Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft
File:                     MXqSdCYInzuMUACDIhp5ip0uhGY.mft (raw, json)
Hash identifier:          WvghMpkX8vbT+NcM0D/c9oqP2C84v0Bao50wWXq6eaE=
Subject key identifier:   D0:BD:C0:1C:E1:22:8A:8F:79:9E:0D:37:32:42:EC:30:1F:1C:E0:43
Authority key identifier: 31:7A:92:74:26:08:9F:3B:8C:50:00:83:22:1A:79:8A:9D:2E:84:66
Certificate issuer:       /CN=317a927426089f3b8c500083221a798a9d2e8466
Certificate serial:       019E1CEB483DF658F8152534139D5AA78586
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MXqSdCYInzuMUACDIhp5ip0uhGY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft
Manifest number:          1631
Signing time:             Tue 12 May 2026 16:00:41 +0000
Manifest this update:     Tue 12 May 2026 16:00:41 +0000
Manifest next update:     Wed 13 May 2026 16:00:41 +0000
Files and hashes:         1: 3-jw2Mn4GAjthDEPkukJUUAA8ms.asa (hash: OVjmmAruwPeNeXIeJ+cgYwQWAPOrHRgmi+6ExlA9DiQ=)
                          2: AAeB0P11BLo-0wFOSgELqWi6J00.roa (hash: ne5zZYzC8PT1Zd7TFJmCajzK/4fC4/JAvjpEfVor37I=)
                          3: MXqSdCYInzuMUACDIhp5ip0uhGY.crl (hash: 6mncricdAHdbUu6ofJ5gQKxUzZYu+1qD++Z7NFtkvZY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MXqSdCYInzuMUACDIhp5ip0uhGY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 16:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:eb:48:3d:f6:58:f8:15:25:34:13:9d:5a:a7:85:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=317a927426089f3b8c500083221a798a9d2e8466
        Validity
            Not Before: May 12 16:00:41 2026 GMT
            Not After : May 13 16:00:41 2026 GMT
        Subject: CN=d0bdc01ce1228a8f799e0d373242ec301f1ce043
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:01:8c:0c:7c:0a:b5:a3:53:85:38:5c:69:d0:
                    89:26:ef:7b:48:81:97:0d:83:f7:2c:ff:b1:7c:3c:
                    99:8b:b6:27:53:45:e1:0f:f1:2d:c1:24:fb:1b:eb:
                    2e:11:d5:77:26:0a:0b:d2:5f:db:b9:f9:26:f3:3c:
                    99:c3:cc:56:01:6b:e9:7d:59:4a:92:4b:6e:e5:13:
                    bc:58:d1:e3:f4:86:7e:1e:30:af:da:aa:c0:a9:e0:
                    d4:af:3c:ef:1f:4e:83:d9:96:9e:ef:65:f9:64:5c:
                    5b:52:71:25:50:cc:d4:ea:4f:0e:7a:7b:32:03:bd:
                    57:b1:73:34:18:28:7e:a3:72:fb:b8:89:c1:ba:b2:
                    88:1e:e3:95:09:0a:d5:31:1f:a1:2d:41:3f:75:e8:
                    5e:dd:0b:a6:dc:96:d6:b0:ba:f2:f1:31:26:3f:ea:
                    0c:89:a4:4e:83:b6:f4:f6:09:fc:b5:63:76:2e:e6:
                    bc:e7:2c:6d:68:13:8b:02:3a:47:4f:f1:1e:31:6b:
                    f6:2a:34:5f:c2:23:d8:52:10:44:a2:0c:7f:20:2f:
                    c4:be:5f:78:17:28:ca:b9:94:7f:38:08:bc:52:d6:
                    30:bc:f4:44:11:30:81:f1:d8:2e:2c:74:4c:14:fd:
                    d4:67:62:e0:41:46:9d:6c:f5:cb:fc:cd:98:37:90:
                    2b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:BD:C0:1C:E1:22:8A:8F:79:9E:0D:37:32:42:EC:30:1F:1C:E0:43
            X509v3 Authority Key Identifier:
                keyid:31:7A:92:74:26:08:9F:3B:8C:50:00:83:22:1A:79:8A:9D:2E:84:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MXqSdCYInzuMUACDIhp5ip0uhGY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:41:91:64:21:d3:d8:d9:f6:2c:63:21:d1:e0:70:41:d4:15:
         e1:e8:a2:9b:2e:cd:2f:41:f9:da:46:75:17:63:5a:1c:56:fa:
         b4:cc:93:3b:7d:0f:6d:e8:0a:c2:61:52:aa:63:57:3c:89:50:
         e3:91:1c:c0:37:f6:ae:9b:65:6c:bc:a4:92:39:39:46:05:e5:
         7b:a5:97:52:db:69:64:09:47:ab:52:a9:d7:78:c4:8b:99:0d:
         9f:c2:bd:d8:41:b7:f7:1c:ad:4b:06:0f:18:d5:fd:7b:a8:b5:
         91:55:aa:63:0e:bf:0d:6c:7c:3f:6f:2c:34:8c:5e:ea:3f:d6:
         ed:ad:69:c3:e9:2b:bb:06:b3:64:e7:11:3b:e8:c3:4e:47:f5:
         fe:52:19:f7:42:6e:17:f5:6d:70:60:35:74:b8:01:3e:10:99:
         d8:73:ac:33:f4:18:8c:af:f8:a8:6c:20:7a:87:7e:9a:ef:8e:
         c1:6f:4a:7d:c4:0b:09:ef:41:a8:b1:bf:12:ff:71:e2:61:8d:
         ad:49:09:ea:91:73:2d:ad:e5:88:84:1f:ef:fb:47:78:4a:c9:
         25:92:cb:76:13:25:33:8f:66:ab:33:bd:ad:ab:6d:13:63:51:
         4d:94:c0:36:c1:b1:49:cf:89:bf:40:c3:b8:38:4f:f3:3e:f6:
         26:71:ad:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:04:09 2026 by rpki-client