Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/d8679e-46bb-44f5-ba52-b52b3a236fa7/1/rMSPelkSBYjUFw6igV5q5RvmvP8.mft
File:                     rMSPelkSBYjUFw6igV5q5RvmvP8.mft (raw, json)
Hash identifier:          E6oqPmpFmbHEGFWPojt2lE4EdtQf6hUM6kqZnJSxNA0=
Subject key identifier:   12:3C:B3:3B:DE:FE:06:D1:53:B3:23:A9:BA:D7:F9:75:31:89:40:CA
Authority key identifier: AC:C4:8F:7A:59:12:05:88:D4:17:0E:A2:81:5E:6A:E5:1B:E6:BC:FF
Certificate issuer:       /CN=acc48f7a59120588d4170ea2815e6ae51be6bcff
Certificate serial:       01A0D7CD601918DB97D60062EE9EB412712B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rMSPelkSBYjUFw6igV5q5RvmvP8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/d8679e-46bb-44f5-ba52-b52b3a236fa7/1/rMSPelkSBYjUFw6igV5q5RvmvP8.mft
Manifest number:          0B06
Signing time:             Fri 25 Sep 2026 09:02:35 +0000
Manifest this update:     Fri 25 Sep 2026 09:02:35 +0000
Manifest next update:     Sat 26 Sep 2026 09:02:35 +0000
Files and hashes:         1: ALJo2VNkRBohxnFTRb76HQlek4w.roa (hash: oL6ieDNpqz/DwLKJF9Y4lrQM4pX1GlcAf2nFecyaNSM=)
                          2: CuL1FtDvKUET0Va4MczyQRNitSg.roa (hash: B1PuvgUekTJwx+aEl2KBPhFT8zf9S+xcyLzD5s+DNJ4=)
                          3: HC7tyOvxboDjqwx-hgqeRMBVpMU.roa (hash: Oz5SaZbGS2ERy2H8xd9OcxKLPUZL5L8TnBN+RGFNYFc=)
                          4: csyaDpxp-qaEn_l9rVIAGfKG0Fs.roa (hash: 5QfFyBjLv9B3y4ndXnMzTJt//5iA5RA3jDs8H4cBXBI=)
                          5: dJyXOvb9Sr_md9UabI56Iqgc9jc.roa (hash: Jp93biw+G61x1KGOGNadD/xDlSoqq+aMm/ZN8I5dsuE=)
                          6: rMSPelkSBYjUFw6igV5q5RvmvP8.crl (hash: g3o+rXiKO81Cc1I0jLg1+QhWvCFwcXcKn+SMKwiw36I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/d8679e-46bb-44f5-ba52-b52b3a236fa7/1/rMSPelkSBYjUFw6igV5q5RvmvP8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/d8679e-46bb-44f5-ba52-b52b3a236fa7/1/rMSPelkSBYjUFw6igV5q5RvmvP8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rMSPelkSBYjUFw6igV5q5RvmvP8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 08:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d7:cd:60:19:18:db:97:d6:00:62:ee:9e:b4:12:71:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acc48f7a59120588d4170ea2815e6ae51be6bcff
        Validity
            Not Before: Sep 25 09:02:35 2026 GMT
            Not After : Sep 26 09:02:35 2026 GMT
        Subject: CN=123cb33bdefe06d153b323a9bad7f975318940ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a4:fa:a8:ce:99:cc:64:88:52:63:2c:e1:ca:
                    36:17:14:e1:49:06:f4:72:af:17:4e:b6:87:6e:99:
                    b2:97:87:9c:08:53:dd:32:2c:fb:d2:c6:a3:49:78:
                    83:81:51:05:bf:4a:f4:1c:82:dd:59:31:92:0b:0d:
                    a0:8b:7e:d9:7c:85:b6:19:b4:01:22:16:61:15:5f:
                    be:ab:d1:04:08:94:3a:5c:05:1d:2f:b3:f9:ef:5e:
                    19:3d:65:fe:1e:87:35:54:e7:e8:1e:5f:91:8d:98:
                    96:48:cc:38:06:03:07:4b:1b:a4:4a:11:58:1e:60:
                    dc:b5:d0:50:e0:a3:23:82:59:08:2f:ff:0d:52:83:
                    6b:0b:aa:8c:a5:f9:f8:2c:bc:91:4e:68:f6:96:f4:
                    7d:d8:20:b7:60:f0:bd:71:8d:4c:09:c8:e7:dc:12:
                    c3:fb:6c:c2:d5:72:9c:db:0b:6b:cb:83:24:34:4a:
                    da:65:cb:08:61:ca:3b:03:7d:e0:b2:c4:77:d5:e0:
                    c2:fb:62:b4:a6:8a:8e:b0:f3:74:2d:56:97:53:da:
                    55:91:5c:e9:a1:ce:e0:44:6a:36:c3:4b:9c:5b:d7:
                    f9:fa:2e:71:77:a3:39:fa:09:17:46:99:93:37:e0:
                    46:92:c2:08:a0:3f:cd:5f:1d:a5:39:f6:ef:09:6c:
                    6e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:3C:B3:3B:DE:FE:06:D1:53:B3:23:A9:BA:D7:F9:75:31:89:40:CA
            X509v3 Authority Key Identifier:
                keyid:AC:C4:8F:7A:59:12:05:88:D4:17:0E:A2:81:5E:6A:E5:1B:E6:BC:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMSPelkSBYjUFw6igV5q5RvmvP8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d8679e-46bb-44f5-ba52-b52b3a236fa7/1/rMSPelkSBYjUFw6igV5q5RvmvP8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d8679e-46bb-44f5-ba52-b52b3a236fa7/1/rMSPelkSBYjUFw6igV5q5RvmvP8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:54:db:b2:eb:07:b6:07:2d:80:ce:3a:5f:32:bf:0b:ce:b1:
         c2:1a:28:a8:ba:e8:ae:b6:2b:09:72:42:0c:ce:c1:9d:79:eb:
         75:ee:73:03:a7:fa:a8:22:7d:e8:59:90:31:5e:f2:d3:68:50:
         40:e0:26:ee:52:90:e6:78:47:d2:a9:e3:6c:44:90:24:56:a3:
         2c:4d:cf:d6:8b:2f:03:3c:8e:cd:6f:fa:7e:5a:52:0e:80:82:
         9f:d4:ad:c5:d5:ff:25:a6:10:53:98:c8:af:3e:44:27:b4:fd:
         d1:51:d3:38:63:93:06:47:0c:c5:f7:7d:64:01:4d:a0:9e:09:
         63:5b:1a:f8:33:4d:07:c7:ff:d1:27:5c:b2:97:58:65:23:86:
         58:ff:cf:a2:29:51:3f:61:b5:2d:20:72:88:83:59:6a:df:cf:
         e8:1c:6f:7d:43:25:58:aa:1a:f9:99:fe:9b:d8:b5:3f:95:2b:
         18:90:cd:08:13:ab:68:cf:87:d2:92:65:66:82:b6:eb:45:4a:
         03:fd:ca:4b:dd:cb:37:cc:30:37:3b:0b:99:3c:76:bd:10:94:
         d0:6c:af:0a:c2:a5:45:77:69:c5:d5:bb:51:3e:cd:d9:77:30:
         09:ba:a6:cf:d7:49:54:a2:09:38:8c:93:ce:db:f5:32:49:12:
         97:52:b3:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:17:01 2026 by rpki-client