Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.mft
File:                     MHLNXfcyOVerh8B_XN0VyR7_yNU.mft (raw, json)
Hash identifier:          LfEJsmamjeg2Agsf+62hi2GEN4yYoTZVM8G6z2COjmc=
Subject key identifier:   77:25:46:F4:F4:75:F4:91:1E:48:99:27:DF:90:D0:92:AD:70:54:01
Authority key identifier: 30:72:CD:5D:F7:32:39:57:AB:87:C0:7F:5C:DD:15:C9:1E:FF:C8:D5
Certificate issuer:       /CN=3072cd5df7323957ab87c07f5cdd15c91effc8d5
Certificate serial:       019E314DEB09B48E3C8D35C7E34A14772B6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MHLNXfcyOVerh8B_XN0VyR7_yNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.mft
Manifest number:          0603
Signing time:             Sat 16 May 2026 15:00:50 +0000
Manifest this update:     Sat 16 May 2026 15:00:50 +0000
Manifest next update:     Sun 17 May 2026 15:00:50 +0000
Files and hashes:         1: 0Lyqz8yeuHKiSV6cZdm-poGCmv4.roa (hash: ihfrAi7s7Y2K9UhMNauXDC1EytsAoBOYF3SMIaVb5Zc=)
                          2: MHLNXfcyOVerh8B_XN0VyR7_yNU.crl (hash: lWqnUFprBw5jt68Zr3yo8awzohP+klz9WXxJCL8+U2o=)
                          3: sdkPwBAzXT8V1hVHIyJeK_vXL5w.roa (hash: 3O67CS2riHupZNulhyVmJc5RtCecgenRYd/XninEIbg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MHLNXfcyOVerh8B_XN0VyR7_yNU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:4d:eb:09:b4:8e:3c:8d:35:c7:e3:4a:14:77:2b:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3072cd5df7323957ab87c07f5cdd15c91effc8d5
        Validity
            Not Before: May 16 15:00:50 2026 GMT
            Not After : May 17 15:00:50 2026 GMT
        Subject: CN=772546f4f475f4911e489927df90d092ad705401
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:43:71:56:7e:4f:1c:af:3b:b5:c8:6d:b1:b5:
                    2c:3b:6a:0a:66:79:fe:71:3d:f7:0f:30:dd:95:07:
                    e3:91:c8:e1:d7:15:fa:fd:49:36:a9:68:05:47:27:
                    26:3b:41:58:f2:23:80:82:86:6a:ef:12:d0:77:17:
                    82:e7:d2:16:3e:1d:25:eb:a7:08:dc:eb:d4:71:95:
                    6e:ef:24:7e:06:43:46:d5:9d:f4:56:af:72:bb:7e:
                    20:85:a5:43:58:0c:5e:7c:ec:60:9f:f3:8b:7e:a2:
                    a5:2e:b3:b0:ee:df:e1:93:11:ce:52:e5:2e:fe:3f:
                    d7:fd:27:34:1e:f1:c9:52:ab:f4:01:dc:ec:56:e5:
                    5c:c4:42:aa:76:04:00:e3:c3:0d:98:d7:c0:bb:f1:
                    7b:7f:e2:7a:74:16:c2:47:39:e3:99:4a:fa:76:39:
                    4b:b1:ac:f2:9e:ea:ee:32:a9:da:4d:bf:4a:26:82:
                    ad:2b:6f:db:ff:b1:44:7c:bf:1b:31:ba:d6:75:b3:
                    a5:5f:d6:17:72:6e:7e:5d:77:0b:c3:00:03:7e:32:
                    e9:b7:87:50:34:eb:04:59:b2:b3:d7:10:ce:21:b2:
                    c8:17:32:87:eb:94:d2:8d:d1:9e:e2:40:34:99:81:
                    3a:ab:ce:3e:d0:34:4c:8b:be:d3:8f:52:43:aa:09:
                    6d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:25:46:F4:F4:75:F4:91:1E:48:99:27:DF:90:D0:92:AD:70:54:01
            X509v3 Authority Key Identifier:
                keyid:30:72:CD:5D:F7:32:39:57:AB:87:C0:7F:5C:DD:15:C9:1E:FF:C8:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHLNXfcyOVerh8B_XN0VyR7_yNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:c6:56:43:45:7a:80:26:7a:8f:10:67:e9:87:20:a7:27:a7:
         96:e1:3f:a5:a0:0d:b2:29:8d:22:e0:14:4c:50:87:5b:52:aa:
         83:16:db:b4:ca:79:a9:f7:be:6c:8c:e7:d4:17:6e:5f:2f:67:
         cc:ad:f9:da:e3:42:d6:7e:43:fc:6f:bf:86:f2:62:f3:34:3c:
         ca:23:3c:22:a2:53:be:08:e2:13:d2:d0:56:30:1a:55:ac:cd:
         c1:ff:a3:03:ce:a8:23:df:a8:32:5c:7a:48:4f:7b:bb:4a:39:
         db:5c:69:ef:a9:5d:48:5d:91:91:38:ca:8b:2f:ec:27:37:4c:
         63:42:53:26:a2:ac:a0:fd:b8:f3:b0:bb:0d:ee:6b:5f:9f:4d:
         f9:dc:01:ac:69:42:7c:e6:da:fe:a7:14:34:6e:68:2d:69:57:
         e9:55:b3:6d:37:09:fe:e4:bb:8e:31:2a:73:e5:98:7b:d2:91:
         63:df:1f:ac:53:46:74:82:a4:1f:a1:55:30:bf:91:35:28:d7:
         64:b9:63:c0:08:83:34:d2:ce:4a:62:4c:b3:32:e2:d1:87:32:
         79:d3:22:97:0a:a8:2f:07:f9:11:80:36:58:b9:f3:b6:f9:be:
         ba:3b:81:ac:bb:ce:a1:d1:45:7f:b3:80:f4:04:99:4b:96:ca:
         7d:73:e1:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 18:47:38 2026 by rpki-client