Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.mft
File:                     M41C-7P0P1bduHguZUkKI9hbcuE.mft (raw, json)
Hash identifier:          d2RfgLHbwHYaaKq+h2n1DoJGbQYAWCii5eeaOWQY0+I=
Subject key identifier:   2F:C0:6A:D1:81:A4:10:DB:B4:77:FB:94:B9:EB:D7:0E:6F:F8:6C:82
Authority key identifier: 33:8D:42:FB:B3:F4:3F:56:DD:B8:78:2E:65:49:0A:23:D8:5B:72:E1
Certificate issuer:       /CN=338d42fbb3f43f56ddb8782e65490a23d85b72e1
Certificate serial:       019F3897DC3900B9253AC186E6325CF7394C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M41C-7P0P1bduHguZUkKI9hbcuE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.mft
Manifest number:          0E15
Signing time:             Mon 06 Jul 2026 18:01:44 +0000
Manifest this update:     Mon 06 Jul 2026 18:01:44 +0000
Manifest next update:     Tue 07 Jul 2026 18:01:44 +0000
Files and hashes:         1: 1EuhVKsVw5uoAe1_WgbtKc856tQ.roa (hash: 91jJhXvalSRHITuPYha5bt1vLrQQuYCZQo48j45dFVg=)
                          2: M41C-7P0P1bduHguZUkKI9hbcuE.crl (hash: aZtQUcW4Y2ts2CmlmZxc98iP7oPG2W5T6sGi7siKHpg=)
                          3: Rg6PbbInPrmmUh3N22EeHzxOYn0.roa (hash: LEJHR9iD1d51yema4X3NSGFZJp50Z/6oaRBU+4pvUIg=)
                          4: Vb5LUMN_f-rlqzMX4GkNymfjZAc.roa (hash: xNINsOBY8pk7iexk7ULkbW+iYBp08xHS+Bw7bc6Aavk=)
                          5: uiTCPMJO6WqLGnhBcOzk3vGNCRI.roa (hash: /uSluzarRD7hzKeftDLlUNqVrK3dUPCuVWYOJEdnTrg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M41C-7P0P1bduHguZUkKI9hbcuE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 Jul 2026 14:46:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:38:97:dc:39:00:b9:25:3a:c1:86:e6:32:5c:f7:39:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=338d42fbb3f43f56ddb8782e65490a23d85b72e1
        Validity
            Not Before: Jul  6 18:01:44 2026 GMT
            Not After : Jul  7 18:01:44 2026 GMT
        Subject: CN=2fc06ad181a410dbb477fb94b9ebd70e6ff86c82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:39:ee:eb:df:29:64:2d:01:af:f9:1f:9e:23:
                    0c:bb:21:02:93:68:46:c9:38:94:8d:41:57:4f:e3:
                    d9:78:da:43:ee:e0:00:e1:2f:1b:28:da:70:12:38:
                    13:ba:45:e3:df:36:13:cd:fb:0f:9e:e7:bc:ea:bf:
                    06:00:b0:65:8d:98:19:d7:0f:f4:25:82:a5:3a:b4:
                    de:42:11:8e:3f:5a:7a:58:7d:14:f6:d2:16:7c:39:
                    ea:68:7a:94:ae:3d:30:53:98:19:3d:67:1b:d6:92:
                    20:f8:b1:1e:b0:aa:61:2d:1b:39:e4:88:1d:15:18:
                    11:31:10:79:89:ce:11:ae:16:95:44:b0:70:4d:4e:
                    4d:fa:38:54:cb:52:53:8c:79:13:6f:d1:93:cf:ba:
                    17:d0:77:23:3a:89:94:f0:fe:3c:db:dc:61:24:a3:
                    14:6d:d9:5d:89:d5:69:6c:44:b1:a7:a2:33:03:fd:
                    3d:7c:22:31:40:8a:a4:ec:57:21:e8:1d:ad:0d:5b:
                    9b:ec:9e:f5:9e:3a:f0:91:d8:9f:26:a0:6b:66:12:
                    d5:65:e2:45:1b:8f:b7:dc:49:10:a2:c0:12:53:b7:
                    c7:a0:4b:90:08:52:f0:f6:ae:d8:52:a8:b7:10:07:
