Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/ccdc8f-285d-43b6-8def-4b39fcabc371/1/MBYKH8YoL1eCp6in6g7SBrlEQSM.mft
File:                     MBYKH8YoL1eCp6in6g7SBrlEQSM.mft (raw, json)
Hash identifier:          kFsFNm48RkKDwAF5/gF9KyS56tAxxXoShC1rEV986I0=
Subject key identifier:   7F:7C:02:05:39:ED:52:F6:4A:76:7B:BE:05:48:5C:EA:A9:E7:8B:BB
Authority key identifier: 30:16:0A:1F:C6:28:2F:57:82:A7:A8:A7:EA:0E:D2:06:B9:44:41:23
Certificate issuer:       /CN=30160a1fc6282f5782a7a8a7ea0ed206b9444123
Certificate serial:       01A01FB0321A18F766BBB8B510A728B1EF1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MBYKH8YoL1eCp6in6g7SBrlEQSM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/ccdc8f-285d-43b6-8def-4b39fcabc371/1/MBYKH8YoL1eCp6in6g7SBrlEQSM.mft
Manifest number:          0960
Signing time:             Thu 20 Aug 2026 15:00:35 +0000
Manifest this update:     Thu 20 Aug 2026 15:00:35 +0000
Manifest next update:     Fri 21 Aug 2026 15:00:35 +0000
Files and hashes:         1: 1SJhyocRudC4i3a4wpxvnXhK1TE.roa (hash: Q8DohD/O4S8CVYT18myTFMGAt4L6+jeYMfQ4zRODCWc=)
                          2: MBYKH8YoL1eCp6in6g7SBrlEQSM.crl (hash: PIfGu0+fioKvHbyb0E29xmi4nDQ+9rLbDL1orI2H/0w=)
                          3: XpKKyExlunDnIgewiAZPtg86MrQ.roa (hash: wS0s5Zz3UFUtCAGlt2SFNPs++jwDVKFp6MczP/XrPT8=)
                          4: yYnjMSBD0N1GdUhW8b3gkCvcBTY.roa (hash: UXD6Z2ZYC62V3GCh/SczjWuD8By0eruoWG1wzac/bwU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/ccdc8f-285d-43b6-8def-4b39fcabc371/1/MBYKH8YoL1eCp6in6g7SBrlEQSM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/ccdc8f-285d-43b6-8def-4b39fcabc371/1/MBYKH8YoL1eCp6in6g7SBrlEQSM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MBYKH8YoL1eCp6in6g7SBrlEQSM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Aug 2026 13:32:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:1f:b0:32:1a:18:f7:66:bb:b8:b5:10:a7:28:b1:ef:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30160a1fc6282f5782a7a8a7ea0ed206b9444123
        Validity
            Not Before: Aug 20 15:00:35 2026 GMT
            Not After : Aug 21 15:00:35 2026 GMT
        Subject: CN=7f7c020539ed52f64a767bbe05485ceaa9e78bbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:84:bf:9b:2b:16:a3:6a:b1:6d:01:1a:98:f4:
                    33:a9:bf:97:28:f4:8f:35:a9:e6:56:2d:29:cb:11:
                    a7:ef:a5:26:bb:a9:0a:b5:4a:4c:40:9c:7e:d5:63:
                    1a:c0:b0:f5:af:ec:b5:79:f1:ed:89:62:44:bb:85:
                    65:e6:dc:93:eb:67:3e:87:20:9b:13:54:85:0e:2d:
                    00:c9:10:78:c0:48:a7:99:8a:85:62:c6:57:8b:54:
                    00:cb:c8:c1:2f:f3:84:69:b4:9a:e2:33:b4:57:68:
                    48:6c:84:3d:39:a1:b7:64:61:d3:ee:88:39:3e:26:
                    80:ef:28:e5:68:1a:b6:6c:4c:76:a2:f4:68:b9:ad:
                    ae:67:f7:1b:78:bd:9f:e3:05:68:ae:aa:f1:6d:63:
                    8b:d3:96:80:2c:8c:18:43:e2:e5:56:dc:08:8e:9e:
                    01:31:3e:3d:ac:b8:5d:b5:77:a6:68:ef:4d:07:52:
                    ff:b8:c2:84:db:57:ca:8e:6a:6f:25:9d:21:a2:f0:
                    e9:f6:8e:fa:bd:21:91:55:5d:5c:db:c8:eb:3f:13:
                    3e:34:46:69:d8:1d:91:eb:59:0a:ed:d1:7b:3c:26:
                    09:14:f9:b4:85:55:63:c3:09:d1:77:2b:50:95:72:
                    82:2a:3a:46:30:3e:b9:1c:42:1b:e9:65:da:02:b7:
                    a6:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:7C:02:05:39:ED:52:F6:4A:76:7B:BE:05:48:5C:EA:A9:E7:8B:BB
            X509v3 Authority Key Identifier:
                keyid:30:16:0A:1F:C6:28:2F:57:82:A7:A8:A7:EA:0E:D2:06:B9:44:41:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBYKH8YoL1eCp6in6g7SBrlEQSM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/ccdc8f-285d-43b6-8def-4b39fcabc371/1/MBYKH8YoL1eCp6in6g7SBrlEQSM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/ccdc8f-285d-43b6-8def-4b39fcabc371/1/MBYKH8YoL1eCp6in6g7SBrlEQSM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:2b:69:9f:ac:7d:6f:46:10:7e:3d:00:b1:83:e9:e4:f2:9c:
         96:70:90:8b:d8:13:d2:26:e6:ad:a1:49:7a:48:09:21:91:d7:
         8e:74:5c:b6:c6:41:57:50:95:54:05:8e:2b:e5:43:e0:2e:cb:
         44:78:43:90:16:9f:b9:0c:a1:25:51:6d:2a:de:1d:40:9e:a2:
         5e:ba:9d:ac:53:31:83:ac:4e:cb:33:ba:74:17:1f:28:53:e1:
         f1:cb:ff:5d:d1:82:71:2e:29:62:59:c1:4d:ea:f5:2f:be:ff:
         de:ad:76:8a:d9:3d:53:d0:fc:b3:d3:30:7f:f4:ea:d5:3a:17:
         28:a8:4a:a0:1a:d9:13:e8:58:4c:e9:a3:cc:a8:1e:9c:4d:47:
         59:73:ec:d1:62:cb:44:c4:87:25:ac:e2:9a:ba:67:d2:8b:ad:
         87:dd:0d:a9:17:40:82:4e:8d:64:2f:4f:3b:42:2d:c0:0a:40:
         dc:ce:c2:0d:55:b2:1b:11:18:65:87:c4:ba:e5:61:69:84:f9:
         f4:cd:95:d0:bc:3f:1f:ee:a6:df:6b:d9:6b:75:e1:dd:c3:23:
         e2:ca:1c:16:73:9e:a5:62:4e:55:a8:80:9b:d2:bf:61:cf:40:
         ad:de:e8:05:15:2b:5f:47:0c:56:af:6c:c1:88:03:38:4b:a3:
         75:59:45:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 23:32:50 2026 by rpki-client