Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft
File:                     MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft (raw, json)
Hash identifier:          vuLSjdAgE4B2+3AJT/4IWk6YxJQWVb4bt7GsA77GPtM=
Subject key identifier:   69:E7:7E:0C:08:36:6F:CB:C2:08:F6:53:22:1A:0F:A9:9C:A0:38:54
Authority key identifier: 30:F0:8F:84:0E:31:7E:95:20:5B:A1:34:97:D9:DB:C7:37:7B:9E:57
Certificate issuer:       /CN=30f08f840e317e95205ba13497d9dbc7377b9e57
Certificate serial:       019FA1BBE7AB95CE209DA4463BF122F2EC9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MPCPhA4xfpUgW6E0l9nbxzd7nlc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft
Manifest number:          0A4A
Signing time:             Mon 27 Jul 2026 04:01:14 +0000
Manifest this update:     Mon 27 Jul 2026 04:01:14 +0000
Manifest next update:     Tue 28 Jul 2026 04:01:14 +0000
Files and hashes:         1: MPCPhA4xfpUgW6E0l9nbxzd7nlc.crl (hash: I1IO3bDqgkZZSdJqDs7HeEPUOAcNcYKG8efIrUEUCgw=)
                          2: zlryn4mko1wRxoOR9PxP0fcxrmE.roa (hash: AIH8NLSlPfR8dAuRGSz5mVvImvbLrLk/0uPHSLREnZ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MPCPhA4xfpUgW6E0l9nbxzd7nlc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 04:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:bb:e7:ab:95:ce:20:9d:a4:46:3b:f1:22:f2:ec:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30f08f840e317e95205ba13497d9dbc7377b9e57
        Validity
            Not Before: Jul 27 04:01:14 2026 GMT
            Not After : Jul 28 04:01:14 2026 GMT
        Subject: CN=69e77e0c08366fcbc208f653221a0fa99ca03854
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:4a:af:aa:d2:b0:fe:b4:da:15:e1:e4:49:00:
                    96:2c:a0:c4:8f:ac:c0:81:f0:4c:7f:94:a6:12:64:
                    c8:db:1f:2d:03:a9:45:dd:62:2e:1d:aa:ef:b7:40:
                    17:f2:08:d0:26:16:0a:f8:83:b3:9b:f9:96:29:d8:
                    be:8f:2f:8e:28:51:da:85:f0:52:f3:b6:64:13:98:
                    6c:fe:ee:0f:5e:6e:08:8d:50:2b:67:8a:36:8d:7b:
                    32:c3:af:b2:d7:0d:6d:01:d5:91:40:44:51:5e:7e:
                    a2:ff:6c:0b:79:d2:68:16:16:2f:a7:b1:80:d6:a8:
                    7f:8e:12:e3:ed:a7:63:c6:2e:f2:e9:2b:c4:7d:1b:
                    08:3a:26:a1:72:85:27:c3:4f:df:26:8a:fb:1a:0e:
                    81:57:61:ab:1a:4f:99:16:1a:9b:aa:55:d1:e3:b1:
                    8f:63:96:b2:8a:69:c1:0b:f4:d3:b5:d8:52:0f:70:
                    f6:15:3d:b8:63:1d:48:81:25:37:01:11:61:11:94:
                    63:6d:a6:81:aa:f1:09:55:b1:85:a8:0d:9d:71:6c:
                    12:f7:ca:8d:ad:f2:de:27:de:72:11:de:1c:77:f2:
                    64:f1:31:03:0d:39:66:51:e2:aa:df:65:0d:02:94:
                    1b:06:83:83:0b:9b:74:df:4c:7b:3c:48:14:e4:ff:
                    48:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:E7:7E:0C:08:36:6F:CB:C2:08:F6:53:22:1A:0F:A9:9C:A0:38:54
            X509v3 Authority Key Identifier:
                keyid:30:F0:8F:84:0E:31:7E:95:20:5B:A1:34:97:D9:DB:C7:37:7B:9E:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPCPhA4xfpUgW6E0l9nbxzd7nlc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:c0:59:25:be:8f:f5:52:2d:c6:f3:55:ae:93:1d:53:9b:89:
         dd:7b:fb:00:c7:29:a1:96:e6:3f:3e:7b:c4:0d:f4:eb:00:10:
         21:34:34:41:0e:66:98:b6:68:a8:32:4c:0d:bf:7e:ce:e1:eb:
         f9:09:76:f2:43:37:0b:5d:c5:57:54:1e:0f:db:2b:8b:ea:c3:
         fe:2f:0c:30:26:45:1e:a9:22:99:c1:13:2d:66:82:4b:97:d4:
         60:41:bd:40:8f:60:28:e8:16:8a:ef:a3:79:7e:d4:05:f5:1e:
         a1:15:3b:e9:11:f8:35:db:38:24:2b:2b:05:51:5b:83:89:50:
         6c:b2:66:e8:7c:0e:7f:d3:f4:97:7a:a5:a9:6b:6b:22:4f:0f:
         3d:3f:bf:85:f1:f2:cb:d0:48:91:78:e1:00:00:3a:79:97:9d:
         07:25:19:8b:57:5f:75:ba:0e:a3:19:a2:6a:80:9f:44:25:17:
         78:4a:4a:3e:b5:58:78:31:ed:f4:37:b6:ff:e5:84:fe:43:47:
         aa:f0:0d:fb:d4:73:3b:f2:01:2b:8f:67:eb:be:a4:bb:7b:30:
         aa:d9:c5:51:92:3a:22:21:b9:1a:f9:bd:cb:fe:76:01:55:41:
         d7:ed:6d:00:6d:9b:0f:de:17:93:f7:7f:1c:14:1e:0b:7c:5b:
         a7:2c:91:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:41:42 2026 by rpki-client