Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft
File:                     MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft (raw, json)
Hash identifier:          dk/1S5qBJ5mOZ5mMG9pw/ycmT9DcNxbXXt4jCQxttes=
Subject key identifier:   21:F1:FC:5D:3E:7B:4D:72:71:3D:39:F7:26:70:9C:07:D4:D9:18:3D
Authority key identifier: 30:F0:8F:84:0E:31:7E:95:20:5B:A1:34:97:D9:DB:C7:37:7B:9E:57
Certificate issuer:       /CN=30f08f840e317e95205ba13497d9dbc7377b9e57
Certificate serial:       019EB80EF954C8EC5C783B307B599A862AED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MPCPhA4xfpUgW6E0l9nbxzd7nlc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft
Manifest number:          09D1
Signing time:             Thu 11 Jun 2026 19:00:49 +0000
Manifest this update:     Thu 11 Jun 2026 19:00:49 +0000
Manifest next update:     Fri 12 Jun 2026 19:00:49 +0000
Files and hashes:         1: MPCPhA4xfpUgW6E0l9nbxzd7nlc.crl (hash: ESTqt1NHuU16t54OIQU1CCNLYSaFTcgB6Rtg1I1sof8=)
                          2: zlryn4mko1wRxoOR9PxP0fcxrmE.roa (hash: AIH8NLSlPfR8dAuRGSz5mVvImvbLrLk/0uPHSLREnZ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MPCPhA4xfpUgW6E0l9nbxzd7nlc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 19:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:0e:f9:54:c8:ec:5c:78:3b:30:7b:59:9a:86:2a:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30f08f840e317e95205ba13497d9dbc7377b9e57
        Validity
            Not Before: Jun 11 19:00:49 2026 GMT
            Not After : Jun 12 19:00:49 2026 GMT
        Subject: CN=21f1fc5d3e7b4d72713d39f726709c07d4d9183d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c5:85:62:08:6f:4e:1b:f4:69:89:96:d0:d4:
                    b8:c9:2c:27:7a:8f:f8:61:a7:0f:f5:9e:aa:3f:7c:
                    18:76:46:dc:a9:ac:77:09:9e:9f:19:4d:8e:e9:2d:
                    96:25:ea:45:4b:fc:e1:78:7e:fc:7c:43:e3:41:3d:
                    a7:ee:00:d5:27:cf:03:12:1a:69:ee:61:45:f4:bb:
                    59:67:3b:01:4b:ae:41:11:cf:be:0b:80:eb:96:bd:
                    7c:08:5e:07:6d:d5:af:d4:37:8b:e4:fb:4f:bf:68:
                    26:da:c1:46:90:d3:51:dd:40:70:97:22:8f:92:67:
                    38:73:71:e1:18:97:92:17:12:56:07:ab:44:45:c7:
                    3a:8c:dc:62:75:c4:20:b8:75:af:38:3b:68:a4:17:
                    9f:46:b9:41:86:20:43:47:83:8a:96:b4:f3:4e:56:
                    e3:92:e9:9a:68:d0:8e:64:de:bc:6a:8f:ef:1a:43:
                    fd:18:af:5a:c5:ec:0d:52:fe:fa:0a:e4:2c:85:47:
                    6e:7b:98:a5:64:3d:75:a8:da:19:53:9d:51:37:4f:
                    4c:10:1b:5b:eb:08:b9:c0:9e:9a:1d:aa:3a:68:6d:
                    ac:ce:af:18:4d:d7:18:e1:ec:f2:98:bc:ad:68:fe:
                    ee:16:99:ca:5e:ad:0e:37:12:1a:25:41:14:19:f4:
                    a5:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:F1:FC:5D:3E:7B:4D:72:71:3D:39:F7:26:70:9C:07:D4:D9:18:3D
