Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/30f34e-e2ad-4b8d-8ce0-011878255ba7/1/MGY7W3BEIyuYmBjRLMkEkCElJN8.mft
File:                     MGY7W3BEIyuYmBjRLMkEkCElJN8.mft (raw, json)
Hash identifier:          dsIUZ4BsBAJMweAfHguXT5JBLTfu5W28kKNECLCib/k=
Subject key identifier:   37:B8:75:9D:E4:3C:40:93:56:32:64:5E:11:4A:91:E2:3B:17:5D:BA
Authority key identifier: 30:66:3B:5B:70:44:23:2B:98:98:18:D1:2C:C9:04:90:21:25:24:DF
Certificate issuer:       /CN=30663b5b7044232b989818d12cc90490212524df
Certificate serial:       019EBA347E21AD369EE977D73DBFA8EA1D20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MGY7W3BEIyuYmBjRLMkEkCElJN8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/30f34e-e2ad-4b8d-8ce0-011878255ba7/1/MGY7W3BEIyuYmBjRLMkEkCElJN8.mft
Manifest number:          046C
Signing time:             Fri 12 Jun 2026 05:01:02 +0000
Manifest this update:     Fri 12 Jun 2026 05:01:02 +0000
Manifest next update:     Sat 13 Jun 2026 05:01:02 +0000
Files and hashes:         1: MGY7W3BEIyuYmBjRLMkEkCElJN8.crl (hash: xcsUTzIhvyw9SerldBrQZbMqanL98YkivJKo+kfkMY8=)
                          2: gyvu9cFnJO4MAwvAgHj8LvBNP7s.roa (hash: eMyRVFCyce/Miwfnx+0dN7toaAvORgqRwSdJr9xSmK8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/30f34e-e2ad-4b8d-8ce0-011878255ba7/1/MGY7W3BEIyuYmBjRLMkEkCElJN8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/30f34e-e2ad-4b8d-8ce0-011878255ba7/1/MGY7W3BEIyuYmBjRLMkEkCElJN8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MGY7W3BEIyuYmBjRLMkEkCElJN8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 05:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:ba:34:7e:21:ad:36:9e:e9:77:d7:3d:bf:a8:ea:1d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30663b5b7044232b989818d12cc90490212524df
        Validity
            Not Before: Jun 12 05:01:02 2026 GMT
            Not After : Jun 13 05:01:02 2026 GMT
        Subject: CN=37b8759de43c40935632645e114a91e23b175dba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:66:c8:fb:5d:63:42:ed:0c:2f:a0:45:4b:26:
                    72:07:81:3c:26:63:f7:23:7f:73:30:12:c9:4d:10:
                    c1:c9:ec:fb:0f:b3:3d:af:53:1e:d4:7e:c1:de:69:
                    11:53:c8:4f:3a:53:e6:1f:a4:34:99:dc:90:ff:e9:
                    55:da:ae:c6:9e:b1:ae:3b:f1:a3:83:3b:f0:41:da:
                    98:38:c0:49:dd:c4:5c:6d:89:f4:ee:23:72:c1:79:
                    28:19:31:e9:f8:7b:b8:65:c3:2a:0d:69:f1:7c:c7:
                    ce:da:cf:3c:b1:df:03:5b:38:9d:38:2a:38:c9:42:
                    04:68:c4:a7:a7:32:c9:97:2c:45:80:c4:9a:d4:50:
                    b2:11:f7:a8:3e:80:86:e5:4d:8c:19:98:a7:e8:a1:
                    c2:b7:3a:f2:51:96:51:a7:10:ad:75:e9:a9:f3:45:
                    b7:c5:40:8f:28:7a:60:45:84:a7:e0:25:ee:d7:ee:
                    4d:32:32:4d:3c:1b:28:9b:a4:63:da:6d:a5:fd:d3:
                    b0:f3:42:9e:a0:dc:f9:f8:ca:1c:66:8b:95:32:63:
                    43:81:72:70:93:25:0d:13:71:92:0b:7d:de:12:1e:
                    d0:1a:f4:3a:6e:fe:66:e9:f3:cc:d7:bf:83:a1:48:
                    b4:9a:f9:bc:a8:6d:e4:ea:6e:8b:5f:27:02:84:51:
                    ab:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:B8:75:9D:E4:3C:40:93:56:32:64:5E:11:4A:91:E2:3B:17:5D:BA
            X509v3 Authority Key Identifier:
                keyid:30:66:3B:5B:70:44:23:2B:98:98:18:D1:2C:C9:04:90:21:25:24:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGY7W3BEIyuYmBjRLMkEkCElJN8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/30f34e-e2ad-4b8d-8ce0-011878255ba7/1/MGY7W3BEIyuYmBjRLMkEkCElJN8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/30f34e-e2ad-4b8d-8ce0-011878255ba7/1/MGY7W3BEIyuYmBjRLMkEkCElJN8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:e7:36:4e:d5:a9:4b:22:af:f7:bd:ca:47:f2:b7:97:42:a1:
         bb:4f:2d:c3:81:6b:71:d7:a4:d5:ae:43:77:d0:19:c8:61:bd:
         ed:4c:c5:93:5a:eb:8e:36:af:b5:d7:30:a5:ab:29:03:e2:8a:
         78:7c:0d:56:7f:dd:2f:43:ba:f3:83:f5:d9:a1:0d:d9:6d:45:
         8f:c9:93:74:6b:a7:db:b1:e2:cb:78:fc:d0:76:e8:fd:6c:0e:
         f2:4d:81:11:0d:12:f7:9f:4a:c3:5d:ec:5d:cf:d8:36:0b:f6:
         b1:58:e4:39:e0:95:68:05:a7:5b:99:b5:11:3d:5f:d7:1b:a0:
         b1:cb:4a:02:7e:47:b3:75:1b:41:86:1f:8a:9d:fc:24:24:f2:
         78:3f:51:1d:c3:0b:e7:64:fd:9c:74:f5:e0:af:70:bc:63:3c:
         f5:1e:38:01:43:40:12:e2:2f:6d:78:c3:11:fe:30:47:f1:70:
         ca:fe:ad:9b:f3:1a:32:c8:1c:1f:d4:89:1b:70:83:79:43:5c:
         e5:df:87:c6:43:4d:0b:a5:aa:76:34:2b:6d:6c:de:a4:a5:14:
         8f:59:dd:75:45:a2:9b:68:2f:9c:65:8e:83:86:07:3d:b6:a4:
         77:32:2e:30:a2:fd:7a:a3:f0:5c:92:26:3e:4d:04:3f:88:b5:
         a9:b6:11:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:28:30 2026 by rpki-client