Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft
File:                     MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft (raw, json)
Hash identifier:          ADujRGtoQ2QwHI9P9gvyHug6Ny86Jgap9H11MIPIKFM=
Subject key identifier:   A1:96:64:19:F5:01:18:48:F9:C4:A5:10:10:95:4A:96:EC:83:AC:3C
Authority key identifier: 30:AE:E1:1B:29:43:57:2D:11:BE:CC:42:5C:68:4B:48:BB:B2:CB:D4
Certificate issuer:       /CN=30aee11b2943572d11becc425c684b48bbb2cbd4
Certificate serial:       01A0D502A480D449BCA979DC561D2352BBAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MK7hGylDVy0RvsxCXGhLSLuyy9Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft
Manifest number:          1A6E
Signing time:             Thu 24 Sep 2026 20:01:55 +0000
Manifest this update:     Thu 24 Sep 2026 20:01:55 +0000
Manifest next update:     Fri 25 Sep 2026 20:01:55 +0000
Files and hashes:         1: MK7hGylDVy0RvsxCXGhLSLuyy9Q.crl (hash: 2e15T41iDpwvn/vRc5cCIZmWdreSHZ/1sZjcSYEn9eU=)
                          2: cWWM9ZpSxCOLjBSdEIJNLYZmfIc.roa (hash: /VirzHss1ndnL0VauqeSmTCntzhbwvddkhihXgztiNo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MK7hGylDVy0RvsxCXGhLSLuyy9Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 20:01:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d5:02:a4:80:d4:49:bc:a9:79:dc:56:1d:23:52:bb:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30aee11b2943572d11becc425c684b48bbb2cbd4
        Validity
            Not Before: Sep 24 20:01:55 2026 GMT
            Not After : Sep 25 20:01:55 2026 GMT
        Subject: CN=a1966419f5011848f9c4a51010954a96ec83ac3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5f:e9:75:d9:24:a1:4d:51:97:8d:b1:03:2c:
                    f2:d5:8c:50:f1:82:cf:40:cc:92:17:0c:70:2c:db:
                    28:98:58:02:88:69:0c:17:14:ad:b0:ef:cd:3b:aa:
                    17:0e:94:2f:2b:40:52:78:35:20:84:7e:fa:ff:5f:
                    c5:41:2f:23:cc:12:61:66:77:50:3c:b8:7c:ca:5e:
                    8f:16:6f:cb:0d:87:e2:72:79:b4:7f:38:2e:7b:cf:
                    3e:dc:98:a3:1d:6d:c0:bd:f1:3f:6a:0f:5f:ea:d9:
                    66:00:39:45:9c:1a:db:18:a8:7b:1f:1e:5e:78:ed:
                    1a:46:3e:5c:82:71:10:31:61:78:f5:99:bb:6e:0c:
                    b2:67:4d:15:e2:ba:e8:5b:12:7e:4d:78:fd:7f:1b:
                    1d:06:95:e5:fb:c5:e2:47:b4:a0:4f:15:85:8e:34:
                    f8:cf:a6:26:da:d1:9e:f3:48:03:40:67:ac:b1:8d:
                    1e:a1:fb:f0:2d:95:1b:18:c1:90:fd:ab:ef:be:51:
                    db:32:73:0a:3f:a3:5a:b2:2b:50:b2:23:a4:8b:92:
                    6d:22:bb:1b:77:0f:31:3e:e4:79:19:17:12:22:72:
                    f3:8b:9a:4c:29:8c:41:b0:19:9d:fa:0a:8e:a9:5c:
                    67:81:2e:3b:f2:e4:f7:4c:a8:e3:1a:a4:e5:ac:77:
                    ba:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:96:64:19:F5:01:18:48:F9:C4:A5:10:10:95:4A:96:EC:83:AC:3C
            X509v3 Authority Key Identifier:
                keyid:30:AE:E1:1B:29:43:57:2D:11:BE:CC:42:5C:68:4B:48:BB:B2:CB:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MK7hGylDVy0RvsxCXGhLSLuyy9Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:a9:06:7e:76:cc:ac:5b:22:7c:3f:3d:96:c3:f2:05:cb:a4:
         68:da:61:fb:10:87:73:79:5d:3b:0e:91:80:77:9a:65:0b:3e:
         56:91:4f:74:da:75:7c:1a:71:3e:04:3b:fb:80:8e:7e:d8:0e:
         0b:0f:e3:cc:b4:04:0f:cc:de:e3:ef:ed:6b:c1:07:8f:f1:53:
         5d:65:21:36:02:5e:1d:16:db:57:66:2a:9d:54:e3:86:8d:4a:
         e3:17:c4:2c:bf:6f:34:d2:14:56:c1:6f:2f:0d:7f:ce:4d:13:
         f2:29:d9:3e:32:e2:3f:97:e3:5d:96:17:08:de:69:c3:16:cd:
         26:f7:df:ce:87:d9:93:2a:96:c1:1c:da:f5:88:91:63:86:92:
         1d:3b:8b:50:27:df:17:0e:02:60:7c:0f:4b:68:ae:0d:16:de:
         78:00:e1:a4:e5:9d:52:e9:63:12:72:75:6d:8f:2f:84:5c:be:
         1c:d4:c3:de:18:19:3d:5b:b6:81:b2:8e:bf:7e:36:0a:4e:28:
         0b:95:9a:e8:97:a4:4a:72:77:d5:4f:34:23:cc:7a:99:bf:bf:
         bf:26:06:48:b3:be:ee:0a:dd:5d:c0:d3:67:14:80:de:73:81:
         23:7c:e1:cf:d8:1f:ab:a2:09:0d:e4:fc:0f:ef:6e:d0:80:b1:
         c2:02:da:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:47:08 2026 by rpki-client