Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/ea29f2-c340-4d61-b5bb-b853dff8765c/1/MYj64-u7PXT-7dz1B_g-Z9uIUKI.mft
File:                     MYj64-u7PXT-7dz1B_g-Z9uIUKI.mft (raw, json)
Hash identifier:          6sX51VwJOmA+Fj3JD9OktykoJ0G2iZ6zwYEKG2DNsGs=
Subject key identifier:   8C:2C:59:92:F5:06:E9:95:7B:3C:B4:EC:80:69:7E:6E:72:06:8F:66
Authority key identifier: 31:88:FA:E3:EB:BB:3D:74:FE:ED:DC:F5:07:F8:3E:67:DB:88:50:A2
Certificate issuer:       /CN=3188fae3ebbb3d74feeddcf507f83e67db8850a2
Certificate serial:       01A0D917841D3875E68804A60F5B1196012D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYj64-u7PXT-7dz1B_g-Z9uIUKI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/ea29f2-c340-4d61-b5bb-b853dff8765c/1/MYj64-u7PXT-7dz1B_g-Z9uIUKI.mft
Manifest number:          1589
Signing time:             Fri 25 Sep 2026 15:03:11 +0000
Manifest this update:     Fri 25 Sep 2026 15:03:11 +0000
Manifest next update:     Sat 26 Sep 2026 15:03:11 +0000
Files and hashes:         1: 3IB8mthpDOk_BFBQubUuplUkjXo.roa (hash: e+u6WkaJwntAo2oCWNchAEYFIeKwoZYuEMGJQKwp5uE=)
                          2: KaqeHG0uZeg5OeAlCabPEVitkog.roa (hash: kUNIU0ayuenQ62hZ/a8gWBFN8YsJ5arVTqiahqwzqow=)
                          3: MYj64-u7PXT-7dz1B_g-Z9uIUKI.crl (hash: bHg6uLlf5tRc6M1s81m2dJunODtKVjbhikZmE+z3Nyk=)
                          4: g8rfoziuF-oQqakJ7VRRFDiP_8Q.roa (hash: tMNJvnilP3OgFRAUiXL5Z4gr4F5ohZRaQsEApjgqeNI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/ea29f2-c340-4d61-b5bb-b853dff8765c/1/MYj64-u7PXT-7dz1B_g-Z9uIUKI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/ea29f2-c340-4d61-b5bb-b853dff8765c/1/MYj64-u7PXT-7dz1B_g-Z9uIUKI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MYj64-u7PXT-7dz1B_g-Z9uIUKI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 15:03:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d9:17:84:1d:38:75:e6:88:04:a6:0f:5b:11:96:01:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3188fae3ebbb3d74feeddcf507f83e67db8850a2
        Validity
            Not Before: Sep 25 15:03:11 2026 GMT
            Not After : Sep 26 15:03:11 2026 GMT
        Subject: CN=8c2c5992f506e9957b3cb4ec80697e6e72068f66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:26:71:d4:bc:b2:68:d5:68:ad:c7:a4:d3:0c:
                    16:56:ba:c3:c3:a1:67:6f:14:00:6e:86:48:8a:be:
                    21:bc:5a:4f:46:6a:b0:35:85:1e:08:98:e6:05:41:
                    65:cd:20:8a:da:a2:bd:35:76:60:c6:9c:67:b0:72:
                    ab:04:ae:b2:8e:2b:a6:07:37:e2:b9:bb:d0:2a:d7:
                    c2:13:91:4c:b8:ec:85:d8:8f:9d:75:4a:b7:e5:85:
                    65:eb:bd:ee:d9:ea:b5:41:be:3b:92:34:8f:25:c3:
                    6f:10:b8:d4:16:5e:4f:1f:37:f7:19:57:94:41:41:
                    7c:9f:cd:af:9a:b3:01:54:a9:de:0a:ae:53:cb:90:
                    4c:6f:2b:c0:9b:21:a0:8a:88:45:76:c5:65:59:0e:
                    8b:0b:a7:89:58:20:03:37:6b:e4:cb:49:e0:5b:61:
                    62:24:ec:60:e4:64:43:72:c6:5f:1b:ec:e2:bd:9b:
                    5e:97:03:f3:17:b4:af:66:5a:28:06:b9:67:f2:f3:
                    4a:9e:8c:17:28:d1:5b:92:84:8a:e2:f9:7a:20:f1:
                    27:08:c4:3e:42:93:9a:75:d0:06:f6:67:8c:b5:8e:
                    0b:19:e1:0f:87:33:67:52:55:d5:e9:7e:36:be:bd:
                    ef:93:b7:6a:a3:e1:2f:e4:f0:8b:cb:d1:8c:dc:75:
                    31:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:2C:59:92:F5:06:E9:95:7B:3C:B4:EC:80:69:7E:6E:72:06:8F:66
            X509v3 Authority Key Identifier:
                keyid:31:88:FA:E3:EB:BB:3D:74:FE:ED:DC:F5:07:F8:3E:67:DB:88:50:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYj64-u7PXT-7dz1B_g-Z9uIUKI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/ea29f2-c340-4d61-b5bb-b853dff8765c/1/MYj64-u7PXT-7dz1B_g-Z9uIUKI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/ea29f2-c340-4d61-b5bb-b853dff8765c/1/MYj64-u7PXT-7dz1B_g-Z9uIUKI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:32:49:81:82:c4:d0:d0:73:8b:e5:d4:36:66:be:2d:26:39:
         f3:8c:16:61:e1:a3:09:1d:eb:ea:85:c1:d3:39:99:2e:a7:e0:
         81:00:77:66:51:98:50:f7:b1:81:94:4c:21:73:5e:fe:9d:16:
         fa:8b:ae:ae:20:83:6f:12:1e:6a:49:cc:d0:ed:79:42:9c:7a:
         5a:4b:92:af:25:31:5d:e5:34:fa:22:41:ae:1c:18:bf:17:9f:
         a0:fa:7a:8c:9c:03:4e:13:00:ec:5f:79:b7:f9:4a:36:b7:f7:
         f6:f8:f9:81:35:b5:0c:29:36:b3:6c:2c:8c:16:53:a0:84:05:
         08:03:98:66:8e:7d:c3:7c:f6:f3:b5:56:5c:3f:7b:e5:bb:6a:
         ca:05:61:43:41:a6:e1:7b:f1:14:03:a5:09:2b:c7:7b:79:21:
         d2:c2:04:a4:54:12:00:93:c0:fc:e8:e7:02:d2:e1:d7:68:3e:
         76:49:92:9e:3b:00:de:d7:cc:75:f5:b1:62:1e:e6:7b:cf:ff:
         d8:ff:17:47:93:4a:ab:22:fa:cd:90:e4:eb:a5:18:0a:55:37:
         8b:01:7a:bc:54:f2:99:52:12:2d:2b:b0:dc:d0:d7:ff:19:31:
         e4:4a:56:0d:8a:5f:03:3b:d6:3f:6f:90:62:ad:63:73:81:29:
         01:b4:ec:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:25:01 2026 by rpki-client