Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/40e57e-c627-4b9b-9577-596fa8c0a57a/1/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.mft
File:                     MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.mft (raw, json)
Hash identifier:          RBgFilSuXP93lqf2iGxKg0fa/oFXfX3Iev8M8dW7xq0=
Subject key identifier:   1D:03:FF:B6:6A:D8:7B:D7:4A:40:43:41:DB:E5:5D:1D:E7:9F:B4:A7
Authority key identifier: 30:62:8D:92:38:E2:3D:6B:F4:C7:35:99:5C:9E:2D:EA:00:50:F0:0C
Certificate issuer:       /CN=30628d9238e23d6bf4c735995c9e2dea0050f00c
Certificate serial:       019D28168D34318619D77C8B7B22355C208A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/40e57e-c627-4b9b-9577-596fa8c0a57a/1/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.mft
Manifest number:          08ED
Signing time:             Thu 26 Mar 2026 03:00:59 +0000
Manifest this update:     Thu 26 Mar 2026 03:00:59 +0000
Manifest next update:     Fri 27 Mar 2026 03:00:59 +0000
Files and hashes:         1: MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.crl (hash: zcKZgsIaiipl55qh5Hk0pZmTF9ey8ebI/tMmEj6nRsU=)
                          2: dIqWZ2cWHiBFVvZxoBhqWpuAwmQ.roa (hash: uE7jBQ3nDWE2TUDIdFmUrQEZmjWLtoSS41WGaaBfii4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/40e57e-c627-4b9b-9577-596fa8c0a57a/1/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/40e57e-c627-4b9b-9577-596fa8c0a57a/1/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:16:8d:34:31:86:19:d7:7c:8b:7b:22:35:5c:20:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30628d9238e23d6bf4c735995c9e2dea0050f00c
        Validity
            Not Before: Mar 26 03:00:59 2026 GMT
            Not After : Mar 27 03:00:59 2026 GMT
        Subject: CN=1d03ffb66ad87bd74a404341dbe55d1de79fb4a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:e1:64:b7:f9:1e:68:f3:94:bc:9b:f6:77:ca:
                    3d:eb:5d:21:c4:6c:9f:e5:8c:98:53:c1:e9:ab:f3:
                    a8:cc:7b:65:2b:b3:a3:37:bf:87:be:c7:2b:9f:12:
                    4a:12:94:cd:38:8a:ec:1c:04:6d:dc:cd:db:35:dc:
                    f1:88:a7:d7:bf:25:3e:c4:a4:68:ec:7a:f6:2f:85:
                    a1:4f:7e:d2:4c:b8:11:55:46:f7:ef:ed:30:ad:ec:
                    9d:fd:8b:cc:85:cc:27:a2:e7:18:79:7a:a3:3e:52:
                    d3:bf:fc:d4:1e:5c:b6:67:03:32:85:cc:a6:6b:ea:
                    9c:ac:21:e5:b7:1d:50:f1:cf:fe:1e:8e:a9:ae:bf:
                    f9:61:f8:14:fe:06:4c:33:9e:fb:e7:90:f6:cd:ff:
                    39:7b:6a:7e:85:b4:69:86:a0:86:d2:ba:1a:95:b2:
                    d8:e4:19:f8:30:b3:eb:aa:f4:2c:dc:49:7b:de:b4:
                    8d:87:a9:ee:99:8f:01:1d:4b:26:78:98:a7:49:b4:
                    2a:57:06:85:24:96:7f:8f:3c:84:54:5e:c2:76:06:
                    16:9e:de:2a:fc:e3:b4:6c:64:c8:07:e1:67:38:94:
                    24:5f:25:a4:47:71:f6:d5:49:da:b2:05:fe:ca:6a:
                    38:db:65:24:91:ff:a1:ee:67:71:db:7d:6f:8c:7c:
                    f2:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:03:FF:B6:6A:D8:7B:D7:4A:40:43:41:DB:E5:5D:1D:E7:9F:B4:A7
            X509v3 Authority Key Identifier:
                keyid:30:62:8D:92:38:E2:3D:6B:F4:C7:35:99:5C:9E:2D:EA:00:50:F0:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/40e57e-c627-4b9b-9577-596fa8c0a57a/1/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/40e57e-c627-4b9b-9577-596fa8c0a57a/1/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:50:43:14:e9:f0:a3:0a:fb:7e:c5:e7:3b:6c:7c:29:c0:cd:
         17:a6:35:76:91:8f:0b:45:88:4c:36:11:f1:d0:9f:2c:bb:94:
         2d:8e:98:e7:db:b6:e1:84:08:d5:31:ce:a6:fc:2b:78:17:e7:
         22:96:e0:c7:ce:8f:4c:9b:d5:60:7c:ea:db:c7:7d:66:79:c3:
         a4:c6:27:d2:cd:f0:5b:a5:5e:6d:c6:5e:2d:5b:2d:a4:f8:12:
         7f:dc:c4:26:aa:65:74:5e:05:ef:3f:99:d1:ee:14:fe:a5:06:
         11:28:cc:15:a9:92:26:71:80:9b:0f:4b:24:c2:99:8c:0e:9e:
         4b:b1:1f:65:3f:18:00:ec:74:28:34:48:28:3e:ed:f0:f1:fc:
         b2:2e:be:04:1a:47:9e:75:ed:01:5e:26:46:02:0f:a5:0f:7d:
         01:33:03:3a:d4:f5:23:1f:11:f3:66:25:a8:a1:0c:74:92:d9:
         ee:16:94:51:ec:cf:40:6c:7b:61:8a:9f:08:74:5a:99:08:86:
         19:69:7a:53:86:8d:4f:fe:72:5c:ed:1e:1d:ad:d2:81:87:3b:
         55:27:2a:e7:20:22:d5:78:75:87:ff:ac:10:c3:0f:ed:04:ad:
         99:30:30:3e:94:b6:0e:53:6d:c5:35:7f:bc:07:c0:14:b7:11:
         ec:54:05:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:09:57 2026 by rpki-client