Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft
File:                     MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft (raw, json)
Hash identifier:          AKZUQOd01+OB2jM+8O3yBod5FLD+CYB9JeQ97t2E4PA=
Subject key identifier:   D1:D4:99:74:21:32:AC:7C:7F:AB:DF:D6:9B:78:22:68:62:EC:41:2F
Authority key identifier: 30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2
Certificate issuer:       /CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2
Certificate serial:       019E2AA74D3303F8E475D17A4091BC2E8E00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft
Manifest number:          1915
Signing time:             Fri 15 May 2026 08:01:07 +0000
Manifest this update:     Fri 15 May 2026 08:01:07 +0000
Manifest next update:     Sat 16 May 2026 08:01:07 +0000
Files and hashes:         1: Ab10LIDLRTF0PMThWTZR2XKCPUo.roa (hash: gOUOA7HUeObMo1sz87FojtFMHZKh1H5YBLGoqzYYHas=)
                          2: MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl (hash: vjOaybgrr75e57dKNdX1eplrTM1R1YWXICPt7E4s2pQ=)
                          3: WKvQQ0vKtpL43A08LcaBXTbj1kM.roa (hash: PRKu/DhDcwlsm5Jxqp2u00fHvQbqCeG7Bd2bm+dr5Ag=)
                          4: WYkkzBha-wTT67Gvhww1_FOg7QM.roa (hash: S1GPXGttTr/+ACoT1bs3TKRF2XPsfPAL0AORzGoCF9M=)
                          5: fvQ2Upwlm_BTPZuG-yhDHTrdS3A.roa (hash: W2tlzy8p7bFGP6in7P36ocCzYFzrqqDwRCFH7LaoTu4=)
                          6: hatB16DXDw0_Vm1ySuNMj5Y6auw.roa (hash: hVNkkdPmq+q7XousYHRGOebUzbj6zgU5nS/86C8jF9A=)
                          7: icFgcPIuVEwDXoSkl0ySM_0s_10.roa (hash: m6BnteEoReQBu4GAYUMJxfQIRVgJC4sSvXHdkUa3NjE=)
                          8: jbAWSXDnSzSUbGDEXT56Cj_H7fU.roa (hash: vtEwLtfqW4qkmELJWjSf6WMsJC95aJI8yky7ZJEN78k=)
                          9: lWZWuIJZ3q5_hVt6znDikSoBR3M.roa (hash: y85mPvpTXgrTdx2E8ZlH0eaEQJTPz5/4CbPHnZc0y/0=)
                          10: lg-xaQ_5kMXRgUe1cfTquL-sxEk.roa (hash: DrSW8pSYEFjTMNFurufTgFjckkn7K2mmqSF0WbWEz10=)
                          11: vJQ8eWA9gitpdTEogU6FKIxSf4M.roa (hash: c/auuaX6uZTawydsm3NxKIP9OAI41TsWcjh2cXjpviE=)
                          12: vuBbsDJkWmoNnQMaSnTKljEK9f4.roa (hash: v05fmL1UJXoi2B7sFB3rnj4EDXcUe8R7u6fgG/Bd6XI=)
                          13: zVexCvkSNXzSQ_4jRtVV_rcjPGE.roa (hash: how96F3OMhXkq8E95kXfSQSmzCi80yeTXVsw9qWAjXo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2a:a7:4d:33:03:f8:e4:75:d1:7a:40:91:bc:2e:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2
        Validity
            Not Before: May 15 08:01:07 2026 GMT
            Not After : May 16 08:01:07 2026 GMT
        Subject: CN=d1d499742132ac7c7fabdfd69b78226862ec412f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:85:c3:4c:48:db:04:e9:93:3c:da:91:a3:db:
                    11:70:44:d6:f1:78:a9:9a:54:aa:7b:96:d2:0b:cd:
                    15:4f:5d:d7:0a:9b:7b:17:da:20:99:48:94:ff:51:
                    d9:06:6b:5a:c9:21:01:31:ac:a7:f6:ce:28:0a:ab:
                    2b:5f:57:1a:f7:39:15:d3:d7:67:7a:13:c0:e0:fc:
                    75:aa:eb:f2:14:a9:3c:e2:20:cf:7f:30:b8:75:35:
                    7d:1e:46:73:38:68:6d:e7:c0:87:da:f9:ac:1f:87:
                    4a:df:30:8c:d2:c6:26:2c:06:de:7a:02:65:c5:fd:
                    e7:dd:f6:ac:4e:04:f7:cf:80:ee:77:cd:fd:4a:6c:
                    b0:a0:30:18:d4:59:c4:22:9b:f8:27:c2:3e:c3:27:
                    71:e1:36:03:86:64:e7:62:e9:b7:5f:5d:65:c1:13:
                    09:28:d6:2f:7a:d7:5f:3f:80:32:a0:1d:08:c8:d4:
                    85:d4:f5:75:22:0b:e2:6f:21:58:1e:75:3d:fe:43:
                    54:2e:b3:53:94:a6:d6:1b:b8:39:2f:be:1b:11:44:
                    cd:5c:05:0e:7e:60:e1:a3:44:ab:5f:2c:9d:67:aa:
                    1c:ca:b6:3b:49:82:6a:c4:77:d9:4b:ef:91:0c:0c:
                    e2:43:5b:c1:6d:83:b0:3e:d3:8b:8b:c8:9f:c1:30:
                    9e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:D4:99:74:21:32:AC:7C:7F:AB:DF:D6:9B:78:22:68:62:EC:41:2F
            X509v3 Authority Key Identifier:
                keyid:30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:53:af:ad:0d:6f:df:d3:c3:f6:7e:1e:84:77:d2:6c:0f:6e:
         52:c5:af:03:34:76:ae:c9:64:2a:b0:c2:ab:d3:8f:ed:91:14:
         84:99:a5:26:54:d8:ef:e0:26:ce:2d:71:e0:db:39:3c:a5:85:
         24:eb:ca:a3:a4:f5:0b:4a:e7:d0:bf:0d:d0:c8:d0:9b:72:8b:
         46:d8:f4:1b:c9:09:1a:f0:03:cf:f6:22:9d:1d:bb:62:7f:90:
         c8:40:d4:b4:68:3f:2c:06:03:dc:91:cf:33:7f:4e:97:e1:56:
         b4:8b:d0:20:29:2f:81:21:88:9e:15:87:7d:d8:42:db:20:35:
         42:9a:11:27:aa:9a:cd:f0:89:63:c1:24:53:ef:30:25:66:0e:
         ab:51:56:2a:aa:07:70:e8:62:53:cb:60:58:51:4c:3f:35:f0:
         e3:ef:97:cf:d5:1b:3a:b2:de:29:b1:01:2a:96:90:4d:f4:41:
         1c:f4:42:70:86:f6:14:b7:32:6a:6c:ee:2c:99:fa:d2:68:c0:
         fc:20:5d:02:3e:f0:62:04:ab:62:6d:e4:c8:31:f8:72:db:cd:
         b9:28:c0:e9:de:64:31:03:17:74:f3:f6:2d:bb:a5:0a:aa:48:
         f0:71:a8:e2:e9:fd:1d:63:9e:8c:35:f9:1b:19:99:46:b4:0e:
         b0:26:a3:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 12:43:31 2026 by rpki-client