Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/202900-3d72-405b-9ef6-6cd4c980a523/1/MaPabQ-v0n0Bt0cDuznYwRXoZBI.mft
File:                     MaPabQ-v0n0Bt0cDuznYwRXoZBI.mft (raw, json)
Hash identifier:          12ueuLXizIlCiW68aYZ/P2Wm6JA4J017xRBzs4/EWfo=
Subject key identifier:   E7:6A:F7:2E:24:DC:83:1E:FA:72:DB:56:B7:96:67:E4:8A:47:5C:91
Authority key identifier: 31:A3:DA:6D:0F:AF:D2:7D:01:B7:47:03:BB:39:D8:C1:15:E8:64:12
Certificate issuer:       /CN=31a3da6d0fafd27d01b74703bb39d8c115e86412
Certificate serial:       019F1453C1276EFC31A4D03BC8264C342FBC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MaPabQ-v0n0Bt0cDuznYwRXoZBI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/202900-3d72-405b-9ef6-6cd4c980a523/1/MaPabQ-v0n0Bt0cDuznYwRXoZBI.mft
Manifest number:          1989
Signing time:             Mon 29 Jun 2026 17:01:00 +0000
Manifest this update:     Mon 29 Jun 2026 17:01:00 +0000
Manifest next update:     Tue 30 Jun 2026 17:01:00 +0000
Files and hashes:         1: 1-AVCAB_7S_CGrmsmZqjImcetyEU.roa (hash: ZkfFCnJ4IN+ntpRZqUiZF7RppYdIxD8L7GOXgt1rvRU=)
                          2: MaPabQ-v0n0Bt0cDuznYwRXoZBI.crl (hash: uAeorcLZPlCymSwBHq2oiEKRPZNe4nKo1Elfit2a6s0=)
                          3: wFuqW6msN0kbkAs1_IHbuTFtJj8.roa (hash: keq3V+WI+dRgJ5+JrQDb7IIH69NYYU/hx4T5Q6L/+2U=)
                          4: yRDMJGx-2GOrcEH30wFFKGZCdPA.roa (hash: Tdm1FI7VRfmVUcdj4wIjT6OXG1i4pNvLZPk/s1uHJi8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/202900-3d72-405b-9ef6-6cd4c980a523/1/MaPabQ-v0n0Bt0cDuznYwRXoZBI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/202900-3d72-405b-9ef6-6cd4c980a523/1/MaPabQ-v0n0Bt0cDuznYwRXoZBI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MaPabQ-v0n0Bt0cDuznYwRXoZBI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 14:12:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:14:53:c1:27:6e:fc:31:a4:d0:3b:c8:26:4c:34:2f:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31a3da6d0fafd27d01b74703bb39d8c115e86412
        Validity
            Not Before: Jun 29 17:01:00 2026 GMT
            Not After : Jun 30 17:01:00 2026 GMT
        Subject: CN=e76af72e24dc831efa72db56b79667e48a475c91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:b8:90:e8:93:73:70:88:84:b0:7a:c4:3a:a3:
                    49:2b:b1:1d:d0:ab:77:74:be:71:58:6b:31:16:95:
                    22:56:7a:20:db:f2:15:a0:8d:e7:9e:17:29:c6:bb:
                    15:33:3c:c9:30:da:3b:02:83:d5:e2:c4:20:ad:77:
                    33:ad:61:41:ed:6b:8e:12:7e:75:cd:98:4a:65:ca:
                    32:04:4b:89:d9:50:f7:42:fa:15:c2:f2:6c:1f:02:
                    53:88:b9:e9:25:c5:e3:76:f4:c9:9a:f2:50:17:0f:
                    42:68:57:4c:ae:35:ed:00:2f:26:b1:c8:7a:ca:91:
                    5c:c1:42:72:38:ff:64:64:77:fc:b4:b1:7d:e5:09:
                    75:7c:3d:f3:7f:ba:84:1c:f0:fc:13:3e:18:09:29:
                    ea:d8:23:47:98:40:22:a6:7c:42:94:24:fc:46:29:
                    fa:ad:47:ea:3a:4b:c3:7a:bb:32:b0:2b:1b:75:9f:
                    24:a8:7b:76:45:09:ab:a2:7f:74:2f:3c:51:67:38:
                    49:2e:15:2c:55:fb:dd:6c:42:fe:5c:b6:91:80:08:
                    61:53:20:91:39:91:8f:96:f7:84:dd:43:a8:c1:c5:
                    02:57:82:b0:b9:34:e4:fd:ec:78:ad:ce:99:84:bc:
                    be:62:54:a5:57:bf:e5:80:e1:60:86:e8:8c:52:62:
                    72:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:6A:F7:2E:24:DC:83:1E:FA:72:DB:56:B7:96:67:E4:8A:47:5C:91
            X509v3 Authority Key Identifier:
                keyid:31:A3:DA:6D:0F:AF:D2:7D:01:B7:47:03:BB:39:D8:C1:15:E8:64:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MaPabQ-v0n0Bt0cDuznYwRXoZBI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/202900-3d72-405b-9ef6-6cd4c980a523/1/MaPabQ-v0n0Bt0cDuznYwRXoZBI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/202900-3d72-405b-9ef6-6cd4c980a523/1/MaPabQ-v0n0Bt0cDuznYwRXoZBI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:2b:61:02:22:1d:de:86:62:79:7b:95:e7:8f:18:52:a4:ea:
         a2:f3:a3:f5:92:31:36:6f:7c:35:47:5f:74:81:d7:7a:fb:ea:
         fc:13:9f:d2:10:c8:3e:5c:59:8f:2d:3e:aa:87:6d:22:05:8d:
         18:ff:ad:be:c7:8e:21:46:52:3d:3b:13:91:f6:85:c8:b5:9c:
         87:b8:ab:84:48:bf:ad:aa:60:45:79:a5:f5:28:75:37:a1:0d:
         f0:75:bf:33:f2:25:92:b7:aa:4c:81:2f:33:11:38:ea:71:55:
         56:e0:3b:a2:b9:05:56:7b:4e:df:92:86:4b:48:11:2a:3e:ca:
         15:88:1f:39:6b:53:f1:37:d2:f2:26:c2:e4:f7:52:ec:b2:af:
         e7:98:a3:3d:31:95:2a:f4:4e:48:15:1f:f1:d7:9d:f3:e3:59:
         34:c2:07:ce:82:d1:ec:99:69:8f:69:2c:84:8b:48:47:f0:31:
         2b:53:1e:88:75:4c:e2:10:49:48:68:ae:ef:ef:e5:2c:b0:0b:
         c8:96:a0:88:b3:dc:0c:20:19:49:7c:08:2b:db:42:d7:cd:9c:
         01:6f:3f:90:0b:cf:78:6a:c2:a3:d9:57:7e:40:d7:fe:ef:e0:
         fc:71:25:6b:c9:1c:43:0a:bd:b5:78:16:c3:e3:97:e2:f5:71:
         12:ac:28:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 19:02:00 2026 by rpki-client