Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.mft
File:                     mxl1igh4doFtwZNh6vHpQS3nP4Y.mft (raw, json)
Hash identifier:          OqQOkpP22bXWo+zZoIejFPy5YQlFVKhJDlTQ1zYl4RY=
Subject key identifier:   3E:CF:FB:58:61:76:43:8B:D2:E3:A9:E0:CF:84:EF:AB:87:40:FB:25
Authority key identifier: 9B:19:75:8A:08:78:76:81:6D:C1:93:61:EA:F1:E9:41:2D:E7:3F:86
Certificate issuer:       /CN=9b19758a087876816dc19361eaf1e9412de73f86
Certificate serial:       019FA0046B65B8A26D92003BBD9313EA16FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mxl1igh4doFtwZNh6vHpQS3nP4Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.mft
Manifest number:          0A82
Signing time:             Sun 26 Jul 2026 20:01:11 +0000
Manifest this update:     Sun 26 Jul 2026 20:01:11 +0000
Manifest next update:     Mon 27 Jul 2026 20:01:11 +0000
Files and hashes:         1: 4YRS6EEeuTI9ZfzO53iKNIfSN4s.roa (hash: Tv3HULU0Zra1BolAPc2Q/gu/Km7IonOCAUA8ZpZ63Jo=)
                          2: _RoC_RNXE3s_SWdnfBHgPoNrU2M.roa (hash: wPRRqYY5EWMxD0w+AF1woDBkV71SkgmmKkudFef6WP0=)
                          3: _no2T5wGNnY26JGUD4kdd2oqfik.roa (hash: cAZL1uQQoGuptZEdg5D0yO2UPDl/TjYUL4Qg8BJ2wIg=)
                          4: kt9wkvMfUjDBISQAMhIZ_H3acrA.roa (hash: 2eym/C1FIDZNxIwzhAk1LB/uLTJl3u4Wtgxo8cZEAdo=)
                          5: mxl1igh4doFtwZNh6vHpQS3nP4Y.crl (hash: 9Ww+Mteqkit3nFAb2v3FyB3IGfjcM7ZIU8164BUJOs4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mxl1igh4doFtwZNh6vHpQS3nP4Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 20:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:04:6b:65:b8:a2:6d:92:00:3b:bd:93:13:ea:16:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b19758a087876816dc19361eaf1e9412de73f86
        Validity
            Not Before: Jul 26 20:01:11 2026 GMT
            Not After : Jul 27 20:01:11 2026 GMT
        Subject: CN=3ecffb586176438bd2e3a9e0cf84efab8740fb25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:56:da:16:10:11:f9:ac:a6:73:39:a4:63:5e:
                    3a:c6:5e:bb:a1:48:1a:0c:ca:dd:91:e7:b6:cc:4b:
                    1e:b9:b7:61:03:a3:63:11:13:3c:04:83:0a:94:0f:
                    ac:2c:39:85:68:31:da:27:42:40:f2:bf:18:f3:e2:
                    ea:e0:79:e2:9c:c6:9c:93:8a:b1:4b:76:7b:2f:5d:
                    31:65:86:eb:93:89:31:7d:18:8d:1f:da:82:c7:9c:
                    9d:76:07:7c:40:a2:11:e9:e6:50:35:9f:d8:cb:d0:
                    a6:35:3d:f6:a0:b5:00:20:d9:8a:9b:7c:85:7e:2a:
                    85:66:a3:15:a4:32:97:ee:99:ac:0c:4e:c7:01:3e:
                    17:d1:d4:5c:86:e2:77:24:3c:97:1c:1e:d5:e0:40:
                    96:b1:e3:ec:42:e7:fc:ed:08:c5:16:93:7d:f0:f4:
                    6c:0b:de:47:6b:c0:cc:4d:ab:ad:ab:52:68:ff:46:
                    5f:0d:0a:ae:2d:2f:25:68:1a:41:d2:55:05:57:89:
                    55:83:59:49:c3:b7:a3:df:c5:11:2f:7a:a5:12:5d:
                    3c:fa:0a:80:20:b1:f0:86:6c:6d:61:64:b7:a6:3a:
                    10:8b:a3:63:f8:e7:b9:19:ce:46:41:c4:4d:03:08:
                    8f:91:90:f5:50:24:a7:f0:0c:68:65:6d:b1:33:3c:
                    a1:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:CF:FB:58:61:76:43:8B:D2:E3:A9:E0:CF:84:EF:AB:87:40:FB:25
            X509v3 Authority Key Identifier:
                keyid:9B:19:75:8A:08:78:76:81:6D:C1:93:61:EA:F1:E9:41:2D:E7:3F:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mxl1igh4doFtwZNh6vHpQS3nP4Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:d7:62:5d:d2:3c:da:cd:a3:ed:d3:9a:9e:d9:94:a2:2a:48:
         76:eb:ac:fb:2a:3b:b3:04:68:6e:1e:2a:fd:2b:a2:5a:77:1a:
         17:a7:45:ce:11:06:28:77:ef:d8:60:b6:61:05:86:81:80:ab:
         45:40:c3:5f:41:a0:29:30:66:0f:cf:0d:4a:da:d5:f3:2b:c1:
         a6:db:5d:55:83:51:d8:8e:66:e1:3c:5f:59:4f:41:e4:9a:da:
         4f:81:9a:15:1e:7f:f7:b1:b4:3f:6e:24:8d:6b:8c:71:d7:5c:
         fd:4b:47:8e:c3:41:0d:91:f8:40:00:99:a3:30:96:fa:1a:cf:
         58:7d:99:b4:f6:a3:17:05:38:d3:8c:f3:a6:05:32:c8:30:d1:
         0b:f9:3f:e2:99:cc:27:e4:d3:02:e1:b6:d9:28:af:1c:7a:95:
         71:ee:31:60:13:db:fb:ec:5c:17:b1:64:bb:7b:3d:ae:5e:b4:
         61:1a:88:13:ef:46:77:15:86:23:e4:5c:a4:3d:66:b5:af:97:
         cd:b8:43:03:de:b1:5a:d4:2e:1b:6d:96:9e:62:93:48:e9:10:
         e1:ea:56:ab:ac:3e:13:4b:e6:2a:46:4d:0d:e0:5c:e4:fa:7d:
         ea:0c:5a:17:df:6e:5b:aa:6a:50:d1:47:75:cf:91:c9:24:83:
         93:f4:59:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:47:09 2026 by rpki-client