Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.mft
File:                     MlNiVLPnSQBnW8br1QroJYKLmnY.mft (raw, json)
Hash identifier:          +RrBin0EMF4qYKMGyrarwmvHca+/UAwMgeEhvpkvvQQ=
Subject key identifier:   7E:76:DB:4E:1A:65:C9:D6:01:4A:D4:3A:EA:FF:49:0E:C0:17:9E:8B
Authority key identifier: 32:53:62:54:B3:E7:49:00:67:5B:C6:EB:D5:0A:E8:25:82:8B:9A:76
Certificate issuer:       /CN=32536254b3e74900675bc6ebd50ae825828b9a76
Certificate serial:       019F72189D94FF0FFD4F07CD4255D6D43BAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MlNiVLPnSQBnW8br1QroJYKLmnY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.mft
Manifest number:          19B6
Signing time:             Fri 17 Jul 2026 22:00:43 +0000
Manifest this update:     Fri 17 Jul 2026 22:00:43 +0000
Manifest next update:     Sat 18 Jul 2026 22:00:43 +0000
Files and hashes:         1: Ez_pZH7L8lMe256HqBWIeLgG1hs.roa (hash: JvfD5mizMy+PavivGm6Zb/1ENtcMHSO0OABQppwDyDM=)
                          2: MlNiVLPnSQBnW8br1QroJYKLmnY.crl (hash: nq/K8l1Tle9orW12QtPbkeg2mEJi/XoiVs0C5Z0n/dg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MlNiVLPnSQBnW8br1QroJYKLmnY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:72:18:9d:94:ff:0f:fd:4f:07:cd:42:55:d6:d4:3b:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32536254b3e74900675bc6ebd50ae825828b9a76
        Validity
            Not Before: Jul 17 22:00:43 2026 GMT
            Not After : Jul 18 22:00:43 2026 GMT
        Subject: CN=7e76db4e1a65c9d6014ad43aeaff490ec0179e8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:de:dc:3b:a2:c5:aa:55:ff:f4:d0:eb:f4:ab:
                    7a:d7:88:3d:ad:6f:40:7a:44:6f:ab:5c:66:76:75:
                    cc:87:d5:f6:e4:c4:4b:46:d1:98:1a:8e:71:60:37:
                    c1:bf:eb:d6:69:74:90:12:c8:22:c1:4c:08:32:71:
                    5c:4c:8a:25:8b:04:5e:cd:25:37:47:b8:b2:00:8c:
                    21:d0:5d:69:18:39:df:9c:d7:d9:e1:5e:5e:c1:e5:
                    b8:30:c5:38:91:45:ae:e9:a5:03:60:c6:a7:33:2f:
                    90:96:f3:ba:9c:6b:6c:d3:a2:79:00:86:60:4c:6a:
                    07:e8:e3:6c:05:3b:4f:f4:be:34:2a:f8:34:56:fb:
                    2e:50:f8:14:c5:f8:56:9f:5c:2e:0d:1a:57:17:c2:
                    a0:5f:dd:12:fc:a6:c8:98:d2:ae:cd:4b:be:4f:d9:
                    5e:ff:92:c3:69:75:73:4f:67:01:2c:37:af:a9:e1:
                    5c:11:2c:4b:11:ea:e9:bd:d7:6e:0a:61:63:fb:b4:
                    e7:66:ae:76:32:50:9f:2a:82:be:44:74:e7:95:0b:
                    45:27:cb:25:6e:40:51:0f:4f:16:f4:a8:1c:07:86:
                    fe:b9:f3:80:cc:2f:82:6b:40:a7:1e:80:65:70:34:
                    ec:0f:23:89:de:b4:de:50:28:0e:56:71:01:a8:81:
                    33:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:76:DB:4E:1A:65:C9:D6:01:4A:D4:3A:EA:FF:49:0E:C0:17:9E:8B
            X509v3 Authority Key Identifier:
                keyid:32:53:62:54:B3:E7:49:00:67:5B:C6:EB:D5:0A:E8:25:82:8B:9A:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlNiVLPnSQBnW8br1QroJYKLmnY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:10:23:46:98:ec:a5:38:8d:20:19:09:51:ca:6d:75:3d:de:
         e1:e9:ca:a3:f8:00:e1:26:5a:d1:70:46:9d:30:38:40:2d:ad:
         84:0b:0e:fa:7a:7d:eb:d5:0c:35:ee:94:37:31:b0:cb:43:c5:
         99:8e:29:be:cf:17:15:ba:85:3d:36:d3:1c:b9:f7:58:ad:6b:
         f6:16:4c:50:75:64:67:3c:b7:42:11:6d:a7:65:8f:25:83:0d:
         7f:99:f3:21:a3:a7:3f:59:c1:20:b8:c1:95:e1:90:d6:b6:90:
         4e:2b:d6:d4:9e:92:a3:03:1b:f5:b0:b6:f3:29:32:4b:a2:f7:
         88:74:66:48:b6:6d:ed:bd:ac:44:63:91:8f:19:b8:8c:ff:4b:
         45:27:49:20:2d:19:d5:b0:00:9c:a1:46:cc:3d:ae:57:10:b8:
         09:03:64:b5:e2:22:d2:9e:7b:49:bf:34:e7:fd:7b:74:51:99:
         67:c9:50:5a:3d:6b:48:2b:e5:fb:50:2a:c2:80:3a:5f:29:8f:
         f9:85:4f:63:2c:20:9e:09:61:73:9c:52:54:f3:8e:88:72:8a:
         d7:3a:1c:5f:58:63:ba:76:c7:62:e2:b1:f9:8a:40:31:2b:9d:
         3b:c6:e6:e5:f4:52:08:e6:0b:10:f1:a6:a5:15:be:f2:17:ff:
         37:2f:dd:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:57:13 2026 by rpki-client