                    22:c2:1e:d5:7a:c3:70:35:25:83:a1:c4:43:65:d6:
                    9f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:C0:6A:D1:81:A4:10:DB:B4:77:FB:94:B9:EB:D7:0E:6F:F8:6C:82
            X509v3 Authority Key Identifier:
                keyid:33:8D:42:FB:B3:F4:3F:56:DD:B8:78:2E:65:49:0A:23:D8:5B:72:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M41C-7P0P1bduHguZUkKI9hbcuE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:24:cc:3a:71:c6:52:ce:56:bb:c6:71:73:c0:0f:b5:ad:a8:
         d8:87:49:c2:4a:93:70:7f:c3:e0:59:83:64:2b:da:d8:86:77:
         15:1f:dc:56:e2:05:85:76:e6:09:01:1d:72:af:70:0a:ea:0a:
         04:dd:2e:f5:9c:f1:bf:15:32:33:f8:a7:fd:64:e7:4d:fd:8b:
         07:f8:a1:8c:df:c6:b0:3a:2e:09:21:b7:15:3b:b8:77:6a:05:
         c5:28:86:54:70:0f:49:1b:ed:0e:a7:97:f1:a9:b9:57:96:2f:
         86:94:7a:26:70:44:b3:44:22:fd:5a:97:07:2d:95:15:23:a6:
         13:4c:ab:e2:e0:b6:0b:04:cf:e7:40:86:36:f0:71:17:5d:57:
         67:9a:ba:59:af:1b:2b:0a:a6:92:33:f6:fd:e3:0c:f8:c0:55:
         4d:f7:06:17:2a:ee:82:d3:59:d4:2a:85:43:cb:21:6d:61:ac:
         81:07:3a:c1:5c:30:48:e7:ed:9b:2e:f1:ad:63:f4:c2:28:c5:
         5c:a4:2f:69:7f:3d:05:b8:16:d3:a2:f4:cd:37:cb:03:84:e6:
         fc:83:35:99:4a:9f:97:2d:e7:d7:5c:1f:8d:e7:e3:0f:e8:35:
         50:f7:64:18:02:73:65:81:37:83:84:58:47:aa:86:e9:9b:c8:
         d9:9c:a5:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ84l9w5ALklOsGG5jJc9zlMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzOGQ0MmZiYjNmNDNmNTZkZGI4NzgyZTY1NDkwYTIzZDg1
YjcyZTEwHhcNMjYwNzA2MTgwMTQ0WhcNMjYwNzA3MTgwMTQ0WjAzMTEwLwYDVQQD
EygyZmMwNmFkMTgxYTQxMGRiYjQ3N2ZiOTRiOWViZDcwZTZmZjg2YzgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Tnu698pZC0Br/kfniMMuyECk2hG
yTiUjUFXT+PZeNpD7uAA4S8bKNpwEjgTukXj3zYTzfsPnue86r8GALBljZgZ1w/0
JYKlOrTeQhGOP1p6WH0U9tIWfDnqaHqUrj0wU5gZPWcb1pIg+LEesKphLRs55Igd
FRgRMRB5ic4RrhaVRLBwTU5N+jhUy1JTjHkTb9GTz7oX0HcjOomU8P4829xhJKMU
bdldidVpbESxp6IzA/09fCIxQIqk7Fch6B2tDVub7J71njrwkdifJqBrZhLVZeJF
G4+33EkQosASU7fHoEuQCFLw9q7YUqi3EAciwh7VesNwNSWDocRDZdaf7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC/AatGBpBDbtHf7lLnr1w5v+GyCMB8GA1UdIwQY
MBaAFDONQvuz9D9W3bh4LmVJCiPYW3LhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTQxQy03UDBQMWJkdUhndVpVa0tJOWhiY3VFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi85MTY2YjgtNWU1NC00NThkLTliMzIt
NTU3YTdkMTFlMmFlLzEvTTQxQy03UDBQMWJkdUhndVpVa0tJOWhiY3VFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi85MTY2YjgtNWU1NC00NThkLTliMzItNTU3YTdkMTFlMmFl
LzEvTTQxQy03UDBQMWJkdUhndVpVa0tJOWhiY3VFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkyTMOnHG
Us5Wu8Zxc8APta2o2IdJwkqTcH/D4FmDZCva2IZ3FR/cVuIFhXbmCQEdcq9wCuoK
BN0u9ZzxvxUyM/in/WTnTf2LB/ihjN/GsDouCSG3FTu4d2oFxSiGVHAPSRvtDqeX
8am5V5YvhpR6JnBEs0Qi/VqXBy2VFSOmE0yr4uC2CwTP50CGNvBxF11XZ5q6Wa8b
KwqmkjP2/eMM+MBVTfcGFyrugtNZ1CqFQ8shbWGsgQc6wVwwSOftmy7xrWP0wijF
XKQvaX89BbgW06L0zTfLA4Tm/IM1mUqfly3n11wfjefjD+g1UPdkGAJzZYE3g4RY
R6qG6ZvI2ZylHw==
-----END CERTIFICATE-----
Generated at Mon Jul 6 19:15:14 2026 by rpki-client