3e:46:85:91:40:fc:82:4d:b6:
         3c:ec:bf:6e:4e:ee:17:05:f8:16:c8:de:be:5d:e8:4f:e8:06:
         77:e4:a1:d1:cf:f3:fd:9a:f5:43:55:29:1c:9c:86:3a:37:36:
         0c:a8:2a:2a:e2:2e:67:ca:0a:84:62:d8:fd:0a:e8:70:11:6f:
         88:17:6b:2a:eb:5c:95:22:bd:63:75:9c:a6:ac:57:5a:85:aa:
         34:8c:5f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:14:10 2026 by rpki-client