Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.mft
File:                     MBlcO7BQWGtfTlAEEYAHxIs06uU.mft (raw, json)
Hash identifier:          NaP5JeMdc2HpKoJ5aEq7FWBcfe3sgJnAoN5SZHc7Yfk=
Subject key identifier:   20:1D:FD:6E:7C:AE:F3:C0:AD:9F:AB:A3:EF:A6:49:F2:37:B7:30:FD
Authority key identifier: 30:19:5C:3B:B0:50:58:6B:5F:4E:50:04:11:80:07:C4:8B:34:EA:E5
Certificate issuer:       /CN=30195c3bb050586b5f4e5004118007c48b34eae5
Certificate serial:       019FF94837C32D5D39BD6A0A4EB18ECF1E18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MBlcO7BQWGtfTlAEEYAHxIs06uU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.mft
Manifest number:          19FC
Signing time:             Thu 13 Aug 2026 04:01:27 +0000
Manifest this update:     Thu 13 Aug 2026 04:01:27 +0000
Manifest next update:     Fri 14 Aug 2026 04:01:27 +0000
Files and hashes:         1: MBlcO7BQWGtfTlAEEYAHxIs06uU.crl (hash: FNC3t3eDFjeHXwfO+qD/VzkK062W/yQiHIzgztsHgyw=)
                          2: qeezGpylFYQWdw5Zzwgz6qTCezQ.roa (hash: 81jQgwS6nCCkT6pNsFrxENxQzb13LmVBgngNENTsUtk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MBlcO7BQWGtfTlAEEYAHxIs06uU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 04:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f9:48:37:c3:2d:5d:39:bd:6a:0a:4e:b1:8e:cf:1e:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30195c3bb050586b5f4e5004118007c48b34eae5
        Validity
            Not Before: Aug 13 04:01:27 2026 GMT
            Not After : Aug 14 04:01:27 2026 GMT
        Subject: CN=201dfd6e7caef3c0ad9faba3efa649f237b730fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:18:65:5e:60:27:e5:62:e2:6b:5d:c5:93:aa:
                    c8:50:a3:7a:54:47:d4:db:39:ab:cb:7f:c5:44:39:
                    5a:3c:2e:ad:15:d5:a1:8d:f7:96:1f:de:b5:0c:b1:
                    b5:60:ac:a2:13:b9:49:99:85:5f:b2:a5:0c:02:ee:
                    a4:46:fb:0f:35:b4:c7:7f:3f:26:54:68:d4:b3:61:
                    51:91:39:67:5e:ec:a0:6d:25:f5:7c:50:53:d6:ef:
                    8b:2c:fd:1d:5b:f9:2d:4c:b9:18:f9:0b:32:03:86:
                    d5:4f:f6:e9:5e:16:53:e6:cc:cd:cd:06:9f:3e:40:
                    41:4e:62:7a:e7:77:6f:1f:d3:b5:25:8a:9f:d7:97:
                    bb:b3:68:67:42:10:ed:5f:98:95:51:86:67:a8:47:
                    28:52:d8:33:c9:e7:73:e9:47:11:40:98:a5:d6:69:
                    d1:9e:fa:a6:c1:98:d0:2c:a5:4a:2d:89:e3:d0:b0:
                    a1:93:ec:ff:c4:a1:ad:a2:a4:e2:e7:96:3f:60:a8:
                    b1:e8:61:6e:d4:4a:27:3c:05:f8:fc:6c:88:85:3f:
                    6a:96:87:77:8e:d5:5f:c7:9e:5a:af:4b:a2:b1:28:
                    ab:03:47:33:e5:18:07:8a:a7:ae:a0:f9:4f:89:1c:
                    cf:96:48:ab:e6:3f:a2:85:e2:a5:d1:98:ba:87:59:
                    ca:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:1D:FD:6E:7C:AE:F3:C0:AD:9F:AB:A3:EF:A6:49:F2:37:B7:30:FD
            X509v3 Authority Key Identifier:
                keyid:30:19:5C:3B:B0:50:58:6B:5F:4E:50:04:11:80:07:C4:8B:34:EA:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBlcO7BQWGtfTlAEEYAHxIs06uU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:78:04:17:8e:c8:c1:67:0f:83:d6:8e:ca:cf:56:5d:a2:7d:
         e6:9a:4e:14:6c:70:1b:f4:3d:a3:45:9f:a8:3f:ec:41:b8:29:
         6a:1f:18:4d:25:51:91:c5:de:d8:89:31:41:3a:1d:51:d1:4b:
         6c:c4:61:fd:6e:bc:24:ab:5e:d4:dd:15:6a:cc:bd:f9:7c:4b:
         9a:e6:be:a1:72:4f:1a:ad:61:66:ae:ff:2f:8e:07:3a:e4:c5:
         5f:1b:e2:69:02:59:f2:b2:fe:10:46:d9:2a:11:b2:db:fa:a5:
         05:db:34:5c:ea:7b:60:f6:4d:87:fd:4f:e5:2a:d7:b4:a2:77:
         5c:bc:42:a2:59:af:fa:ce:f6:30:5a:12:89:6a:2e:2a:96:00:
         38:7b:f4:a4:71:aa:b4:20:01:de:3d:c5:21:df:33:21:60:43:
         5e:5f:26:2e:87:f9:31:f0:30:ee:a8:c1:d7:8d:e0:0a:8a:a7:
         fb:e6:80:cb:bc:c5:d7:e7:ba:04:45:87:36:de:a3:a5:9d:ca:
         fa:2f:88:06:3f:0b:8d:64:b3:8d:9b:85:ea:9b:be:09:1b:b6:
         69:06:8f:0e:1c:82:ce:a6:26:f8:89:70:71:0c:91:1a:d2:b8:
         3b:b9:c2:b1:72:e5:b2:57:2c:87:9c:95:3d:2f:1e:ac:3b:31:
         0b:a6:61:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 11:58:27 2026 by rpki-client