Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.mft
File:                     MduEfR2x4LLCwlUCIQ_1pxmWehk.mft (raw, json)
Hash identifier:          md3lVYdIfytpoGk9fj2XgCbzN1LMhmHsC9fvYnajck4=
Subject key identifier:   E6:C0:CA:7B:3B:36:76:8A:FB:8B:5C:A9:DA:EE:E8:79:A6:BF:96:6E
Authority key identifier: 31:DB:84:7D:1D:B1:E0:B2:C2:C2:55:02:21:0F:F5:A7:19:96:7A:19
Certificate issuer:       /CN=31db847d1db1e0b2c2c25502210ff5a719967a19
Certificate serial:       01A0298F8ADD8CFA500D73C927074DD2118E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MduEfR2x4LLCwlUCIQ_1pxmWehk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.mft
Manifest number:          129F
Signing time:             Sat 22 Aug 2026 13:01:07 +0000
Manifest this update:     Sat 22 Aug 2026 13:01:07 +0000
Manifest next update:     Sun 23 Aug 2026 13:01:07 +0000
Files and hashes:         1: 0PROOXHWtrqTshebWInvLwz5dVE.roa (hash: kuqhwuodobpmINYueeYw21Gf/m1l+ZCaG7GCFJgXBC4=)
                          2: MduEfR2x4LLCwlUCIQ_1pxmWehk.crl (hash: 5xAsXKUltsVLiMR99s2ooAg5Y075FDyr+ImzD/0Ja80=)
                          3: Pky97jBwdyUgYzg1_AI-qFYMT1o.roa (hash: nbaHUKHv0TZLnVM+2128xVj9F0Kn5xH6nruz/6y8MI8=)
                          4: nge1u5LMthh69_mO6tYKWBjnSBE.roa (hash: qNcn7K4jDXvzhu4do4cfBL/ruII09KDI1rZLPsg+Hug=)
                          5: yCDwwVBWdVeCJB3paV68yEm0bEQ.roa (hash: jb11BCbq+94ZB4w8Ms7QY8fhTLtofYi5pYcgB+s+Sf0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MduEfR2x4LLCwlUCIQ_1pxmWehk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Aug 2026 10:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:29:8f:8a:dd:8c:fa:50:0d:73:c9:27:07:4d:d2:11:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31db847d1db1e0b2c2c25502210ff5a719967a19
        Validity
            Not Before: Aug 22 13:01:07 2026 GMT
            Not After : Aug 23 13:01:07 2026 GMT
        Subject: CN=e6c0ca7b3b36768afb8b5ca9daeee879a6bf966e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:25:3f:57:32:69:f5:0e:fa:be:80:13:3e:63:
                    50:f8:83:bf:f4:c6:80:78:71:a1:01:5b:7a:4a:04:
                    8e:7e:60:05:56:28:05:c3:4c:e1:9f:e2:31:72:c8:
                    76:59:3c:ab:0d:ea:ee:99:6e:e1:18:5e:49:90:69:
                    d5:ba:1e:f6:21:fc:d9:26:3b:5f:c8:b5:34:e8:5c:
                    5f:de:0d:5b:8f:42:6d:f2:8e:0f:a3:99:a8:d3:0c:
                    31:90:fa:3c:eb:83:25:4b:e8:e7:7d:74:22:0e:52:
                    3e:02:57:58:96:69:aa:16:ab:a1:6d:07:72:f2:d9:
                    50:28:e1:52:0b:d2:e6:33:c9:56:ee:77:4e:4d:c1:
                    80:b5:e2:65:7b:b1:c6:40:4a:9d:60:89:03:5b:f6:
                    93:d7:a7:38:57:7b:d1:28:62:50:d3:ec:71:c2:00:
                    df:fe:ec:7c:12:78:fb:4f:8e:a5:ec:e5:d9:65:6a:
                    96:62:58:ef:80:95:52:86:54:0d:0c:cb:f0:9b:e1:
                    0e:85:55:f7:07:ce:6a:5e:f6:be:7e:ad:da:5c:23:
                    3d:fa:af:d1:9b:84:80:ac:39:3f:f6:89:d8:28:f3:
                    fb:94:ea:c8:82:52:b5:0e:9d:3c:02:a3:8b:7b:90:
                    97:40:5d:cc:ed:c8:35:de:9d:e9:24:c0:86:b3:f0:
                    b7:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:C0:CA:7B:3B:36:76:8A:FB:8B:5C:A9:DA:EE:E8:79:A6:BF:96:6E
            X509v3 Authority Key Identifier:
                keyid:31:DB:84:7D:1D:B1:E0:B2:C2:C2:55:02:21:0F:F5:A7:19:96:7A:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MduEfR2x4LLCwlUCIQ_1pxmWehk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:3a:00:65:9b:08:e3:48:54:8e:f8:de:3a:7a:95:04:a3:b2:
         0f:7c:c8:56:6a:53:95:86:bf:db:0d:10:de:af:86:c1:1d:2f:
         98:45:fe:c4:f9:eb:98:f2:7a:5c:46:db:09:91:74:bc:59:77:
         8a:d0:30:ae:a5:39:4c:db:c7:9a:25:d9:3c:e6:d8:80:41:6d:
         68:4a:4f:b6:12:67:38:14:df:df:a0:fa:67:c5:7f:08:2e:60:
         00:11:69:8e:81:98:cb:11:5e:b0:03:b2:4d:6a:27:a7:c8:f2:
         45:a6:58:74:3e:9b:cc:2d:66:bf:d2:35:9b:df:2c:4f:15:39:
         e7:f6:cb:77:40:66:bf:65:cf:38:e2:af:e5:8d:a5:68:e0:ca:
         b8:de:1d:63:fa:b4:a3:b7:e7:b3:95:f0:5a:05:6e:d3:59:fd:
         33:44:48:55:12:4d:b6:d5:5e:c7:b0:94:d0:e5:d6:61:d0:95:
         d2:21:79:b6:5a:24:40:c1:cf:c7:44:07:4c:cc:83:d3:d8:f8:
         cf:76:33:04:8d:85:35:e8:29:d4:04:25:2e:8b:be:da:65:23:
         65:4c:d8:14:b2:d2:cc:18:f5:19:3b:1d:d1:d1:35:8c:76:fd:
         83:64:69:48:df:7d:5e:2f:c0:57:37:e8:b0:8f:1a:d5:c3:64:
         48:86:8b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 19:36:29 2026 by rpki-client