Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.mft
File:                     MlNiVLPnSQBnW8br1QroJYKLmnY.mft (raw, json)
Hash identifier:          QofE4jEmfoRqS7m83QcSElezimW6RG6eHvp8rAx1IvE=
Subject key identifier:   80:0A:99:03:2D:B9:3F:C1:8B:A4:CD:AF:8F:D5:DB:1B:41:EE:60:FF
Authority key identifier: 32:53:62:54:B3:E7:49:00:67:5B:C6:EB:D5:0A:E8:25:82:8B:9A:76
Certificate issuer:       /CN=32536254b3e74900675bc6ebd50ae825828b9a76
Certificate serial:       019E886C129687EBA1A795C93D1E0E7E9461
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MlNiVLPnSQBnW8br1QroJYKLmnY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.mft
Manifest number:          193D
Signing time:             Tue 02 Jun 2026 13:00:44 +0000
Manifest this update:     Tue 02 Jun 2026 13:00:44 +0000
Manifest next update:     Wed 03 Jun 2026 13:00:44 +0000
Files and hashes:         1: Ez_pZH7L8lMe256HqBWIeLgG1hs.roa (hash: JvfD5mizMy+PavivGm6Zb/1ENtcMHSO0OABQppwDyDM=)
                          2: MlNiVLPnSQBnW8br1QroJYKLmnY.crl (hash: jQV5Fub/FHa9/MXI7i0NuJBHNmH2u42VWknd1NYOuIo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MlNiVLPnSQBnW8br1QroJYKLmnY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 Jun 2026 13:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:88:6c:12:96:87:eb:a1:a7:95:c9:3d:1e:0e:7e:94:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32536254b3e74900675bc6ebd50ae825828b9a76
        Validity
            Not Before: Jun  2 13:00:44 2026 GMT
            Not After : Jun  3 13:00:44 2026 GMT
        Subject: CN=800a99032db93fc18ba4cdaf8fd5db1b41ee60ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b2:14:56:4e:71:ef:cc:3c:f5:a1:80:14:e0:
                    a7:e1:6e:9f:3f:74:46:40:43:5a:b8:db:04:f6:cd:
                    2e:1d:c3:de:e1:a1:5b:de:34:15:3f:f4:34:2a:75:
                    d0:2d:4a:12:0e:04:31:6d:37:4c:59:c9:e6:d4:e3:
                    b7:99:02:09:7b:16:b4:90:de:eb:9f:b7:09:78:48:
                    c7:83:89:a1:54:0b:c9:9b:d5:d4:c6:5c:9a:17:e2:
                    2e:d3:13:ad:6d:18:70:11:4a:e7:22:8f:22:d6:96:
                    db:34:b5:8d:a2:5a:67:92:ee:dc:fb:24:d8:01:f9:
                    24:74:32:1e:bd:d1:a0:e3:4f:01:ed:fa:a2:8e:08:
                    96:62:f4:71:d0:a2:2d:cc:bb:2a:28:52:91:d6:9b:
                    a3:fa:cd:b6:af:62:58:b9:1f:a0:1f:4b:13:a6:97:
                    35:f8:92:e7:af:1c:5e:ee:fe:b6:9e:5c:ae:6c:89:
                    c4:3f:77:b6:11:d8:cc:78:dd:ec:33:68:7a:3f:67:
                    cd:3a:40:9e:e8:41:d7:db:29:29:79:f0:a0:46:d9:
                    1a:eb:c8:c0:7f:c5:51:23:8c:8c:35:a3:f1:41:75:
                    3a:26:d9:57:45:be:01:ac:c5:5d:24:43:91:1c:b0:
                    19:5f:24:93:a6:d8:ef:c5:04:40:ec:40:00:dd:89:
                    c1:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:0A:99:03:2D:B9:3F:C1:8B:A4:CD:AF:8F:D5:DB:1B:41:EE:60:FF
            X509v3 Authority Key Identifier:
                keyid:32:53:62:54:B3:E7:49:00:67:5B:C6:EB:D5:0A:E8:25:82:8B:9A:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlNiVLPnSQBnW8br1QroJYKLmnY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:bc:3c:2c:4b:67:96:71:85:42:80:65:d7:f3:d4:1a:0d:04:
         f7:53:6c:8c:06:33:c4:37:6d:16:0d:05:4c:a4:41:b3:64:b1:
         cb:8e:4a:4f:a3:e0:df:10:dd:ff:02:91:65:2d:1b:59:c2:9d:
         7b:12:5d:90:b9:c7:66:b5:d8:58:53:c6:5a:20:f2:ec:b8:47:
         b2:48:3a:f5:23:00:8b:97:29:ee:92:59:5c:01:06:ad:df:42:
         ea:8f:1d:ce:86:14:1f:fa:dc:67:cb:9a:dd:e2:cd:ff:44:43:
         48:10:c6:43:7b:b2:0e:fe:cf:f4:4e:4a:61:4d:70:9a:65:d1:
         f4:47:96:d0:83:40:f2:30:bc:2b:ca:0d:e4:af:a9:bb:84:23:
         e9:05:36:2e:41:fa:ee:84:77:60:2e:06:75:3e:50:4e:f0:df:
         37:43:d1:5f:9f:0b:4d:21:0e:2f:23:93:7d:e8:ef:aa:90:db:
         90:22:00:fa:da:2e:d3:dc:a4:ee:29:cf:e3:6f:7a:be:55:71:
         81:e7:28:7a:8b:8b:e3:85:d6:05:82:73:82:9a:04:51:34:e8:
         18:4c:b4:25:31:14:79:2d:9a:60:1a:64:b2:dd:c1:7a:d9:a0:
         2b:e8:61:14:4b:9d:33:c3:a7:2a:e2:ce:ab:7c:aa:54:67:e1:
         50:b6:f9:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:58:32 2026 by rpki-client