            X509v3 Authority Key Identifier:
                keyid:30:F0:8F:84:0E:31:7E:95:20:5B:A1:34:97:D9:DB:C7:37:7B:9E:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPCPhA4xfpUgW6E0l9nbxzd7nlc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:2f:49:6a:9d:c7:3e:87:ce:5f:dd:93:6c:bf:1d:af:48:f5:
         dd:f0:b4:d9:6f:b4:63:da:65:e7:ef:3b:1d:9a:55:85:0e:a0:
         4d:6f:84:b3:b1:fc:53:bc:d4:54:d0:55:72:b6:0f:69:f3:2e:
         6c:03:cb:3b:9c:1e:73:91:bf:7d:28:e2:d0:9c:1d:9b:c4:92:
         7d:70:44:d2:5c:8a:1c:04:36:4f:8e:c5:5d:1d:48:f7:84:a6:
         9d:5f:4d:02:58:49:a0:1a:dc:45:10:29:fd:6a:d3:03:5a:76:
         c3:dd:0d:ea:a3:6c:84:54:f5:b8:fd:b3:fb:58:c3:ef:45:bc:
         81:0d:40:33:6b:31:c9:93:24:fb:24:0e:ad:63:cd:c7:04:8d:
         2a:d7:84:7e:84:90:1e:67:04:e2:fb:4a:a0:37:cb:2d:d4:90:
         b7:b3:e4:5c:a5:87:4b:14:53:00:3d:33:33:31:94:cb:da:00:
         89:26:1b:89:8c:b2:5e:68:f1:f7:b1:c5:6a:08:36:12:a2:91:
         f8:9f:3b:c9:d4:75:a7:77:1a:3a:b5:47:9e:4b:23:2d:f0:2c:
         7f:76:4a:f7:16:5a:e9:90:6f:98:82:b5:c7:3b:98:ff:da:a7:
         a4:12:8c:39:54:b1:f4:f6:b4:a5:d2:19:1e:7d:8c:6e:4f:9e:
         68:ad:7e:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ64DvlUyOxceDswe1mahirtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwZjA4Zjg0MGUzMTdlOTUyMDViYTEzNDk3ZDlkYmM3Mzc3
YjllNTcwHhcNMjYwNjExMTkwMDQ5WhcNMjYwNjEyMTkwMDQ5WjAzMTEwLwYDVQQD
EygyMWYxZmM1ZDNlN2I0ZDcyNzEzZDM5ZjcyNjcwOWMwN2Q0ZDkxODNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycWFYghvThv0aYmW0NS4ySwneo/4
YacP9Z6qP3wYdkbcqax3CZ6fGU2O6S2WJepFS/zheH78fEPjQT2n7gDVJ88DEhpp
7mFF9LtZZzsBS65BEc++C4Drlr18CF4HbdWv1DeL5PtPv2gm2sFGkNNR3UBwlyKP
kmc4c3HhGJeSFxJWB6tERcc6jNxidcQguHWvODtopBefRrlBhiBDR4OKlrTzTlbj
kumaaNCOZN68ao/vGkP9GK9axewNUv76CuQshUdue5ilZD11qNoZU51RN09MEBtb
6wi5wJ6aHao6aG2szq8YTdcY4ezymLytaP7uFpnKXq0ONxIaJUEUGfSlLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCHx/F0+e01ycT059yZwnAfU2Rg9MB8GA1UdIwQY
MBaAFDDwj4QOMX6VIFuhNJfZ28c3e55XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVBDUGhBNHhmcFVnVzZFMGw5bmJ4emQ3bmxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9hZGMwZmUtYTI0Zi00NzM2LWFmYjgt
Nzk2YjM4Nzk2ZjY5LzEvTVBDUGhBNHhmcFVnVzZFMGw5bmJ4emQ3bmxjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9hZGMwZmUtYTI0Zi00NzM2LWFmYjgtNzk2YjM4Nzk2ZjY5
LzEvTVBDUGhBNHhmcFVnVzZFMGw5bmJ4emQ3bmxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWy9Jap3H
PofOX92TbL8dr0j13fC02W+0Y9pl5+87HZpVhQ6gTW+Es7H8U7zUVNBVcrYPafMu
bAPLO5wec5G/fSji0Jwdm8SSfXBE0lyKHAQ2T47FXR1I94SmnV9NAlhJoBrcRRAp
/WrTA1p2w90N6qNshFT1uP2z+1jD70W8gQ1AM2sxyZMk+yQOrWPNxwSNKteEfoSQ
HmcE4vtKoDfLLdSQt7PkXKWHSxRTAD0zMzGUy9oAiSYbiYyyXmjx97HFagg2EqKR
+J87ydR1p3caOrVHnksjLfAsf3ZK9xZa6ZBvmIK1xzuY/9qnpBKMOVSx9Pa0pdIZ
Hn2Mbk+eaK1+zg==
-----END CERTIFICATE-----
Generated at Fri Jun 12 03:39:36 2026 by rpki-client