Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/813010-a96f-4510-9dbc-21f7751ca76c/1/mIRVhKyAlMGAa3Om9T5GuaKOgSs.mft
File:                     mIRVhKyAlMGAa3Om9T5GuaKOgSs.mft (raw, json)
Hash identifier:          fbX3IeyJWEKdogrtidc+NgaezF92q/yZOWJF8HTj0jU=
Subject key identifier:   5D:1D:06:15:11:EC:5A:E3:A8:55:EB:9F:C7:1F:86:2D:BA:33:C7:46
Authority key identifier: 98:84:55:84:AC:80:94:C1:80:6B:73:A6:F5:3E:46:B9:A2:8E:81:2B
Certificate issuer:       /CN=98845584ac8094c1806b73a6f53e46b9a28e812b
Certificate serial:       01A0D983931D1B7DCB7BA1613CEBC63AB98F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mIRVhKyAlMGAa3Om9T5GuaKOgSs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/813010-a96f-4510-9dbc-21f7751ca76c/1/mIRVhKyAlMGAa3Om9T5GuaKOgSs.mft
Manifest number:          1A70
Signing time:             Fri 25 Sep 2026 17:01:13 +0000
Manifest this update:     Fri 25 Sep 2026 17:01:13 +0000
Manifest next update:     Sat 26 Sep 2026 17:01:13 +0000
Files and hashes:         1: celudLIkwqQs5BVcabVek4AUA_8.roa (hash: Z6ja4JJYaOm0UOAS7DT4QbK0buCK6md62bjvBxBcr0o=)
                          2: mIRVhKyAlMGAa3Om9T5GuaKOgSs.crl (hash: C6/NuABAPXKL7a8TAAM0jjmmucYfxj9lR12UPJeHgDU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/813010-a96f-4510-9dbc-21f7751ca76c/1/mIRVhKyAlMGAa3Om9T5GuaKOgSs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/813010-a96f-4510-9dbc-21f7751ca76c/1/mIRVhKyAlMGAa3Om9T5GuaKOgSs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mIRVhKyAlMGAa3Om9T5GuaKOgSs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 17:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d9:83:93:1d:1b:7d:cb:7b:a1:61:3c:eb:c6:3a:b9:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98845584ac8094c1806b73a6f53e46b9a28e812b
        Validity
            Not Before: Sep 25 17:01:13 2026 GMT
            Not After : Sep 26 17:01:13 2026 GMT
        Subject: CN=5d1d061511ec5ae3a855eb9fc71f862dba33c746
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2f:26:0e:8e:1e:93:28:b5:07:c1:0b:47:4f:
                    39:78:ec:9f:a1:48:49:e5:18:bf:64:5b:02:c2:42:
                    59:64:21:e6:61:bd:4c:c1:38:6d:0f:02:35:31:4a:
                    89:22:35:e1:cb:63:60:f5:21:7b:b0:7c:bb:e8:00:
                    57:71:17:18:31:96:7c:43:90:93:2b:c0:9c:e3:36:
                    fe:48:12:7f:00:00:77:b3:2d:a0:f9:01:3a:3a:bd:
                    b6:ef:56:1e:6d:f2:d7:8d:e9:7a:0e:1e:c8:05:e9:
                    25:6d:42:54:cc:43:e4:0b:5e:6a:93:7a:41:b7:4b:
                    65:d8:18:55:60:bf:f0:84:6e:80:ea:5d:d1:84:18:
                    28:58:ed:ee:06:fa:f9:28:96:0e:b8:aa:89:62:b9:
                    6a:4b:fb:13:2b:d1:8f:92:d5:ff:a8:1d:79:f7:1e:
                    9b:d4:8a:9f:2c:62:d3:5d:33:8f:74:ee:2e:90:7d:
                    6b:91:d3:65:ed:4b:94:67:49:98:f8:1a:b6:05:f8:
                    88:d2:44:37:49:55:8e:ca:4e:db:c7:91:b4:09:e3:
                    68:1c:7e:b0:c9:a2:9b:8d:84:3e:98:83:ea:62:6d:
                    53:0a:68:67:e1:2a:fb:87:32:49:d1:bd:95:80:da:
                    38:48:c7:26:af:69:44:2f:d3:ce:44:dd:a9:0d:d1:
                    32:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:1D:06:15:11:EC:5A:E3:A8:55:EB:9F:C7:1F:86:2D:BA:33:C7:46
            X509v3 Authority Key Identifier:
                keyid:98:84:55:84:AC:80:94:C1:80:6B:73:A6:F5:3E:46:B9:A2:8E:81:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mIRVhKyAlMGAa3Om9T5GuaKOgSs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/813010-a96f-4510-9dbc-21f7751ca76c/1/mIRVhKyAlMGAa3Om9T5GuaKOgSs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/813010-a96f-4510-9dbc-21f7751ca76c/1/mIRVhKyAlMGAa3Om9T5GuaKOgSs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:f1:4e:3d:0b:6a:4e:07:ab:ea:a7:eb:27:88:6a:08:a7:45:
         04:ae:54:5a:84:e3:f5:87:54:2c:ea:eb:eb:b0:f4:52:43:e2:
         9c:8c:3f:f2:9e:88:89:dd:c2:19:fb:e3:0f:c6:6e:2e:8f:6f:
         8a:97:d8:d1:a9:0c:2a:0d:f1:34:01:a4:9c:cd:cf:47:27:27:
         0e:bb:23:ff:e7:87:33:4b:de:8b:a0:f2:8e:34:ef:93:bd:c7:
         36:d5:81:33:92:46:28:4f:5d:8c:2a:1b:62:38:97:e8:15:17:
         1b:48:f0:1d:21:c3:2e:e3:e0:c0:eb:1e:54:51:4b:d1:b1:8c:
         28:2c:57:d3:a9:49:e7:d8:03:df:e6:70:bd:61:48:b9:fc:26:
         98:e4:1b:da:88:35:33:4f:ef:67:cd:8b:ee:7c:bd:75:71:ef:
         15:3a:63:5a:00:20:d4:dd:e3:0f:42:53:e5:30:38:a3:1e:15:
         5a:ee:f3:98:ec:28:0c:8c:49:0f:95:6c:ad:f5:5f:7c:8b:88:
         8c:a5:ad:34:6f:c2:9e:37:40:05:fb:69:03:7c:f6:31:1e:39:
         a0:8a:52:c8:7e:6d:47:e2:5f:f2:aa:15:04:5c:6e:ce:86:7d:
         c0:2c:33:26:34:13:51:f1:54:5c:42:3a:83:f8:a7:95:c7:d3:
         bb:32:0a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 01:51:48 2026 by rpki-client