Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.mft
File:                     mgheBvLiouMEJW-IE1_xPectBzY.mft (raw, json)
Hash identifier:          lvHlcl4eGqdX7n6ggS5TG6gvkUPnuIaN5i0/9bqyxmM=
Subject key identifier:   03:1C:14:D6:83:78:26:D5:E3:99:96:F1:C6:76:0E:70:3A:EC:00:86
Authority key identifier: 9A:08:5E:06:F2:E2:A2:E3:04:25:6F:88:13:5F:F1:3D:E7:2D:07:36
Certificate issuer:       /CN=9a085e06f2e2a2e304256f88135ff13de72d0736
Certificate serial:       019E30E0E419977321328B1BA10174E5F73D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mgheBvLiouMEJW-IE1_xPectBzY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.mft
Manifest number:          0FEE
Signing time:             Sat 16 May 2026 13:01:45 +0000
Manifest this update:     Sat 16 May 2026 13:01:45 +0000
Manifest next update:     Sun 17 May 2026 13:01:45 +0000
Files and hashes:         1: mgheBvLiouMEJW-IE1_xPectBzY.crl (hash: hDqhyEpE9rcFlDaYZLhRdUCjs5XoZdwGTclbnTk2hD4=)
                          2: pgk6nsI3cK4BMyAq4yo3QkbL4pU.roa (hash: FD9gDw7QMQ6LHr1l8voFmg+wOG9WJ0q/3TSPnokXHZs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mgheBvLiouMEJW-IE1_xPectBzY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:e0:e4:19:97:73:21:32:8b:1b:a1:01:74:e5:f7:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a085e06f2e2a2e304256f88135ff13de72d0736
        Validity
            Not Before: May 16 13:01:45 2026 GMT
            Not After : May 17 13:01:45 2026 GMT
        Subject: CN=031c14d6837826d5e39996f1c6760e703aec0086
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:cc:d3:73:02:e3:30:04:ec:66:09:4a:ed:74:
                    68:7d:36:4c:aa:6f:60:9c:d8:f4:f9:a6:0c:de:b1:
                    3e:02:1c:3c:7f:a1:54:21:ab:d1:73:e5:4e:1a:05:
                    dc:89:e5:85:29:a0:1e:dc:91:f5:2e:e3:63:46:ad:
                    96:c1:a4:e5:3d:74:2c:c9:85:d7:a2:3e:01:c7:df:
                    a1:02:19:2c:b7:8d:b5:fc:ec:fa:e7:ec:f3:d3:38:
                    69:5a:35:a9:52:10:bb:ca:c5:a8:7b:c4:65:3f:f8:
                    1f:75:ad:19:bf:23:51:b9:73:13:32:eb:ae:4b:e5:
                    3f:ad:70:0c:a3:ef:96:d0:37:7a:fb:77:fa:91:de:
                    54:1f:99:84:bd:c4:5b:85:16:4b:5a:16:a9:ab:ea:
                    fc:81:61:ed:e9:66:a1:ed:7b:51:64:63:b7:5b:0c:
                    3a:39:bd:b6:d4:eb:c9:0f:cf:ea:61:cb:ee:a0:cf:
                    7d:30:cc:0c:79:04:a5:fa:8d:cf:5d:fa:4b:27:bd:
                    f6:d5:ed:72:16:9b:50:05:3e:b5:c4:02:72:27:91:
                    f0:1f:e4:2b:e5:d8:ed:77:cf:e8:2f:d4:1c:93:b0:
                    d3:db:a8:3e:b0:48:97:10:62:79:72:57:f7:e4:80:
                    24:78:90:94:23:46:40:2d:0c:50:38:36:dc:66:50:
                    d9:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:1C:14:D6:83:78:26:D5:E3:99:96:F1:C6:76:0E:70:3A:EC:00:86
            X509v3 Authority Key Identifier:
                keyid:9A:08:5E:06:F2:E2:A2:E3:04:25:6F:88:13:5F:F1:3D:E7:2D:07:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mgheBvLiouMEJW-IE1_xPectBzY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:86:11:62:a5:7a:b8:76:7b:2d:7f:80:94:b8:14:0c:4a:65:
         47:39:aa:4a:3f:72:63:f3:6f:cc:62:c0:83:51:30:80:ae:2b:
         84:93:d6:ea:4a:10:b5:d2:c0:c2:fa:9e:1f:5f:8e:a3:37:7d:
         23:0f:a7:4e:de:70:3c:78:2b:77:b3:d2:80:ef:df:79:87:19:
         b3:05:3e:6e:72:63:12:5a:66:62:24:47:c9:1e:7f:3d:04:d3:
         96:91:f1:35:c4:89:30:f7:71:85:f7:41:73:f6:51:0d:79:93:
         dc:d5:7c:d9:d4:22:59:be:51:6c:29:f9:5b:77:ad:8b:e0:60:
         e3:39:9d:ec:cc:70:7d:c5:9b:6a:cf:ba:17:d7:87:2c:15:b0:
         a2:5f:69:68:6d:ec:c7:58:7a:9c:43:40:52:2f:6f:9e:61:56:
         fe:21:d6:b4:9b:0c:53:7b:65:c5:5a:d8:85:a2:80:85:c3:64:
         a8:a0:7d:18:c2:e8:54:8c:9f:3b:f4:85:e6:8e:3f:88:03:d8:
         f8:c5:e3:12:b9:df:06:66:22:41:d2:fb:8d:50:85:a0:fb:aa:
         e0:2d:d4:bc:3b:b0:f3:d0:6c:1e:7e:d2:96:47:00:d6:60:b6:
         2e:b2:a7:56:2c:d0:9a:84:72:8c:d1:01:65:fc:17:a5:68:a6:
         13:4d:10:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 21:12:52 2026 by rpki-client