Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/4f3d1b-8361-411e-a148-8858a559f251/1/mdy98GMqEBYTqPbJRJsp7UXBqHI.mft
File:                     mdy98GMqEBYTqPbJRJsp7UXBqHI.mft (raw, json)
Hash identifier:          p+mcBtpse517dlCPcUCFV8ed98uHNbhveRcVLcHqihY=
Subject key identifier:   84:F0:0F:DB:95:F1:E9:37:CB:4F:7D:54:01:34:8E:C6:DC:D5:BC:3B
Authority key identifier: 99:DC:BD:F0:63:2A:10:16:13:A8:F6:C9:44:9B:29:ED:45:C1:A8:72
Certificate issuer:       /CN=99dcbdf0632a101613a8f6c9449b29ed45c1a872
Certificate serial:       019E9101982F0DCF2ABDE15E44C42452EBF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mdy98GMqEBYTqPbJRJsp7UXBqHI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/4f3d1b-8361-411e-a148-8858a559f251/1/mdy98GMqEBYTqPbJRJsp7UXBqHI.mft
Manifest number:          12EF
Signing time:             Thu 04 Jun 2026 05:01:01 +0000
Manifest this update:     Thu 04 Jun 2026 05:01:01 +0000
Manifest next update:     Fri 05 Jun 2026 05:01:01 +0000
Files and hashes:         1: FJy0GIfk9vV1h7loWKolSJZXo6Y.roa (hash: IuQnK7CmGBa5gJ1tL38YDwQ/LuHmRuUUuO8hQ4PDMgU=)
                          2: ZkvlusQxR0eilq71QTIX3lmLXIA.roa (hash: XZW+wXA4kuyVy7bOsoQa1YVo6hUxFESln/r1+ImNbEc=)
                          3: gl6TR5lqCe0eF2sxfbOEh2xV2Ys.roa (hash: UP0movw74FgBnc/2Abquw52G3rsl7ENPcm+vDD+jqRQ=)
                          4: mdy98GMqEBYTqPbJRJsp7UXBqHI.crl (hash: EAXooumFSx/3aCN5jmRBc536EHsQhICaLb1L24x9Lw0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/4f3d1b-8361-411e-a148-8858a559f251/1/mdy98GMqEBYTqPbJRJsp7UXBqHI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/4f3d1b-8361-411e-a148-8858a559f251/1/mdy98GMqEBYTqPbJRJsp7UXBqHI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mdy98GMqEBYTqPbJRJsp7UXBqHI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 04 Jun 2026 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:91:01:98:2f:0d:cf:2a:bd:e1:5e:44:c4:24:52:eb:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99dcbdf0632a101613a8f6c9449b29ed45c1a872
        Validity
            Not Before: Jun  4 05:01:01 2026 GMT
            Not After : Jun  5 05:01:01 2026 GMT
        Subject: CN=84f00fdb95f1e937cb4f7d5401348ec6dcd5bc3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d3:53:29:45:5b:9f:74:db:1c:3a:75:d5:cb:
                    9b:59:0d:2c:de:71:5f:77:e2:ff:89:5e:a2:98:07:
                    56:da:31:3b:26:fa:80:cf:59:69:19:10:54:bb:e0:
                    21:c8:49:1e:ca:00:50:92:6c:2d:b9:05:3e:ca:7f:
                    bb:46:a7:06:58:b5:4d:64:b1:85:ae:7e:3e:d7:78:
                    c4:1b:5a:3c:cd:86:16:de:c3:dd:41:e5:78:a9:8a:
                    fd:72:65:1d:54:8f:72:ea:be:09:48:ad:81:a0:6d:
                    f2:06:c6:06:a0:c8:10:2c:64:21:e7:7f:9a:ed:ab:
                    f1:fe:3f:8f:b0:fe:e1:f1:a0:38:94:97:ef:40:a5:
                    93:31:9d:64:49:05:35:2d:47:b0:63:44:da:fe:2f:
                    b5:04:29:a1:76:9b:e6:d9:cd:88:74:d4:20:cc:bf:
                    df:6e:fa:f8:a9:5c:d6:44:21:e1:17:93:29:45:4f:
                    f5:bf:18:55:d2:26:17:e2:b9:6d:36:57:bc:5c:f2:
                    00:82:bb:95:52:b9:94:c0:55:1e:2d:7c:e6:25:65:
                    13:00:90:02:75:41:4b:2a:20:bc:7f:80:46:8f:cf:
                    e4:c2:e6:22:34:38:ab:e6:c3:26:49:56:a9:60:cb:
                    bb:65:71:7f:ad:91:b5:82:ee:e6:66:7f:6f:5b:28:
                    ae:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:F0:0F:DB:95:F1:E9:37:CB:4F:7D:54:01:34:8E:C6:DC:D5:BC:3B
            X509v3 Authority Key Identifier:
                keyid:99:DC:BD:F0:63:2A:10:16:13:A8:F6:C9:44:9B:29:ED:45:C1:A8:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdy98GMqEBYTqPbJRJsp7UXBqHI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4f3d1b-8361-411e-a148-8858a559f251/1/mdy98GMqEBYTqPbJRJsp7UXBqHI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4f3d1b-8361-411e-a148-8858a559f251/1/mdy98GMqEBYTqPbJRJsp7UXBqHI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:bc:b5:9c:9d:f4:cd:71:96:f5:20:fe:0c:e3:5d:03:9b:2d:
         cb:80:08:98:cb:a9:82:7b:b6:0e:58:d8:9d:a9:bc:f1:f4:ce:
         a5:c6:68:e0:7b:1d:e9:61:ab:a8:e5:05:cb:bf:f0:2d:91:1f:
         fc:6e:d8:d4:00:0a:6a:23:41:8c:4f:2e:cb:c4:28:00:8f:cd:
         cd:1a:41:3c:0b:83:11:9c:f8:16:0e:84:3f:dc:b4:0a:16:86:
         ad:60:ab:fe:b5:cc:42:3c:e2:2a:52:e5:c5:66:02:4b:87:6a:
         70:1a:f2:80:c4:79:b6:25:db:5b:75:68:eb:de:11:e3:d5:92:
         55:9a:17:dc:22:a3:75:80:a2:2a:a6:c5:8a:f9:08:51:0f:08:
         6a:10:d6:e0:e2:d6:44:6a:14:e6:dc:15:62:ca:51:e4:54:1d:
         9c:ef:92:a6:57:3f:4e:84:63:8b:4f:83:41:ce:fc:63:ab:90:
         fb:d6:4d:8a:59:30:a9:b6:47:2b:35:fc:e5:e5:84:14:ca:fc:
         0b:79:f9:b5:c1:1a:19:50:14:18:ae:01:4b:88:83:1d:a1:f9:
         7c:a7:e0:0d:a5:db:e9:04:7b:9c:fa:33:7b:93:a3:c0:11:db:
         5a:5a:af:fc:55:05:d1:73:3d:31:8d:fd:52:08:82:64:aa:20:
         64:15:11:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:07:41 2026 by rpki-client