Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
File:                     MK_3UgloSjVGaQYdI9op-OovHV4.mft (raw, json)
Hash identifier:          s1o8/JIxZ/cI7FWEqmo6zL80IID/Vuo7zDQrg3nURH0=
Subject key identifier:   9B:E3:3C:AF:FD:E6:F4:C4:B5:D4:67:F8:11:EB:3B:E5:B2:4D:FC:1D
Authority key identifier: 30:AF:F7:52:09:68:4A:35:46:69:06:1D:23:DA:29:F8:EA:2F:1D:5E
Certificate issuer:       /CN=30aff75209684a354669061d23da29f8ea2f1d5e
Certificate serial:       019F9E155207EAC51A93270D78173487CB18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MK_3UgloSjVGaQYdI9op-OovHV4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
Manifest number:          19CD
Signing time:             Sun 26 Jul 2026 11:00:25 +0000
Manifest this update:     Sun 26 Jul 2026 11:00:25 +0000
Manifest next update:     Mon 27 Jul 2026 11:00:25 +0000
Files and hashes:         1: MK_3UgloSjVGaQYdI9op-OovHV4.crl (hash: lDH5hGVBUTLvwQcp5MIDxhQavfFHZEmqkSMklCVpxt8=)
                          2: a27hhTWfb3ZPwrefxvzFE-4LpOE.roa (hash: YD2HgofzORwQjqE1QvYrEUR0cZCvAl9rAIiyQ1ikAHA=)
                          3: jEXsJW-dSuLpQO5YOKPLDNwuGDI.roa (hash: UIwmv+B0668akDpzT0mGvVjjYi0KKoE4bndrHcRym44=)
                          4: kWWdtEhqg1dCNgXGWoYGtZ9BeWA.roa (hash: VUdKbSYy58Sq3hGEUKTZb/1GA0+WdozldyShq/dEyqI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MK_3UgloSjVGaQYdI9op-OovHV4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 11:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9e:15:52:07:ea:c5:1a:93:27:0d:78:17:34:87:cb:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30aff75209684a354669061d23da29f8ea2f1d5e
        Validity
            Not Before: Jul 26 11:00:25 2026 GMT
            Not After : Jul 27 11:00:25 2026 GMT
        Subject: CN=9be33caffde6f4c4b5d467f811eb3be5b24dfc1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:6a:fa:07:46:2a:6f:b1:cc:1a:2d:eb:11:62:
                    2f:10:35:cf:18:45:8b:97:f8:fc:a4:f1:b4:5b:93:
                    90:d2:fb:ad:5c:16:85:50:54:51:36:3b:23:b8:78:
                    fc:7a:05:ef:e8:45:a2:99:79:3e:f9:1b:08:53:bc:
                    52:e5:00:ae:57:7d:53:8b:5e:61:aa:f7:da:59:08:
                    f1:7a:96:03:fd:d2:a5:03:85:d1:46:1a:8b:44:11:
                    c8:70:17:07:8c:1d:7e:ef:9a:f9:79:ba:cb:97:d3:
                    08:fb:76:06:5d:d8:f8:27:61:82:21:0a:81:4a:89:
                    cd:86:61:6d:0b:88:25:fa:54:73:78:7b:57:a6:19:
                    4d:cb:7d:a6:23:56:ee:f9:12:69:4c:4b:66:9a:8b:
                    35:9b:27:ab:02:b4:e5:80:07:01:5c:b0:ae:75:a8:
                    e3:52:da:57:35:1e:e1:5c:26:4e:b4:95:d5:bf:64:
                    af:78:c9:5e:0e:d0:72:31:a8:07:9d:07:62:99:79:
                    5c:30:78:0d:31:5d:ee:55:18:c8:14:54:45:14:86:
                    e2:29:11:14:06:6f:a8:e7:41:7e:b8:3b:60:78:30:
                    44:3b:be:fc:61:56:e5:cf:d9:e1:3b:d2:02:6f:f8:
                    a4:0c:1a:8f:0a:72:af:98:6f:a7:fb:1c:5d:b6:de:
                    03:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:E3:3C:AF:FD:E6:F4:C4:B5:D4:67:F8:11:EB:3B:E5:B2:4D:FC:1D
            X509v3 Authority Key Identifier:
                keyid:30:AF:F7:52:09:68:4A:35:46:69:06:1D:23:DA:29:F8:EA:2F:1D:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MK_3UgloSjVGaQYdI9op-OovHV4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:dd:6d:f1:d3:24:c8:6a:25:a4:ed:c7:a3:a0:b6:5f:62:f9:
         89:aa:80:d1:fa:fd:7b:24:9c:3a:e9:70:99:d4:13:12:51:ac:
         60:6e:98:1a:82:56:06:8c:d6:4c:ff:b3:26:d7:b6:a3:94:cf:
         e1:28:c9:a1:22:a9:c7:4a:f2:22:23:30:32:cf:00:a6:e9:94:
         26:0d:8d:3c:f9:ba:e3:84:31:8a:f5:9d:2b:d5:dc:93:b8:56:
         a2:be:07:17:5d:34:61:c4:d4:b8:d6:81:d5:5c:3e:8e:8c:b4:
         d8:22:5a:af:75:6a:fc:84:92:86:1b:9a:00:8c:b0:e8:16:2e:
         c9:aa:96:e5:7d:89:4b:4f:33:04:a9:96:4a:24:af:c0:46:c2:
         c6:cf:3b:78:13:7a:69:2e:78:52:c0:f8:24:f7:a8:87:31:d7:
         f8:47:da:c1:bf:1b:5e:03:89:e5:47:33:1b:27:2e:a6:37:ca:
         ad:5f:75:b9:3c:59:2c:57:7c:de:03:e8:49:05:bb:a1:3f:d0:
         32:ba:d4:6b:d1:a7:f1:be:b8:df:68:78:97:f3:85:6d:a7:50:
         d2:40:01:69:da:23:61:e3:6d:da:6b:51:9f:1d:06:bb:f2:15:
         2b:67:9f:15:cb:6a:ff:c7:8d:27:8f:96:3c:d7:f3:03:ee:51:
         fa:0e:f2:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 15:51:51 2026 by rpki-client