Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.mft
File:                     M1ylITYiJtA8GCkAPYHUmKqDjzM.mft (raw, json)
Hash identifier:          54nZRbHwwtJQ1oTPG7Q0pd7cLBJ04udFa8YYHENef2Q=
Subject key identifier:   25:68:47:64:95:50:C6:66:73:67:DF:00:BA:20:BC:96:62:0B:E8:E9
Authority key identifier: 33:5C:A5:21:36:22:26:D0:3C:18:29:00:3D:81:D4:98:AA:83:8F:33
Certificate issuer:       /CN=335ca521362226d03c1829003d81d498aa838f33
Certificate serial:       01A1152AAFE7861EDAE2074897CFE92973F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M1ylITYiJtA8GCkAPYHUmKqDjzM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.mft
Manifest number:          1413
Signing time:             Wed 07 Oct 2026 07:01:21 +0000
Manifest this update:     Wed 07 Oct 2026 07:01:21 +0000
Manifest next update:     Thu 08 Oct 2026 07:01:21 +0000
Files and hashes:         1: 9aA3iLX_dTChIPCO6PgksQti4b4.roa (hash: fqGRMmb2kUR03lGLsFWhMcKnX+bdih5acXmK3pBtYbE=)
                          2: Exg0UvgeAfe-AZQtA_LavkNZKKU.roa (hash: gKA++u4Fw/ljBBOhyevOEbxsqlYiJYqc2cMPG6ua8TU=)
                          3: M1ylITYiJtA8GCkAPYHUmKqDjzM.crl (hash: 0m7B3nmMLWk3bDYdgNlOzICEjoarkPEUXQyTtSDbbDA=)
                          4: XvuMMh6_b9Q_-y9zoflvfhhJ8cU.roa (hash: arKO35haYoOypMHOByST819307xwbCJtuXRuiew9430=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M1ylITYiJtA8GCkAPYHUmKqDjzM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Oct 2026 07:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:15:2a:af:e7:86:1e:da:e2:07:48:97:cf:e9:29:73:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=335ca521362226d03c1829003d81d498aa838f33
        Validity
            Not Before: Oct  7 07:01:21 2026 GMT
            Not After : Oct  8 07:01:21 2026 GMT
        Subject: CN=256847649550c6667367df00ba20bc96620be8e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c3:0d:3a:7c:9c:7c:81:6d:cc:ad:a6:31:f5:
                    c6:b7:f0:2b:ce:d5:41:2b:5e:74:8a:5c:3f:e5:78:
                    60:86:07:f6:92:0a:bf:09:19:bc:12:31:ca:b6:b2:
                    87:e9:a7:58:2e:bd:bd:4d:56:6c:66:ad:3a:9d:86:
                    48:ed:f4:a7:99:b4:e9:1a:5f:a2:e1:04:4f:b4:aa:
                    35:68:42:6a:fb:1c:76:7d:d3:21:2c:eb:28:bf:a1:
                    bb:48:41:30:2c:a6:49:4e:d1:8e:25:62:57:db:3d:
                    a8:3d:ae:40:70:59:8a:d5:b5:cd:9d:18:c9:f5:3e:
                    64:d5:7b:b0:e7:3f:58:be:4c:3b:85:b8:6c:ed:ea:
                    61:ba:7b:93:42:70:df:30:46:b0:77:1a:ae:ac:c6:
                    76:05:58:7b:02:4f:fa:41:0f:bf:da:7b:ad:c4:d3:
                    0b:1e:82:7a:26:0b:da:7f:0a:d5:7f:1c:57:be:e6:
                    1b:de:32:70:22:6b:f0:a4:d1:a8:cc:28:b4:70:a2:
                    21:76:d8:b9:c6:2b:af:06:37:77:62:21:cf:dd:62:
                    91:fa:b2:e6:db:6f:90:4e:69:33:8a:56:d3:52:88:
                    c1:4e:05:80:f5:32:f8:7b:e0:22:8f:3a:04:64:09:
                    d4:1f:09:73:6d:6f:9c:44:1a:44:bc:f9:9f:d9:bf:
                    23:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:68:47:64:95:50:C6:66:73:67:DF:00:BA:20:BC:96:62:0B:E8:E9
            X509v3 Authority Key Identifier:
                keyid:33:5C:A5:21:36:22:26:D0:3C:18:29:00:3D:81:D4:98:AA:83:8F:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1ylITYiJtA8GCkAPYHUmKqDjzM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:e5:04:4c:7a:04:ff:47:3a:7f:72:17:cf:f7:19:02:38:f1:
         da:ba:86:70:7e:4f:5d:22:33:ac:7b:a4:30:07:90:ae:e5:9b:
         fb:d2:7d:1c:75:87:de:ba:96:c1:b2:15:d7:3f:b3:29:c0:a6:
         c0:ea:10:5c:46:5b:08:52:72:a6:d0:42:c7:28:ad:99:a3:50:
         45:c5:7c:fe:e0:9d:2f:d7:a0:99:cb:40:9b:ef:42:0a:8d:b0:
         bc:55:32:55:13:76:ec:7f:ed:02:37:2c:b4:53:82:7b:81:e9:
         6b:3c:91:cb:29:03:f3:56:9c:ae:38:0d:4c:12:2d:83:76:0e:
         19:66:25:1d:72:9b:2b:39:00:76:2a:d6:7d:be:77:20:16:6d:
         c4:ab:06:8b:2c:40:64:6a:0e:8a:ce:f5:29:c9:ee:d6:6d:a0:
         19:9e:e1:fb:1b:f5:63:71:ac:14:6e:d5:6a:ed:45:3a:cd:22:
         91:72:f0:5d:2d:e2:36:93:7e:43:54:4f:3c:48:5f:a0:e9:e4:
         0a:21:2f:f6:58:db:70:da:1b:a4:3b:c4:8e:08:ba:87:6d:87:
         f7:7e:9d:ef:61:2e:22:a8:86:28:ee:86:43:96:f2:e5:b0:94:
         d3:0c:26:e1:87:1e:23:d3:6c:ae:c3:7c:9d:56:cd:df:30:80:
         8d:0d:a7:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 17:39:18 2026 by rpki-client