Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.mft
File:                     _MrtD4HiSNrzMrgIQ9Sino19UeQ.mft (raw, json)
Hash identifier:          aiP9CahPdRyl296DaXKvAAtAD0E2MbJIxvJJVDZTnaE=
Subject key identifier:   3E:C0:DD:00:EB:61:3C:CB:0C:68:1F:A0:16:A1:BD:BA:B3:BD:69:40
Authority key identifier: FC:CA:ED:0F:81:E2:48:DA:F3:32:B8:08:43:D4:A2:9E:8D:7D:51:E4
Certificate issuer:       /CN=fccaed0f81e248daf332b80843d4a29e8d7d51e4
Certificate serial:       019E9137EB79FF8C1072DA239DA77A9882A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_MrtD4HiSNrzMrgIQ9Sino19UeQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.mft
Manifest number:          166C
Signing time:             Thu 04 Jun 2026 06:00:21 +0000
Manifest this update:     Thu 04 Jun 2026 06:00:21 +0000
Manifest next update:     Fri 05 Jun 2026 06:00:21 +0000
Files and hashes:         1: V-KD2l5XB9TJ4WbuiPSbiHcA26s.roa (hash: tm/NB5wzRW6Hwa1rWNFA/fkC7eMyH/xDfSrejkXoTro=)
                          2: _MrtD4HiSNrzMrgIQ9Sino19UeQ.crl (hash: CI0F99NZKYDdc8M+FioBh5rHKYgD1Di7zvMtgtioG4g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_MrtD4HiSNrzMrgIQ9Sino19UeQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 04 Jun 2026 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:91:37:eb:79:ff:8c:10:72:da:23:9d:a7:7a:98:82:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fccaed0f81e248daf332b80843d4a29e8d7d51e4
        Validity
            Not Before: Jun  4 06:00:21 2026 GMT
            Not After : Jun  5 06:00:21 2026 GMT
        Subject: CN=3ec0dd00eb613ccb0c681fa016a1bdbab3bd6940
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:95:09:8c:23:8c:af:f7:c2:a9:7d:5e:20:29:
                    bd:8e:36:ce:3b:9b:bc:c0:d0:60:df:1c:b9:44:e6:
                    60:8d:33:22:8d:56:76:ed:19:6a:1f:25:49:f9:78:
                    c6:ef:ca:c6:76:73:a7:a2:5c:88:09:81:5d:7f:30:
                    16:ed:62:b9:3d:c3:62:3b:2f:77:02:60:08:5c:03:
                    a5:c7:37:bf:a1:85:80:88:6c:7b:71:2b:d8:ca:3d:
                    eb:b1:62:11:ad:e8:28:f9:0d:91:07:97:2a:00:d7:
                    dc:b7:96:98:f2:49:8e:fa:cf:1c:16:4c:34:ca:b2:
                    c3:78:42:27:67:1c:8b:24:2b:a4:80:b3:72:0c:a8:
                    eb:02:b2:d6:d9:3d:ef:95:28:16:34:c6:a2:7d:a4:
                    4b:2b:06:ef:e7:d4:c8:8a:3f:4a:40:c0:b8:87:9a:
                    7c:2b:7b:e3:77:ab:c6:05:78:c1:54:99:d9:bb:ec:
                    de:f5:1d:43:fa:80:fb:f3:15:4c:f1:80:61:e7:b4:
                    25:0b:ab:05:2b:1c:e5:a6:6f:41:6c:83:4f:a8:c9:
                    44:be:55:2d:ab:e7:58:f1:3a:33:52:18:f4:eb:d5:
                    d6:cc:d9:64:ac:24:1e:99:f6:c0:f7:f0:89:c9:2b:
                    99:59:92:43:14:d4:55:4b:0b:21:72:55:c7:3b:52:
                    0b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:C0:DD:00:EB:61:3C:CB:0C:68:1F:A0:16:A1:BD:BA:B3:BD:69:40
            X509v3 Authority Key Identifier:
                keyid:FC:CA:ED:0F:81:E2:48:DA:F3:32:B8:08:43:D4:A2:9E:8D:7D:51:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_MrtD4HiSNrzMrgIQ9Sino19UeQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:c6:f7:d8:3f:9c:8d:d7:a1:eb:2f:21:56:c0:f7:4b:97:19:
         ab:10:e7:6a:d1:7b:d7:c3:9d:b7:db:d3:99:e8:fe:8c:64:b3:
         b8:c3:f0:ec:74:6c:bb:03:f3:4d:37:4c:8f:91:05:4b:06:99:
         ce:30:7f:17:96:ab:f5:b2:49:8f:a9:24:08:f0:19:cf:a5:f3:
         1c:26:b7:bb:ab:59:df:20:c0:f8:b1:32:61:f7:d2:68:d2:b7:
         8d:a1:19:b0:41:07:b6:07:2a:b3:58:e9:b2:6b:65:8a:0e:80:
         68:b0:5b:95:ba:0c:03:25:cd:49:7f:76:61:bf:94:7b:b8:d8:
         6b:c7:6e:87:f6:8a:70:09:c1:4a:ff:25:ef:60:eb:8d:90:52:
         2a:5e:f1:b4:1a:6e:f5:aa:2d:97:c1:de:49:83:b1:b9:27:1e:
         ba:1c:88:79:dc:64:be:50:fd:93:cd:53:79:83:a3:de:33:f0:
         a6:e8:f7:13:19:04:44:b9:1c:7b:3f:f8:c7:a8:98:b5:99:e3:
         bc:20:62:db:91:80:a5:d1:ba:eb:ea:0b:cd:ba:7c:86:d5:b7:
         57:52:9c:fd:a5:04:a1:fa:c8:96:49:f9:7a:e9:ab:6b:80:06:
         85:70:ba:fa:21:95:66:a2:ff:d9:14:95:7e:8b:2f:cb:39:e1:
         99:86:f6:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:02:39 2026 by rpki-client