Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft
File:                     MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft (raw, json)
Hash identifier:          Yb2h7fE7W1MT1j3GrXL1kZGQ/Avj/10IHJ+rbiCfe5I=
Subject key identifier:   4C:77:3E:05:53:1C:D1:EA:A9:D7:4F:52:2F:F6:3C:AA:07:E0:A4:B4
Authority key identifier: 31:1F:85:18:8D:08:2F:D5:64:0B:5C:3F:E1:22:1F:60:C5:01:ED:B5
Certificate issuer:       /CN=311f85188d082fd5640b5c3fe1221f60c501edb5
Certificate serial:       019F15036F58452CA2DFD74FBFD110BEBD0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MR-FGI0IL9VkC1w_4SIfYMUB7bU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft
Manifest number:          1601
Signing time:             Mon 29 Jun 2026 20:12:54 +0000
Manifest this update:     Mon 29 Jun 2026 20:12:54 +0000
Manifest next update:     Tue 30 Jun 2026 20:12:54 +0000
Files and hashes:         1: HyTfL2K9EvoVaZy-KXOTgF1Obtg.roa (hash: 0zA+P2Wj4q6cydJzTfe4tmDc4sztqJccFJv0Zen4ddc=)
                          2: MR-FGI0IL9VkC1w_4SIfYMUB7bU.crl (hash: s3/BVuaBCUxk8E3e/sVvryF/JAeaJGgI0wRorDtHSsk=)
                          3: PfIfsUmHCecT0quWuMMLRmwtU_o.roa (hash: 1Lg6Rrqt3IOywh0QJkAE12er2k2miVzqT2LnmDFzGxQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MR-FGI0IL9VkC1w_4SIfYMUB7bU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 14:12:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:15:03:6f:58:45:2c:a2:df:d7:4f:bf:d1:10:be:bd:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=311f85188d082fd5640b5c3fe1221f60c501edb5
        Validity
            Not Before: Jun 29 20:12:54 2026 GMT
            Not After : Jun 30 20:12:54 2026 GMT
        Subject: CN=4c773e05531cd1eaa9d74f522ff63caa07e0a4b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8d:62:71:7a:87:87:10:d8:d7:45:b7:dc:55:
                    3c:57:ad:55:25:53:16:35:46:23:5f:20:b0:0a:25:
                    66:08:55:6e:de:66:5b:10:32:06:2f:eb:41:88:58:
                    4d:a4:2a:30:31:93:cd:3f:aa:05:7a:45:45:4b:b7:
                    a4:4b:ce:7b:bb:2b:25:ce:5c:c0:09:10:1f:7c:5e:
                    fa:af:48:b1:6a:2b:5c:97:e9:02:82:45:94:e9:4e:
                    1c:16:91:cd:a0:88:63:28:74:fe:c5:50:16:85:28:
                    60:88:88:a0:1e:3b:ad:fc:0c:4c:d2:48:0a:c0:e6:
                    68:5a:6d:f3:45:19:13:70:4c:2f:ce:e1:b6:61:ba:
                    30:f9:03:11:95:38:d2:50:a5:f2:f6:85:4e:ad:51:
                    50:11:ea:16:85:16:19:b3:07:cb:95:cd:4e:40:d1:
                    0f:10:83:de:85:bd:71:c4:04:8d:ea:e8:77:b0:61:
                    31:89:07:ca:cf:25:86:5e:78:40:96:57:0c:da:89:
                    96:63:ec:9b:14:f7:8f:ba:0b:84:7a:96:1e:86:bb:
                    7d:e3:cc:eb:e1:e7:c0:c8:90:ef:2f:8c:ff:10:a9:
                    2a:26:99:53:0f:a3:bc:d9:3f:c3:5e:4e:a6:27:c0:
                    2b:1d:c8:33:17:7d:04:38:be:54:40:38:d9:42:d1:
                    2b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:77:3E:05:53:1C:D1:EA:A9:D7:4F:52:2F:F6:3C:AA:07:E0:A4:B4
            X509v3 Authority Key Identifier:
                keyid:31:1F:85:18:8D:08:2F:D5:64:0B:5C:3F:E1:22:1F:60:C5:01:ED:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MR-FGI0IL9VkC1w_4SIfYMUB7bU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:ae:a7:03:e3:3e:5b:ea:54:43:51:42:fb:4a:38:cb:28:43:
         19:b7:9b:4b:17:c2:5c:0a:8a:97:e0:e2:24:4b:e7:99:2b:d8:
         93:57:5f:01:43:b9:b0:2f:24:31:7c:e6:17:df:7d:31:31:58:
         60:d2:7c:76:b1:97:62:23:41:e2:3a:66:9c:75:5b:4d:41:29:
         6c:03:2e:90:35:e1:33:d8:46:67:aa:cd:81:20:60:dd:82:d4:
         3e:57:bc:d6:cf:06:b9:9d:de:d0:4a:28:76:e4:3c:14:45:65:
         f5:e1:4c:1a:36:5a:f9:e6:24:75:fc:9d:27:ad:ed:db:23:77:
         20:99:9b:a0:a4:f1:8c:b5:06:0b:2c:9f:c9:7b:2b:ab:be:10:
         c7:e6:94:ee:35:03:aa:fd:2d:38:41:44:9a:4a:d8:4c:40:b8:
         5a:7d:cd:9b:34:c8:9d:0c:7f:49:06:3e:c6:29:45:8a:94:21:
         36:bf:bd:9a:91:cd:4b:dc:cc:81:91:0e:f3:a7:d8:ea:e6:05:
         ab:63:16:f8:1a:fe:1a:f3:5c:c0:d2:a9:1d:8c:86:f1:32:4f:
         ca:27:0e:74:e3:a3:a8:e8:60:d7:e4:e5:15:e8:84:f4:dc:7a:
         8d:0a:96:af:53:b0:a8:14:21:97:d3:b1:6a:63:a3:d9:7c:d6:
         bc:b2:21:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 22:30:28 2026 by rpki-client