Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.mft
File:                     miM7vd_kOGRvWG8IXl3w15vfufw.mft (raw, json)
Hash identifier:          8EMVRICaFMEmGLgA23wIrksyhvaCwZakkZiJzY+aT+Y=
Subject key identifier:   4F:7C:CF:EF:50:1F:83:7E:CB:42:A6:DD:1A:B4:2E:93:CE:96:F5:E1
Authority key identifier: 9A:23:3B:BD:DF:E4:38:64:6F:58:6F:08:5E:5D:F0:D7:9B:DF:B9:FC
Certificate issuer:       /CN=9a233bbddfe438646f586f085e5df0d79bdfb9fc
Certificate serial:       01A0ED7855319EE51B7D902ADB85ADE34C4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/miM7vd_kOGRvWG8IXl3w15vfufw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.mft
Manifest number:          0971
Signing time:             Tue 29 Sep 2026 14:01:21 +0000
Manifest this update:     Tue 29 Sep 2026 14:01:21 +0000
Manifest next update:     Wed 30 Sep 2026 14:01:21 +0000
Files and hashes:         1: M1ruMNKluNAuiHKd8f6PvAhDGEs.roa (hash: FWsTJhEBrkq8kPBWZ62T1F7ClTwy4cYS4tWh5TLbeTA=)
                          2: XNKWPCMOPLauToaa-Vtz2zcauoc.roa (hash: luJuVPoWx92bH75pBWbCMtwrgqr+Km6/eamqOW1HDZc=)
                          3: dyhz1TfOcl672ykR-umzk8d_7AQ.roa (hash: i2scR6hBPf9EaO7J0DMnFp1+UeNi6vv8mMyfEjaxgaY=)
                          4: miM7vd_kOGRvWG8IXl3w15vfufw.crl (hash: Pnd0yrt5wTWgfkGRaF136DiPoJ74DcUy/WCHbazdH58=)
                          5: nl8rJp2Gx045j4pPDWegyHxSDoU.roa (hash: 2GNCXLXhx5YXmc3JB/+CLbWieU0ZOSqkjHUYlGnPA30=)
                          6: vhhE0LlaMoAC65mEN3TyEobLF50.roa (hash: Us5rGsyQlFj4bRY6YlCqwzJno3k3/qLxqTpPkFS4SJ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/miM7vd_kOGRvWG8IXl3w15vfufw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ed:78:55:31:9e:e5:1b:7d:90:2a:db:85:ad:e3:4c:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a233bbddfe438646f586f085e5df0d79bdfb9fc
        Validity
            Not Before: Sep 29 14:01:21 2026 GMT
            Not After : Sep 30 14:01:21 2026 GMT
        Subject: CN=4f7ccfef501f837ecb42a6dd1ab42e93ce96f5e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1f:b5:c3:26:98:89:23:6a:5d:9b:c1:d9:3d:
                    91:e3:e7:be:40:b0:ef:73:e7:6e:bf:28:48:e4:86:
                    d2:4c:73:34:69:76:e6:b9:95:95:47:89:6e:82:af:
                    4b:de:e6:dc:88:2e:a2:81:e2:ca:88:64:77:73:f0:
                    28:e6:df:0c:9b:2a:63:1e:d4:6f:c6:e4:ab:76:fe:
                    96:96:e4:5e:62:df:06:5b:f4:d6:1a:c7:36:e6:14:
                    0c:8a:63:9c:5c:0a:cf:2a:01:3d:c5:e0:ad:85:52:
                    7d:00:df:32:40:6c:2c:e4:08:8a:58:aa:cf:76:6e:
                    7b:79:30:9e:72:f6:3e:95:b8:90:41:cd:fb:06:51:
                    0d:2b:f4:84:ff:e2:c6:ad:d6:17:ce:ac:3a:5b:27:
                    9d:fd:c1:47:7e:e3:60:82:1e:61:84:bd:6d:57:cb:
                    6e:43:5f:85:ed:5d:ae:6b:ce:9e:02:20:69:68:f2:
                    2b:7f:e8:a7:15:7c:1c:26:24:7a:b3:3d:2d:0c:be:
                    e1:7a:3f:59:30:0e:29:23:02:98:5f:a8:84:e8:52:
                    16:a7:c7:4e:b4:56:5d:e5:82:e4:2c:db:43:62:31:
                    8d:4f:5e:c2:5c:2f:67:1e:64:a5:56:10:89:18:9a:
                    bd:1d:31:1e:93:18:a1:50:7d:80:d8:32:2d:4d:1f:
                    bb:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:7C:CF:EF:50:1F:83:7E:CB:42:A6:DD:1A:B4:2E:93:CE:96:F5:E1
            X509v3 Authority Key Identifier:
                keyid:9A:23:3B:BD:DF:E4:38:64:6F:58:6F:08:5E:5D:F0:D7:9B:DF:B9:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/miM7vd_kOGRvWG8IXl3w15vfufw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:97:7a:56:09:ba:8d:c0:98:e5:10:25:7a:de:e4:99:e8:22:
         27:02:7b:3e:b8:3e:e5:82:94:08:b7:bf:e1:28:de:7e:67:66:
         e1:29:2f:f0:a1:ea:f2:ad:56:35:07:ae:d3:a7:23:6e:bb:0b:
         d4:1a:e1:b8:88:36:2f:67:a9:f5:67:c7:47:40:be:5a:be:64:
         a6:02:4d:d0:aa:f4:57:02:47:49:f9:7a:b8:bd:11:60:f4:c7:
         24:58:bd:45:6b:ce:4e:aa:ff:83:27:98:58:13:93:31:41:dc:
         75:1d:36:96:af:b8:8f:ad:be:15:c1:8e:d5:99:2e:c5:cc:3d:
         ec:6d:aa:bb:5e:78:3e:67:4a:0f:5a:8e:3d:6b:e0:19:74:4b:
         73:0d:9c:44:dd:f6:18:a9:c8:27:71:3b:11:07:cc:61:74:5d:
         e9:af:ee:24:83:63:77:db:d8:c6:ca:39:a1:83:85:e5:6b:14:
         ee:5f:b1:c2:aa:ad:5f:e5:cb:07:49:84:43:d7:56:eb:64:fd:
         c2:36:2e:44:cb:6d:f5:5f:47:1b:c3:20:19:81:13:cb:97:be:
         e5:85:03:30:63:07:32:15:f0:1d:fc:f9:42:8d:9c:97:bd:f8:
         f3:6d:22:85:5f:a3:97:a1:05:70:75:13:c4:6b:aa:3b:f1:03:
         a9:5e:e4:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 21:44:07 2026 by rpki-client