Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.mft
File:                     MXvyYLzaMCviwgdijPsWRHhhT-U.mft (raw, json)
Hash identifier:          feBJu6e5MtO67xs3UFJafiNjEQDbLMtcN5hfGj6luOE=
Subject key identifier:   A2:60:E5:E1:F8:58:12:12:9E:67:76:84:59:45:76:79:48:4E:23:12
Authority key identifier: 31:7B:F2:60:BC:DA:30:2B:E2:C2:07:62:8C:FB:16:44:78:61:4F:E5
Certificate issuer:       /CN=317bf260bcda302be2c207628cfb164478614fe5
Certificate serial:       019F65A73C9BEDE6FA896A86C98123324774
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MXvyYLzaMCviwgdijPsWRHhhT-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.mft
Manifest number:          1124
Signing time:             Wed 15 Jul 2026 12:01:26 +0000
Manifest this update:     Wed 15 Jul 2026 12:01:26 +0000
Manifest next update:     Thu 16 Jul 2026 12:01:26 +0000
Files and hashes:         1: MXvyYLzaMCviwgdijPsWRHhhT-U.crl (hash: SZa2nvj77ODm4Ls3FCnwHg14fW7BCqbOWTRqzbQdKvY=)
                          2: xerBMxNW-woKiA8KHx0KcXB634A.roa (hash: AR2Ndl4ICAGHIwDUvuX6ce4+Y2SPrh5ql1qQ6H1YP74=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MXvyYLzaMCviwgdijPsWRHhhT-U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 16 Jul 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:65:a7:3c:9b:ed:e6:fa:89:6a:86:c9:81:23:32:47:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=317bf260bcda302be2c207628cfb164478614fe5
        Validity
            Not Before: Jul 15 12:01:26 2026 GMT
            Not After : Jul 16 12:01:26 2026 GMT
        Subject: CN=a260e5e1f85812129e67768459457679484e2312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f8:a0:63:13:aa:c2:00:6e:72:3e:12:08:b0:
                    19:16:51:ae:b7:75:91:df:7b:5b:ee:de:be:9e:41:
                    2a:a5:de:9b:fd:30:dc:8a:aa:c8:15:f0:40:50:92:
                    54:00:88:56:1b:1e:bb:63:f1:9a:62:8d:7d:f2:02:
                    5f:f4:23:7d:c8:68:97:08:58:b4:0d:c5:2c:5a:9b:
                    b5:93:b6:99:c1:16:7e:60:ca:54:6d:3a:1d:3e:2e:
                    10:a4:6b:39:9b:9f:df:f8:c0:63:ba:df:cb:c0:9c:
                    82:d5:fb:89:f3:0d:ee:20:69:34:4e:7e:3a:21:08:
                    3a:0a:ca:ea:59:21:cb:1b:87:cd:0a:5f:e7:35:f7:
                    87:ea:41:29:e6:6b:4b:c2:4d:8c:35:ce:55:70:53:
                    1c:71:ac:c4:64:84:7d:98:5c:a4:2f:e1:c0:f5:49:
                    69:d2:44:56:2d:c3:25:ed:39:b3:3a:55:ae:ce:cc:
                    d3:d9:a3:f3:3a:dc:2d:59:97:2f:98:67:cc:ef:80:
                    59:b0:4a:17:be:82:1f:7d:61:f9:cb:76:e0:bd:d1:
                    ff:ae:4a:f1:0e:a3:cb:80:87:fa:b8:eb:d3:df:c5:
                    3d:53:0c:87:cb:0e:49:70:da:77:0d:6e:58:db:f2:
                    59:80:06:3e:ef:ad:23:00:71:b9:9e:ec:db:48:af:
                    48:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:60:E5:E1:F8:58:12:12:9E:67:76:84:59:45:76:79:48:4E:23:12
            X509v3 Authority Key Identifier:
                keyid:31:7B:F2:60:BC:DA:30:2B:E2:C2:07:62:8C:FB:16:44:78:61:4F:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MXvyYLzaMCviwgdijPsWRHhhT-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:5e:a5:3c:e5:1e:40:be:30:00:34:f0:c6:c5:fa:8b:c6:01:
         4c:aa:5f:d8:3b:92:b9:c7:a4:c7:25:3d:55:34:6e:94:f5:fe:
         43:5f:31:22:95:cf:7b:80:38:58:a0:77:f0:06:97:05:3e:55:
         8a:65:a8:7a:10:27:12:0e:3d:2a:75:f8:20:76:87:96:fa:af:
         e8:4d:61:9e:65:57:aa:a7:9b:6d:7a:2f:d8:a5:12:c2:f2:70:
         8e:66:26:5d:55:fe:90:55:a4:0c:23:98:33:70:c5:c3:bb:e1:
         45:90:43:60:3a:61:6c:9e:14:5b:0f:7f:75:7b:84:e3:98:62:
         46:21:86:51:32:0f:7a:af:f6:6d:f1:6c:18:c8:ad:9b:a0:5d:
         a4:1a:96:8d:f2:23:8e:a8:1f:a4:ba:e0:cc:02:69:d8:bf:e5:
         e5:44:aa:f1:95:41:0e:1b:46:e8:0c:f7:04:76:fa:f1:fa:5d:
         39:93:03:20:e3:12:41:fd:ac:3d:56:4e:32:bb:2c:69:ca:df:
         4e:a6:28:ee:f0:77:be:a2:fe:13:f2:9e:b5:01:cd:fc:99:96:
         b9:b9:51:9c:da:f2:82:dd:51:21:39:b3:d1:c1:55:5b:77:3b:
         13:c2:ed:50:af:79:44:89:69:ff:93:1c:75:ef:fc:6f:6b:d5:
         2d:e5:bf:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 15 14:46:19 2026 by rpki-client