Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.mft
File:                     mfyNwqfBufMroZV_9JLcC6TyYP8.mft (raw, json)
Hash identifier:          bC70HuHLprn5Vz8A97gJxCWIQq4b4PGkbIk7lU4BAjE=
Subject key identifier:   A2:68:22:0E:17:04:9B:91:89:9E:86:13:02:4F:09:A2:73:BB:37:95
Authority key identifier: 99:FC:8D:C2:A7:C1:B9:F3:2B:A1:95:7F:F4:92:DC:0B:A4:F2:60:FF
Certificate issuer:       /CN=99fc8dc2a7c1b9f32ba1957ff492dc0ba4f260ff
Certificate serial:       019EB8EAADCCDAA377529B77BAAAC2BB6C18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mfyNwqfBufMroZV_9JLcC6TyYP8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.mft
Manifest number:          03BF
Signing time:             Thu 11 Jun 2026 23:00:48 +0000
Manifest this update:     Thu 11 Jun 2026 23:00:48 +0000
Manifest next update:     Fri 12 Jun 2026 23:00:48 +0000
Files and hashes:         1: 7iabnlFmeCBBjsLFJN99I8--_-4.roa (hash: XEo4P0carZV4gE6HMO4BcJUELgS7un1lJ1bRLna274A=)
                          2: mfyNwqfBufMroZV_9JLcC6TyYP8.crl (hash: jVD+qscYKLpCfujb992BKHoiD1wzcqTPoL/LqVxDU2Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mfyNwqfBufMroZV_9JLcC6TyYP8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:ea:ad:cc:da:a3:77:52:9b:77:ba:aa:c2:bb:6c:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99fc8dc2a7c1b9f32ba1957ff492dc0ba4f260ff
        Validity
            Not Before: Jun 11 23:00:48 2026 GMT
            Not After : Jun 12 23:00:48 2026 GMT
        Subject: CN=a268220e17049b91899e8613024f09a273bb3795
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:58:51:df:7d:3e:d0:97:dc:3c:bd:94:25:44:
                    91:5c:19:ae:90:23:52:a8:31:5c:53:28:c8:85:57:
                    8f:1d:1c:0f:62:d5:65:31:ef:c2:71:82:b7:8f:a2:
                    4e:37:a1:62:0f:c9:62:47:f5:b6:95:99:03:1e:7f:
                    5a:a1:e4:85:53:d7:ad:18:37:15:56:c4:1a:01:7f:
                    a0:bc:95:5b:0f:47:7d:7a:f1:04:21:fe:ae:6e:f4:
                    17:f4:06:8d:a1:89:d0:e8:33:3d:dd:52:d9:42:50:
                    37:28:7a:74:ac:01:9d:c8:a3:2e:31:20:16:3d:66:
                    3b:41:c7:dc:a9:85:85:08:1a:91:5e:91:d5:a2:6c:
                    7f:5e:2a:b5:35:12:25:63:32:6f:12:60:df:4e:b1:
                    24:76:c4:9d:15:19:fe:b4:7e:c7:74:cd:73:93:e0:
                    bb:21:18:a9:33:a6:f7:54:55:d9:83:b7:69:4b:05:
                    91:9b:b8:a9:fc:1b:9a:10:44:d0:5a:d9:40:f4:e3:
                    1c:00:e3:56:33:c0:f0:28:1b:1b:53:e4:34:fd:0d:
                    45:83:97:f7:b7:4b:ee:6a:49:84:6c:6f:49:60:b3:
                    dd:3d:45:35:4b:70:a9:58:93:01:a1:67:ef:a5:9a:
                    03:4c:e4:1a:3b:b3:bf:f5:0a:b8:50:5b:c5:c4:bd:
                    81:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:68:22:0E:17:04:9B:91:89:9E:86:13:02:4F:09:A2:73:BB:37:95
            X509v3 Authority Key Identifier:
                keyid:99:FC:8D:C2:A7:C1:B9:F3:2B:A1:95:7F:F4:92:DC:0B:A4:F2:60:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfyNwqfBufMroZV_9JLcC6TyYP8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:a5:fc:7b:5b:0c:e1:14:08:a3:75:7a:6b:46:eb:49:85:ec:
         a6:a5:6c:8a:ea:a0:28:fc:17:48:87:0b:0b:69:56:bb:56:e8:
         a7:20:b3:65:b1:2f:ee:5f:18:0f:aa:21:ac:34:b6:c8:33:a9:
         34:32:99:ef:e5:88:56:28:1b:10:09:ab:69:bd:59:b2:13:70:
         80:1b:d1:d4:c3:4a:69:0b:0e:b9:3c:6e:77:c8:a8:0b:9c:a8:
         bf:23:42:e2:c4:76:b0:f1:54:4a:f7:e9:12:c9:69:18:a8:fb:
         19:16:e4:54:be:23:b3:7f:15:a7:04:d6:31:78:2c:f0:71:c2:
         d5:07:85:5e:71:a6:f0:cc:9e:dc:47:df:61:4a:1c:b8:65:7a:
         ac:55:a3:e1:f6:df:8a:cf:4e:8e:1b:28:02:67:cf:63:2a:1a:
         fd:cf:d6:f4:25:d5:cf:60:85:aa:d8:d7:a7:08:6b:6b:3c:d9:
         2f:06:38:4d:07:5a:6b:1c:e9:22:c4:48:47:73:79:d1:cd:f5:
         ad:04:93:0f:84:43:ef:a7:05:4b:ab:18:1f:c7:d3:15:cc:56:
         6b:36:2b:ac:bd:b4:0b:13:2d:e9:24:63:29:0e:69:bd:04:19:
         6c:70:30:47:3b:73:a7:d8:52:18:3d:81:c0:8c:59:3b:3d:98:
         bd:ed:8a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:38:52 2026 by rpki-client