Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.mft
File:                     MduEfR2x4LLCwlUCIQ_1pxmWehk.mft (raw, json)
Hash identifier:          q0SunudjHQnSYHs+Mdc5rIb3uUVYVGHv5kOBM9Tp6hc=
Subject key identifier:   4B:E3:E4:AF:F7:2D:E3:7F:7A:F0:6C:EF:41:82:B0:2A:AA:C1:9C:3C
Authority key identifier: 31:DB:84:7D:1D:B1:E0:B2:C2:C2:55:02:21:0F:F5:A7:19:96:7A:19
Certificate issuer:       /CN=31db847d1db1e0b2c2c25502210ff5a719967a19
Certificate serial:       019F92ED6A313A6AF1F1F0DD43032960B725
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MduEfR2x4LLCwlUCIQ_1pxmWehk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.mft
Manifest number:          1251
Signing time:             Fri 24 Jul 2026 07:01:00 +0000
Manifest this update:     Fri 24 Jul 2026 07:01:00 +0000
Manifest next update:     Sat 25 Jul 2026 07:01:00 +0000
Files and hashes:         1: 0PROOXHWtrqTshebWInvLwz5dVE.roa (hash: kuqhwuodobpmINYueeYw21Gf/m1l+ZCaG7GCFJgXBC4=)
                          2: MduEfR2x4LLCwlUCIQ_1pxmWehk.crl (hash: D9rLXsE8QBtZAksA2gQBxuyGAcu7/Dy8J8NEZfMXAtI=)
                          3: Pky97jBwdyUgYzg1_AI-qFYMT1o.roa (hash: nbaHUKHv0TZLnVM+2128xVj9F0Kn5xH6nruz/6y8MI8=)
                          4: nge1u5LMthh69_mO6tYKWBjnSBE.roa (hash: qNcn7K4jDXvzhu4do4cfBL/ruII09KDI1rZLPsg+Hug=)
                          5: yCDwwVBWdVeCJB3paV68yEm0bEQ.roa (hash: jb11BCbq+94ZB4w8Ms7QY8fhTLtofYi5pYcgB+s+Sf0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MduEfR2x4LLCwlUCIQ_1pxmWehk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 07:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:ed:6a:31:3a:6a:f1:f1:f0:dd:43:03:29:60:b7:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31db847d1db1e0b2c2c25502210ff5a719967a19
        Validity
            Not Before: Jul 24 07:01:00 2026 GMT
            Not After : Jul 25 07:01:00 2026 GMT
        Subject: CN=4be3e4aff72de37f7af06cef4182b02aaac19c3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ea:9b:09:7b:e1:c3:b6:58:f5:c4:a5:bd:90:
                    18:5d:f7:8b:5f:63:9f:a1:5b:b4:22:28:db:47:da:
                    6d:be:fc:29:72:19:8a:16:b0:ed:1e:85:f3:58:66:
                    16:47:72:5e:09:66:12:8d:af:63:e6:73:73:37:70:
                    6e:34:4f:fb:cc:98:ca:bb:57:7d:39:bd:67:e1:cc:
                    63:43:0f:1a:c4:a3:2d:11:e8:a7:69:b7:42:5d:8b:
                    e2:d5:13:43:80:53:ac:f7:fb:d1:de:98:a9:4d:1c:
                    69:8c:0a:36:78:1a:7d:5f:ef:35:e9:6c:af:e5:53:
                    57:fc:04:11:e0:cd:57:3e:94:57:07:f1:80:48:9c:
                    7f:0e:9e:28:34:67:5e:3b:3a:25:9c:fe:26:43:f9:
                    1b:4c:5f:47:45:15:dc:de:8f:ff:6c:da:fa:d1:fd:
                    8f:c1:ec:8c:1d:27:e2:61:8d:df:1d:54:fc:d1:b6:
                    9e:ac:62:c5:20:bb:af:8e:9a:0d:23:bc:bc:0c:49:
                    ff:6e:e5:79:bf:7c:6c:26:08:f4:f9:03:eb:1f:c6:
                    08:55:bb:1d:27:9d:b7:7b:00:11:59:86:19:0f:e4:
                    ab:0b:69:04:36:cf:9d:c7:7c:25:2e:56:5f:9f:7b:
                    27:7a:3e:fc:f2:22:cc:49:ff:82:65:23:58:a1:0f:
                    1c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:E3:E4:AF:F7:2D:E3:7F:7A:F0:6C:EF:41:82:B0:2A:AA:C1:9C:3C
            X509v3 Authority Key Identifier:
                keyid:31:DB:84:7D:1D:B1:E0:B2:C2:C2:55:02:21:0F:F5:A7:19:96:7A:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MduEfR2x4LLCwlUCIQ_1pxmWehk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:48:f0:c5:b6:a3:5f:ed:a2:d7:98:eb:bc:b9:fc:e9:59:e7:
         f6:13:a4:1c:e2:50:ba:62:2d:63:f8:33:fe:58:a4:e8:7e:55:
         80:c6:81:e4:3e:e3:fc:fa:b8:d8:ed:78:b4:c8:e1:62:ed:ff:
         b3:5b:39:07:b2:32:0e:61:65:78:b2:e5:42:98:e2:41:a3:69:
         92:eb:29:8e:e3:a0:b8:04:39:ff:93:0a:9c:40:ac:99:69:40:
         56:47:5a:d3:02:dd:2d:d1:d5:c3:df:23:c5:20:c5:48:7d:d3:
         c5:1e:23:72:1b:69:fc:24:82:f1:1c:8d:75:fd:85:34:d8:b8:
         1a:dc:dd:d0:ab:1e:9c:6c:60:70:24:ab:47:a2:9a:d7:3b:90:
         82:25:6d:af:df:d4:bd:bc:ea:f4:56:89:8e:db:b1:0e:4d:7b:
         b8:4d:19:b5:fc:b0:28:e5:2d:68:e3:80:60:4f:5f:92:44:bf:
         46:d0:13:8f:2f:cf:e6:5e:71:02:ed:1e:09:dc:61:e9:e1:8f:
         bc:12:e5:fb:ec:aa:a5:40:4c:9b:41:8d:b1:e4:ac:29:44:3b:
         5f:cd:bf:f5:2a:a4:0e:e6:6f:50:1c:4b:3e:39:85:2b:0d:a3:
         2e:0e:df:36:be:23:db:e0:71:08:5f:b2:a2:c2:b3:48:93:63:
         ce:21:e0:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:16:43 2026 by rpki-client