Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.mft
File:                     M0-fg9LXTAwP0A2nNVePc33X2gM.mft (raw, json)
Hash identifier:          NLuZ2cijGsGKXleFTcOZIsmbbdFaCWe9f7hFsIir5r8=
Subject key identifier:   07:F2:88:D0:97:06:A2:DA:58:2D:82:97:92:C2:FB:87:3A:A4:77:23
Authority key identifier: 33:4F:9F:83:D2:D7:4C:0C:0F:D0:0D:A7:35:57:8F:73:7D:D7:DA:03
Certificate issuer:       /CN=334f9f83d2d74c0c0fd00da735578f737dd7da03
Certificate serial:       019E2A707A912135CB9D8B717FFD8E5441D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M0-fg9LXTAwP0A2nNVePc33X2gM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.mft
Manifest number:          063A
Signing time:             Fri 15 May 2026 07:01:14 +0000
Manifest this update:     Fri 15 May 2026 07:01:14 +0000
Manifest next update:     Sat 16 May 2026 07:01:14 +0000
Files and hashes:         1: 7nAXiiWwMrKC__gT-hUF2XA-Iso.roa (hash: vcK2N0Exej7cew/p43KdNyk4JPLcOKiM3s2+QDUjk38=)
                          2: M0-fg9LXTAwP0A2nNVePc33X2gM.crl (hash: Vd8fab1XUsYH0mVX/eZbHKnkrkG+ePXI/NwH58CH+Ds=)
                          3: WqDS95-He-yk3t24qKJI-_SLkPk.roa (hash: CpUmTzZjgX7L+EURvDrJ6FpyIH+66F1QJtHPFgkqtLs=)
                          4: cgOqu4SdNiUsyvVgRsWy2IiSrRk.roa (hash: iyZz+ne5RBNmhJL+kkuEkW2psKX2xrbIym9fdJ+TVi0=)
                          5: faLPN_S_WjaTJHL5obkgUoA9YU0.roa (hash: 9SARb7qgti8Rdi1ymT3uP+n1nUwS+BiJv6V79V4Y0rI=)
                          6: tkxYbwLzW57rtbTL3HAb4gik620.roa (hash: gE/XZLF/hHQla0+c26dZTm+olAmW2YqbYW49t6axXdU=)
                          7: v0CmFjYdCus3aQO-8m8_ZmwT2WU.roa (hash: gPHxfBPLjS7r3KK8sjMCL/yxvco773JImBamks13aRg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M0-fg9LXTAwP0A2nNVePc33X2gM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 07:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2a:70:7a:91:21:35:cb:9d:8b:71:7f:fd:8e:54:41:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=334f9f83d2d74c0c0fd00da735578f737dd7da03
        Validity
            Not Before: May 15 07:01:14 2026 GMT
            Not After : May 16 07:01:14 2026 GMT
        Subject: CN=07f288d09706a2da582d829792c2fb873aa47723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:fd:54:da:02:5d:95:ef:be:01:31:a8:c8:89:
                    bb:4d:04:13:ca:28:51:5e:17:79:8d:eb:52:55:eb:
                    17:8a:3e:7f:c4:d7:cd:79:c7:c2:24:84:e6:0f:37:
                    34:d3:ca:db:c8:31:72:de:f7:b8:0b:b6:cf:5e:4d:
                    e7:ef:b1:ba:ef:c8:77:b5:6a:b5:75:fe:c7:5b:32:
                    9b:31:4d:94:f3:c3:49:be:dc:91:22:50:5c:23:dd:
                    42:e8:dc:90:ca:aa:81:56:48:92:74:81:4a:ed:99:
                    d2:93:2a:d3:d5:00:ad:07:05:40:f2:a3:ca:ed:fd:
                    c1:26:bd:78:d6:27:1f:75:1f:62:14:aa:1e:16:bf:
                    1e:1b:8d:3e:06:5b:9b:cc:8b:bf:aa:60:87:e1:c8:
                    35:d6:e4:67:37:12:d4:ec:29:8d:20:b4:9b:cb:90:
                    1e:fb:19:78:05:c7:3c:c0:f6:50:8a:23:c3:23:da:
                    c4:7a:28:24:4d:af:af:db:a3:cc:72:27:66:5a:6b:
                    b1:c1:a3:b2:67:72:62:74:a7:c0:a1:85:5d:14:7d:
                    86:c3:d2:26:eb:fc:2c:ee:de:ed:07:73:88:07:32:
                    78:1e:5f:81:7f:3e:96:0b:a2:8d:e6:ed:f1:95:fc:
                    8e:03:19:1f:47:9a:6c:b0:73:4d:df:b2:b0:e2:d2:
                    4a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:F2:88:D0:97:06:A2:DA:58:2D:82:97:92:C2:FB:87:3A:A4:77:23
            X509v3 Authority Key Identifier:
                keyid:33:4F:9F:83:D2:D7:4C:0C:0F:D0:0D:A7:35:57:8F:73:7D:D7:DA:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0-fg9LXTAwP0A2nNVePc33X2gM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:17:97:36:01:84:c6:d3:a7:d4:0c:bd:6a:65:aa:24:0a:ca:
         c2:e2:5b:06:dd:7f:b3:cc:d5:06:f9:d7:91:b8:9c:de:1c:d6:
         dd:ec:a6:a3:d6:88:d7:cb:cc:a7:91:64:06:94:43:8d:f6:ed:
         00:1e:5d:a4:b3:14:47:c2:bb:38:25:36:09:52:89:fb:8d:85:
         40:38:72:9f:70:60:dd:bd:5e:75:5d:d4:26:5d:3a:35:52:92:
         0d:8e:0e:1e:00:99:1b:00:95:12:5b:ad:14:be:cc:4b:c6:9b:
         15:f8:07:6c:84:3b:e3:7e:82:07:a8:d9:21:27:3f:76:a4:3c:
         b8:ba:f4:58:7c:d4:4a:89:c7:8b:13:bd:de:fb:32:ad:d0:a6:
         0c:35:5e:5b:97:63:c9:5a:a8:e0:54:73:2c:d9:a5:f3:ba:85:
         00:b1:d3:d3:9f:e9:53:14:ac:af:8e:2d:89:0d:ed:84:b3:d6:
         c4:a1:93:36:f4:2b:31:da:49:e7:85:b1:09:61:73:fc:7f:b6:
         c0:81:c3:3f:e6:95:33:7e:d3:ca:e4:51:4a:e8:c7:23:df:c1:
         ce:a6:2e:08:cf:ce:ee:0d:b8:8f:86:69:2b:3a:9e:bc:24:2b:
         56:3b:6c:d9:85:a4:d9:45:90:c3:48:a7:0f:3b:df:45:27:7d:
         78:82:d5:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 17:54:06 2026 by rpki-client