Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/d8679e-46bb-44f5-ba52-b52b3a236fa7/1/rMSPelkSBYjUFw6igV5q5RvmvP8.mft
File:                     rMSPelkSBYjUFw6igV5q5RvmvP8.mft (raw, json)
Hash identifier:          HAbBP26oyiTXOIy/wEazpuf0i8Pxmp724sKe3lL0HUs=
Subject key identifier:   E1:CE:FF:E1:2C:7F:7D:72:EC:FB:C9:47:06:21:ED:F9:02:B4:83:94
Authority key identifier: AC:C4:8F:7A:59:12:05:88:D4:17:0E:A2:81:5E:6A:E5:1B:E6:BC:FF
Certificate issuer:       /CN=acc48f7a59120588d4170ea2815e6ae51be6bcff
Certificate serial:       01A0E173F3100F4B62CCC1762DE7BCDC0691
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rMSPelkSBYjUFw6igV5q5RvmvP8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/d8679e-46bb-44f5-ba52-b52b3a236fa7/1/rMSPelkSBYjUFw6igV5q5RvmvP8.mft
Manifest number:          0B0B
Signing time:             Sun 27 Sep 2026 06:01:07 +0000
Manifest this update:     Sun 27 Sep 2026 06:01:07 +0000
Manifest next update:     Mon 28 Sep 2026 06:01:07 +0000
Files and hashes:         1: ALJo2VNkRBohxnFTRb76HQlek4w.roa (hash: oL6ieDNpqz/DwLKJF9Y4lrQM4pX1GlcAf2nFecyaNSM=)
                          2: CuL1FtDvKUET0Va4MczyQRNitSg.roa (hash: B1PuvgUekTJwx+aEl2KBPhFT8zf9S+xcyLzD5s+DNJ4=)
                          3: HC7tyOvxboDjqwx-hgqeRMBVpMU.roa (hash: Oz5SaZbGS2ERy2H8xd9OcxKLPUZL5L8TnBN+RGFNYFc=)
                          4: csyaDpxp-qaEn_l9rVIAGfKG0Fs.roa (hash: 5QfFyBjLv9B3y4ndXnMzTJt//5iA5RA3jDs8H4cBXBI=)
                          5: dJyXOvb9Sr_md9UabI56Iqgc9jc.roa (hash: Jp93biw+G61x1KGOGNadD/xDlSoqq+aMm/ZN8I5dsuE=)
                          6: rMSPelkSBYjUFw6igV5q5RvmvP8.crl (hash: PyfQBqwVGHhc1krDECpYY9IXVUp7J21rwGst66sMu+Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/d8679e-46bb-44f5-ba52-b52b3a236fa7/1/rMSPelkSBYjUFw6igV5q5RvmvP8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/d8679e-46bb-44f5-ba52-b52b3a236fa7/1/rMSPelkSBYjUFw6igV5q5RvmvP8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rMSPelkSBYjUFw6igV5q5RvmvP8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 04:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e1:73:f3:10:0f:4b:62:cc:c1:76:2d:e7:bc:dc:06:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acc48f7a59120588d4170ea2815e6ae51be6bcff
        Validity
            Not Before: Sep 27 06:01:07 2026 GMT
            Not After : Sep 28 06:01:07 2026 GMT
        Subject: CN=e1ceffe12c7f7d72ecfbc9470621edf902b48394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:53:90:11:42:ed:4a:e8:f5:6f:cb:e4:cb:6a:
                    a2:1a:0b:3a:72:b3:5a:0c:ad:08:cc:16:08:3b:e2:
                    8b:64:37:c0:47:14:68:1f:f2:1e:7e:99:e9:2f:d9:
                    b6:37:33:a5:b2:36:bf:22:b8:1c:24:db:43:c7:ba:
                    5d:33:f5:6d:d7:4a:5c:96:40:3d:0e:42:63:83:f9:
                    1c:3e:58:06:c9:5a:f9:05:64:6e:89:db:fc:67:3f:
                    69:4f:04:98:3b:88:50:95:fd:aa:99:c0:70:57:f6:
                    0c:d7:c4:e2:c2:ab:26:82:1f:58:30:33:5e:63:09:
                    0e:58:8a:30:0c:35:47:09:41:39:3c:99:96:98:59:
                    e6:6b:d7:d1:ca:a7:53:b6:da:d4:20:04:b9:1f:51:
                    88:31:87:fe:e0:cf:92:29:52:97:62:d8:33:fb:92:
                    c3:9d:67:8f:45:99:fc:b8:24:79:a2:c6:ad:13:31:
                    84:83:e1:c6:9f:d8:51:11:30:2f:f5:f5:35:56:f7:
                    ff:3c:00:28:b8:c5:7b:0e:4a:7d:c8:90:e5:64:8d:
                    19:07:de:55:e1:50:69:ec:c6:da:a1:28:3d:46:6e:
                    bc:3b:77:25:a2:f8:1f:4a:99:c2:9e:dc:cc:4b:c0:
                    7c:c9:47:7c:45:a5:2e:ae:cb:1c:84:01:81:25:d0:
                    3b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:CE:FF:E1:2C:7F:7D:72:EC:FB:C9:47:06:21:ED:F9:02:B4:83:94
            X509v3 Authority Key Identifier:
                keyid:AC:C4:8F:7A:59:12:05:88:D4:17:0E:A2:81:5E:6A:E5:1B:E6:BC:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMSPelkSBYjUFw6igV5q5RvmvP8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d8679e-46bb-44f5-ba52-b52b3a236fa7/1/rMSPelkSBYjUFw6igV5q5RvmvP8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d8679e-46bb-44f5-ba52-b52b3a236fa7/1/rMSPelkSBYjUFw6igV5q5RvmvP8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:11:b0:d6:de:cd:b0:30:ae:80:9c:0b:b4:05:3c:fd:28:0d:
         a9:01:fa:8d:e0:7b:27:3e:1a:83:3e:c6:55:8c:88:90:06:27:
         8d:4d:24:71:bb:d2:41:27:a9:7c:3e:18:35:b3:1b:6d:0d:13:
         7c:a6:9a:c0:24:16:c9:4d:51:9b:3b:8b:e0:8f:e1:ca:45:35:
         4d:64:d1:bb:b3:a7:da:82:10:55:35:94:b9:34:14:dc:09:26:
         d0:d2:e8:6f:eb:33:2d:06:11:77:78:a2:99:46:fe:51:02:78:
         63:ba:6a:17:0f:25:1a:4e:b8:a6:4d:57:5a:fc:d3:f8:12:f2:
         c6:9e:35:d5:d1:18:8e:36:c2:0c:e6:64:4f:68:2b:9c:54:62:
         1a:f9:c6:72:f1:05:e3:3f:84:ee:c7:7f:09:5d:ba:4b:03:d7:
         27:e7:ef:a3:f6:17:a0:45:6c:25:23:a8:bd:7d:73:cd:15:35:
         4c:91:e5:c6:9e:4f:22:5a:65:a9:08:62:06:84:09:ab:74:5b:
         82:37:a8:ea:e7:86:b7:41:35:a8:fa:23:a7:2f:98:43:97:cb:
         d5:e0:40:1f:9b:2f:ff:1d:98:6c:9c:8f:10:50:61:3d:ab:05:
         7a:ba:d4:cf:7f:46:24:4e:91:5f:52:a5:cd:89:e2:99:7c:e7:
         3a:33:05:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:54:43 2026 by rpki-client