Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/50edf1-ccaa-4d3a-86d9-4dd2441c2cb2/1/m_RXG73K1sGXqwWraa_s_yq0M94.mft
File:                     m_RXG73K1sGXqwWraa_s_yq0M94.mft (raw, json)
Hash identifier:          hnlQBuCcljlBpDOaCmPLZBfbfO3IYyV9cpvBAs4xeoI=
Subject key identifier:   18:0F:B2:50:40:3B:BF:4F:F5:84:12:06:08:EC:58:B7:75:AF:98:0D
Authority key identifier: 9B:F4:57:1B:BD:CA:D6:C1:97:AB:05:AB:69:AF:EC:FF:2A:B4:33:DE
Certificate issuer:       /CN=9bf4571bbdcad6c197ab05ab69afecff2ab433de
Certificate serial:       01A0D34AE000C15F91C5E582C43F63940051
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m_RXG73K1sGXqwWraa_s_yq0M94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/50edf1-ccaa-4d3a-86d9-4dd2441c2cb2/1/m_RXG73K1sGXqwWraa_s_yq0M94.mft
Manifest number:          7F
Signing time:             Thu 24 Sep 2026 12:01:34 +0000
Manifest this update:     Thu 24 Sep 2026 12:01:34 +0000
Manifest next update:     Fri 25 Sep 2026 12:01:34 +0000
Files and hashes:         1: 2W10fbTAd8yGwEuKaeH7ybl8CDc.asa (hash: rzKp0oJWkHk92yLQerR5K/0WpCTmrJTmvjZ7huqWfKg=)
                          2: m_RXG73K1sGXqwWraa_s_yq0M94.crl (hash: YYE0eU7Vp/sTaKYOtdmmYEK7rvutX/Q2gO1oaqivWgE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/50edf1-ccaa-4d3a-86d9-4dd2441c2cb2/1/m_RXG73K1sGXqwWraa_s_yq0M94.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/50edf1-ccaa-4d3a-86d9-4dd2441c2cb2/1/m_RXG73K1sGXqwWraa_s_yq0M94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m_RXG73K1sGXqwWraa_s_yq0M94.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 08:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d3:4a:e0:00:c1:5f:91:c5:e5:82:c4:3f:63:94:00:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bf4571bbdcad6c197ab05ab69afecff2ab433de
        Validity
            Not Before: Sep 24 12:01:34 2026 GMT
            Not After : Sep 25 12:01:34 2026 GMT
        Subject: CN=180fb250403bbf4ff584120608ec58b775af980d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:8a:10:f7:8c:81:e3:59:ea:e8:13:05:93:af:
                    89:12:3c:a6:1f:a8:7c:f5:f6:f4:3d:51:ea:d4:00:
                    35:7e:82:97:c3:4f:b9:80:1b:3f:92:6c:03:4d:60:
                    aa:5b:13:03:74:15:6e:cb:7f:47:81:44:61:9f:42:
                    8d:28:5c:94:ea:93:c2:66:63:94:cf:12:03:5d:57:
                    97:c3:55:dc:24:b2:f7:3f:5a:d2:16:23:ce:6c:13:
                    7f:b7:a3:5f:9b:f8:6d:6e:e2:c6:74:04:6a:dc:9a:
                    9f:4e:80:f9:a4:ee:f6:4b:87:5c:3a:a2:93:45:58:
                    0b:93:d1:75:01:97:d6:d5:cd:52:70:22:e4:c7:65:
                    13:0e:a5:27:0b:54:f8:a9:ac:fe:f7:fc:01:1a:68:
                    d7:c0:4a:ae:35:b6:4f:25:b1:ab:5a:d4:29:c1:f9:
                    13:65:3a:c8:f4:22:f4:4c:f9:cc:c1:0c:88:c2:a0:
                    29:e9:d0:42:b4:da:ef:17:cb:fc:e2:8f:56:41:00:
                    b4:9a:e0:99:38:9e:85:4f:7d:f4:b6:4a:1f:5f:52:
                    d7:d1:6c:76:8a:4b:e7:56:14:f4:93:98:e2:25:eb:
                    db:18:3d:c7:f8:ee:be:0b:91:ce:c8:40:23:01:53:
                    02:f4:9b:45:15:19:3d:79:0d:43:33:78:e0:a4:55:
                    9b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:0F:B2:50:40:3B:BF:4F:F5:84:12:06:08:EC:58:B7:75:AF:98:0D
            X509v3 Authority Key Identifier:
                keyid:9B:F4:57:1B:BD:CA:D6:C1:97:AB:05:AB:69:AF:EC:FF:2A:B4:33:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m_RXG73K1sGXqwWraa_s_yq0M94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/50edf1-ccaa-4d3a-86d9-4dd2441c2cb2/1/m_RXG73K1sGXqwWraa_s_yq0M94.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/50edf1-ccaa-4d3a-86d9-4dd2441c2cb2/1/m_RXG73K1sGXqwWraa_s_yq0M94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:94:be:cb:5e:e4:a0:00:27:87:50:9d:83:03:a2:63:10:45:
         52:b6:bf:8b:1b:7c:14:63:35:2e:b2:92:51:1d:c5:ca:c7:c3:
         80:ea:25:0a:20:10:ed:7f:38:9d:1a:1f:8f:f2:10:6e:cc:be:
         53:33:9c:af:03:3d:af:54:20:0c:83:00:a3:33:7f:05:ef:f2:
         74:0a:9b:7d:85:80:c0:d5:15:8e:07:bb:fd:35:2f:80:1d:8f:
         da:24:99:e6:dc:33:1d:64:03:2d:75:7f:dd:42:e6:a5:31:47:
         e1:87:2c:48:8d:51:2b:84:08:7e:4a:51:19:cc:ab:d7:b8:1b:
         9f:be:92:77:7e:90:6d:52:97:f5:14:fb:95:3c:53:67:3c:31:
         81:eb:c9:cf:36:c0:ad:7f:67:ab:4c:ce:23:99:7f:b0:5a:61:
         62:a5:aa:d7:6e:20:c7:2f:90:34:7e:6f:a4:28:7b:13:9d:7a:
         dc:49:c1:04:c4:b9:63:12:db:e3:fc:31:71:7c:5f:74:46:39:
         1b:14:01:42:a8:a7:37:2e:68:b1:6b:01:aa:ff:6e:85:f8:54:
         44:2a:df:15:bb:e1:7d:4f:1e:60:78:50:93:73:2b:39:16:c8:
         84:40:c4:a9:df:b1:0d:5a:ee:7f:29:30:4a:ce:7f:38:0a:d1:
         3d:e5:76:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:57:33 2026 by rpki-client