Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.mft
File:                     mjgMVcRhF_nQ-fifiF_YrFhMcuc.mft (raw, json)
Hash identifier:          HXoLWoNLuctGDhUC/IlFqUKrzEwcavhv+J3YxQLYoLU=
Subject key identifier:   25:3D:34:7B:31:23:F3:05:1D:E7:EA:DE:BA:59:72:A5:E5:E7:61:7F
Authority key identifier: 9A:38:0C:55:C4:61:17:F9:D0:F9:F8:9F:88:5F:D8:AC:58:4C:72:E7
Certificate issuer:       /CN=9a380c55c46117f9d0f9f89f885fd8ac584c72e7
Certificate serial:       01A128E7E71AA8CFA02FC1D42453327D38D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mjgMVcRhF_nQ-fifiF_YrFhMcuc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.mft
Manifest number:          09BE
Signing time:             Sun 11 Oct 2026 03:00:48 +0000
Manifest this update:     Sun 11 Oct 2026 03:00:48 +0000
Manifest next update:     Mon 12 Oct 2026 03:00:48 +0000
Files and hashes:         1: hoKwY0QvUnBi-tDDbTH_cLv23NY.roa (hash: fFAQMbRSBb2iS8m9HUDJs1yeCJEv1rp7JgjV+mMT+oE=)
                          2: ihYgr-rjOEu_0aFSN5ArKwebXhw.roa (hash: V6X/NJtxRRU2A4S6y2uawtLDYFOhttTEH+mmWCQD8A4=)
                          3: mjgMVcRhF_nQ-fifiF_YrFhMcuc.crl (hash: Ak5wAtxo9JVAiIOTwFLp7H191siCcXba/JtWoZM9014=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mjgMVcRhF_nQ-fifiF_YrFhMcuc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 03:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:28:e7:e7:1a:a8:cf:a0:2f:c1:d4:24:53:32:7d:38:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a380c55c46117f9d0f9f89f885fd8ac584c72e7
        Validity
            Not Before: Oct 11 03:00:48 2026 GMT
            Not After : Oct 12 03:00:48 2026 GMT
        Subject: CN=253d347b3123f3051de7eadeba5972a5e5e7617f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:56:95:b4:78:6e:d1:f2:78:26:c0:72:e6:74:
                    53:c7:6c:98:35:db:25:e3:69:b6:66:e9:e1:14:5b:
                    e0:19:08:2c:eb:26:40:6b:ab:76:f8:1f:38:e9:91:
                    2a:14:3c:6d:3e:d3:16:2a:ab:84:f7:4e:51:40:a8:
                    ac:9e:fb:7f:31:dc:2a:48:66:63:95:64:a9:ef:cd:
                    07:cf:5b:dd:1f:62:5b:43:c3:0b:83:8e:1b:9b:ae:
                    f7:3f:11:5c:45:21:a3:aa:1b:54:8c:ed:fd:98:ec:
                    b9:11:50:37:c8:f7:6e:1d:5b:57:25:9a:1b:f4:df:
                    16:7a:89:b0:ed:64:dd:22:a8:e9:e2:fc:21:73:aa:
                    e2:18:eb:2b:f4:c1:6a:80:b4:2d:01:1e:8b:50:c1:
                    6e:58:b8:e8:fe:8d:ff:bb:2b:ab:f1:d2:22:20:75:
                    63:bd:e5:76:95:ff:2d:aa:eb:6c:4d:9f:fc:cf:04:
                    bc:87:35:9d:e5:c0:dc:df:ef:2f:7d:55:8f:67:5d:
                    e6:08:dc:af:8d:ee:e8:af:84:81:c5:c0:86:5f:8d:
                    e1:50:1d:78:79:f5:d9:71:7e:5b:45:2d:17:c1:1a:
                    79:c1:b9:47:ff:64:23:16:6c:b1:4c:92:a4:91:3e:
                    bf:cc:99:37:50:4e:55:07:09:7c:4b:42:80:44:3f:
                    e3:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:3D:34:7B:31:23:F3:05:1D:E7:EA:DE:BA:59:72:A5:E5:E7:61:7F
            X509v3 Authority Key Identifier:
                keyid:9A:38:0C:55:C4:61:17:F9:D0:F9:F8:9F:88:5F:D8:AC:58:4C:72:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mjgMVcRhF_nQ-fifiF_YrFhMcuc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:41:d5:c1:34:59:7a:7f:de:4a:be:04:97:e8:31:4c:12:71:
         ec:9c:80:6e:fc:93:9b:d9:0b:8a:cc:24:a4:b8:59:27:b3:02:
         43:ed:69:5e:00:5c:f8:37:e7:71:48:f1:27:46:9d:46:bc:5e:
         99:45:74:ba:59:f9:81:09:9c:cf:53:a0:aa:1d:55:a6:a6:91:
         1d:a4:1c:45:e6:e2:00:c3:e2:fd:d5:df:7f:72:7f:90:60:e7:
         64:33:7f:9b:91:19:f9:98:b4:c7:b4:4e:e5:a0:64:30:b4:95:
         5f:6c:3b:be:55:de:93:6b:7a:a4:27:15:d5:67:15:c2:88:95:
         8c:1b:34:a8:fa:33:0c:0f:0f:7f:d3:96:d1:70:86:c6:9b:28:
         7c:6f:b4:d1:43:ff:1c:c1:5a:70:93:d9:c4:7e:d8:a5:da:40:
         f7:46:8d:ff:a8:8c:42:d8:2a:19:21:8f:12:84:e6:df:90:ba:
         da:c8:1a:22:fa:be:d8:25:fa:78:71:d5:53:72:60:33:28:c2:
         68:f8:f0:16:42:66:bc:47:0a:e2:5b:d1:6b:7d:97:fa:e6:c7:
         8b:85:19:ef:ee:b0:05:2b:40:43:13:27:2d:15:e4:f7:2a:91:
         d1:f2:e8:21:91:4e:77:db:03:a3:80:3d:1a:69:bf:88:26:11:
         ae:15:9a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 08:46:32 2026 by rpki-client