Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.mft
File:                     mfa_Doxu_Er_r3JiiEacr_QX3mY.mft (raw, json)
Hash identifier:          IGj2RG209BJ2Ua4eEOZ+mU3Hc5LVjD8ZEwfBEy+ASYg=
Subject key identifier:   04:B9:46:6B:9C:52:3C:3B:F7:2F:7E:B9:D3:CF:37:1D:BA:5F:1C:8B
Authority key identifier: 99:F6:BF:0E:8C:6E:FC:4A:FF:AF:72:62:88:46:9C:AF:F4:17:DE:66
Certificate issuer:       /CN=99f6bf0e8c6efc4affaf726288469caff417de66
Certificate serial:       019F84FB146C0E726A6A9AB20259A33BFD0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mfa_Doxu_Er_r3JiiEacr_QX3mY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.mft
Manifest number:          0277
Signing time:             Tue 21 Jul 2026 14:01:14 +0000
Manifest this update:     Tue 21 Jul 2026 14:01:14 +0000
Manifest next update:     Wed 22 Jul 2026 14:01:14 +0000
Files and hashes:         1: Nl_yi1QXIQ5ForZSQarCyISI-8I.asa (hash: AajCKSsGi9WnrBsDdmR9RQ3tCTGoQ7cdjbFClS/xtCA=)
                          2: mfa_Doxu_Er_r3JiiEacr_QX3mY.crl (hash: FPY19Do1+Rj0MBcymvhei6VRaY0YJZaoyYckxqS97M4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mfa_Doxu_Er_r3JiiEacr_QX3mY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:84:fb:14:6c:0e:72:6a:6a:9a:b2:02:59:a3:3b:fd:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99f6bf0e8c6efc4affaf726288469caff417de66
        Validity
            Not Before: Jul 21 14:01:14 2026 GMT
            Not After : Jul 22 14:01:14 2026 GMT
        Subject: CN=04b9466b9c523c3bf72f7eb9d3cf371dba5f1c8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:98:e0:e6:08:91:66:09:da:3b:03:fc:e3:0b:
                    77:75:fe:3f:92:b3:67:26:22:b5:6b:8c:9a:06:4a:
                    bf:57:6b:3e:91:6d:76:3b:00:fc:84:1a:e6:c1:b5:
                    77:d5:ce:f9:d8:b0:ea:45:6b:25:15:be:2d:0c:32:
                    6f:11:1a:c0:9a:02:57:7e:ce:49:bb:7f:04:d3:c5:
                    bf:f1:9f:71:c9:10:d7:d6:94:af:6c:38:e8:8e:0d:
                    8a:86:aa:51:f2:64:6a:70:06:9e:6b:d5:80:d7:b8:
                    ab:f9:f1:ea:ec:e4:00:b0:8d:de:e4:a7:a9:65:15:
                    26:54:36:10:74:50:ef:8d:e7:81:d5:10:ce:96:81:
                    57:b3:f0:ff:8e:ec:4e:b6:f5:1b:18:b4:46:bd:18:
                    1b:0e:ed:58:43:ea:77:22:1d:cf:d8:ea:c6:90:cd:
                    98:11:d9:5a:8a:7a:5b:83:43:9a:86:99:1b:1d:8c:
                    d3:c5:aa:2e:e6:bf:83:eb:27:26:c0:1d:1d:3b:ae:
                    12:d4:34:64:4c:74:dc:81:ae:e7:16:ec:67:ef:3e:
                    0a:61:d3:81:3f:88:72:e5:cf:59:74:a9:50:13:e2:
                    2e:b7:fb:64:33:16:1e:b5:95:3e:a6:8e:ad:54:fd:
                    9d:6d:d1:68:24:4c:a4:7e:af:87:25:93:5d:76:26:
                    29:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:B9:46:6B:9C:52:3C:3B:F7:2F:7E:B9:D3:CF:37:1D:BA:5F:1C:8B
            X509v3 Authority Key Identifier:
                keyid:99:F6:BF:0E:8C:6E:FC:4A:FF:AF:72:62:88:46:9C:AF:F4:17:DE:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfa_Doxu_Er_r3JiiEacr_QX3mY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:4d:31:42:c7:4e:d4:41:4a:36:9a:aa:22:4c:db:9b:b0:71:
         3e:58:b7:87:8c:b3:31:01:9a:74:47:cf:7e:74:8e:ab:63:bc:
         43:5e:61:68:fb:2d:b7:94:4f:f0:ab:a9:c5:58:c1:60:38:96:
         1d:25:47:bc:28:85:31:31:51:51:4c:e4:87:62:8c:9f:f2:73:
         d8:97:6b:8d:d4:15:ad:6e:72:57:17:25:da:a9:dd:dd:20:28:
         15:22:a7:28:8c:31:81:37:ed:94:9a:b5:71:b6:c0:d6:69:61:
         02:b3:c2:b5:4a:9a:91:f5:03:c6:d0:f4:54:68:3b:ff:6a:1b:
         4d:4e:ad:76:41:68:9b:e6:d4:fc:e6:08:a2:ad:5d:87:b6:5d:
         59:27:a2:64:50:74:a6:3b:8a:10:2b:59:a7:7c:2a:c5:7c:14:
         3f:18:1a:2d:93:b1:58:e3:d4:6e:67:bb:5b:00:17:ff:28:cf:
         ae:30:ac:cb:4f:6c:a5:e4:ae:ea:d2:33:c1:2d:ec:cc:99:63:
         90:43:20:d3:e3:1b:06:b2:d9:8a:53:af:a2:67:47:bd:08:44:
         b3:64:ae:d5:81:22:20:eb:de:b1:e0:d0:76:09:89:75:12:7a:
         bf:77:30:33:63:26:7c:cc:48:f4:5f:2c:c9:02:65:34:c8:49:
         ee:36:06:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:47:11 2026 by rpki-client