Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.mft
File:                     mfa_Doxu_Er_r3JiiEacr_QX3mY.mft (raw, json)
Hash identifier:          dY0u1v1F3TKEvxNLmoOgA801SXxgHs4tuszByIrgmrE=
Subject key identifier:   8B:A3:FA:89:C0:33:4E:02:0E:81:C7:FD:ED:FE:97:D8:AD:A2:93:1E
Authority key identifier: 99:F6:BF:0E:8C:6E:FC:4A:FF:AF:72:62:88:46:9C:AF:F4:17:DE:66
Certificate issuer:       /CN=99f6bf0e8c6efc4affaf726288469caff417de66
Certificate serial:       019E995FCD37B438AD1426821947672CB231
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mfa_Doxu_Er_r3JiiEacr_QX3mY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.mft
Manifest number:          01FD
Signing time:             Fri 05 Jun 2026 20:00:52 +0000
Manifest this update:     Fri 05 Jun 2026 20:00:52 +0000
Manifest next update:     Sat 06 Jun 2026 20:00:52 +0000
Files and hashes:         1: Nl_yi1QXIQ5ForZSQarCyISI-8I.asa (hash: AajCKSsGi9WnrBsDdmR9RQ3tCTGoQ7cdjbFClS/xtCA=)
                          2: mfa_Doxu_Er_r3JiiEacr_QX3mY.crl (hash: 5G8UFnDceHJW9IkgEYlHPSQGJSVDuWTM6w4GtiuB2TA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mfa_Doxu_Er_r3JiiEacr_QX3mY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Jun 2026 20:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:99:5f:cd:37:b4:38:ad:14:26:82:19:47:67:2c:b2:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99f6bf0e8c6efc4affaf726288469caff417de66
        Validity
            Not Before: Jun  5 20:00:52 2026 GMT
            Not After : Jun  6 20:00:52 2026 GMT
        Subject: CN=8ba3fa89c0334e020e81c7fdedfe97d8ada2931e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:91:29:5d:d1:32:b1:31:b9:f5:98:04:3f:64:
                    76:9a:1e:3f:34:10:67:59:ab:86:82:02:77:57:86:
                    8b:69:34:62:88:06:d0:5a:1e:2a:0a:b0:ae:2c:c0:
                    b5:d8:38:58:c9:b4:b3:53:1f:d0:c7:17:9b:5d:3d:
                    89:e4:55:5f:eb:93:8f:b5:eb:ff:1f:f5:a8:d8:55:
                    b6:af:f4:53:52:2e:76:03:53:e0:0b:1d:73:f8:3f:
                    4c:dd:7b:d2:b8:ff:f6:9d:9f:20:d9:73:44:9a:46:
                    f6:19:07:3e:53:db:21:8b:af:28:5e:c5:35:2f:a3:
                    c5:9b:cd:63:f7:29:66:94:c3:34:3d:6a:65:73:14:
                    49:ee:06:fb:65:00:5a:21:18:fa:e1:c0:ba:b1:47:
                    8c:af:ea:71:f6:1b:10:40:a8:c6:20:23:f7:94:68:
                    28:b1:84:8c:d4:54:9a:81:52:8b:ac:e9:51:a4:4c:
                    ff:d6:f4:06:38:c9:69:50:48:68:0c:00:5b:a3:21:
                    60:7d:6a:a2:d3:2f:26:42:98:26:35:10:fa:31:6e:
                    bb:d2:42:71:86:32:7c:91:91:6c:31:eb:c0:fd:04:
                    65:53:01:22:c7:82:3e:7e:2c:32:80:a9:ab:4a:40:
                    18:71:09:f6:cd:4a:ac:5c:7f:d1:08:70:a9:6f:05:
                    99:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:A3:FA:89:C0:33:4E:02:0E:81:C7:FD:ED:FE:97:D8:AD:A2:93:1E
            X509v3 Authority Key Identifier:
                keyid:99:F6:BF:0E:8C:6E:FC:4A:FF:AF:72:62:88:46:9C:AF:F4:17:DE:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfa_Doxu_Er_r3JiiEacr_QX3mY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:b2:9c:93:9d:23:02:da:54:d7:cd:5b:66:59:82:ca:77:88:
         51:b8:1a:01:73:a9:39:f1:e1:3f:e6:ef:1e:4f:1f:56:69:d1:
         cb:d3:59:62:bb:a0:26:40:bc:b2:5b:6c:2f:b4:36:d3:2c:b2:
         bb:6b:3d:ea:cd:92:1c:47:6b:38:11:3c:80:66:f4:07:6b:88:
         a7:8e:ac:81:f3:59:a6:7b:56:04:f4:90:c3:34:19:5e:57:01:
         ba:8c:7a:36:7d:fe:65:f4:2c:67:a2:c1:ac:3b:02:58:09:10:
         41:93:b8:70:dd:d7:11:37:29:ff:2e:35:0c:92:e8:5c:ba:f9:
         81:99:50:d0:9e:70:49:ca:00:55:ee:44:53:13:e4:42:ca:1b:
         fb:d1:ca:bd:c5:93:d3:c1:97:51:e5:6f:b6:43:07:4c:25:62:
         9a:5e:c2:95:1b:54:8b:13:97:5e:69:c1:7c:0d:98:58:c7:25:
         d0:7c:a2:aa:57:a6:b8:7d:5c:d5:3a:26:23:50:8c:01:65:b1:
         ef:d2:39:e7:38:c2:5e:03:30:a6:13:a6:ad:57:69:47:b6:92:
         20:dd:26:5c:61:24:13:62:ec:72:6c:e8:14:55:f6:cd:19:df:
         cb:85:e3:bd:d5:c2:aa:00:37:e2:c4:5b:a1:aa:a6:29:e2:fa:
         94:bd:19:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 07:01:26 2026 by rpki-client