Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft
File:                     RMKVym7oyucAa1d69U43ZiPfd5k.mft (raw, json)
Hash identifier:          g/VSWVKZqfacV32x9TxlQO/N3a2AT3FSTV/iJDb0xjc=
Subject key identifier:   CA:A4:F2:23:89:5E:1C:9F:6C:AC:78:87:7A:BE:BE:BE:A3:44:60:C2
Authority key identifier: 44:C2:95:CA:6E:E8:CA:E7:00:6B:57:7A:F5:4E:37:66:23:DF:77:99
Certificate issuer:       /CN=44c295ca6ee8cae7006b577af54e376623df7799
Certificate serial:       01A0DCBBD2EEA8F84E8A1FBFE2911868D6CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RMKVym7oyucAa1d69U43ZiPfd5k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft
Manifest number:          1841
Signing time:             Sat 26 Sep 2026 08:01:31 +0000
Manifest this update:     Sat 26 Sep 2026 08:01:31 +0000
Manifest next update:     Sun 27 Sep 2026 08:01:31 +0000
Files and hashes:         1: 4bDkgENx5bPVfPJbt1ijigXmgrk.roa (hash: SO0YUT683qrSeySHKs6lQYWpsK+0MrLWBcrgELSwcJo=)
                          2: RMKVym7oyucAa1d69U43ZiPfd5k.crl (hash: +uvgdhZHn3uG8VaxdZD6jH62h3VZAKyjuhEv6p7DCK0=)
                          3: rbleZbDw4gebdk07yrvF8SzeP6w.roa (hash: VrTcEnN0AeIhbsoOuLAPeO02+ay5MYr1fedY2RRIQx8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RMKVym7oyucAa1d69U43ZiPfd5k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 08:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dc:bb:d2:ee:a8:f8:4e:8a:1f:bf:e2:91:18:68:d6:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44c295ca6ee8cae7006b577af54e376623df7799
        Validity
            Not Before: Sep 26 08:01:31 2026 GMT
            Not After : Sep 27 08:01:31 2026 GMT
        Subject: CN=caa4f223895e1c9f6cac78877abebebea34460c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:df:5d:4b:ed:95:d7:2e:df:0b:1a:1d:80:00:
                    69:fa:f4:df:f5:32:57:52:36:e8:83:ae:fa:d4:a6:
                    11:ae:13:74:4b:13:6e:56:39:f4:ed:1b:ed:b4:12:
                    e4:24:5d:71:f4:20:2d:bb:08:12:d4:ea:4b:c7:56:
                    a4:ae:fc:47:81:2e:07:b6:ce:a2:df:25:2d:fc:dd:
                    75:8e:fe:b6:6b:88:0f:fc:1b:5f:7d:e9:e1:5c:91:
                    61:f3:19:50:6b:4a:5d:00:06:fa:66:89:02:8e:bd:
                    21:4c:9b:5d:60:66:ae:08:a8:51:02:7a:51:b4:37:
                    2f:8c:b7:fa:74:12:3b:1b:93:5d:62:ac:7f:cc:f1:
                    56:fa:6b:c2:b5:c7:25:f5:48:2b:b1:ee:e2:68:bf:
                    69:c2:59:85:1e:fe:a7:27:b9:8a:df:d0:4f:61:e8:
                    24:4b:c6:fc:b8:f3:12:ed:22:c4:da:ef:a6:7d:90:
                    a4:a7:e6:4d:8b:59:92:07:99:14:22:56:b0:36:9c:
                    23:e1:b3:53:42:27:31:4a:62:b4:74:7d:12:d7:17:
                    8e:b3:a9:57:72:33:79:72:c8:ea:dd:2a:5c:0f:c9:
                    34:35:07:bc:9d:4b:15:08:0c:bb:14:d6:24:2a:e6:
                    04:02:1e:be:8a:35:a5:f9:3b:fe:c1:3e:47:68:80:
                    ad:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:A4:F2:23:89:5E:1C:9F:6C:AC:78:87:7A:BE:BE:BE:A3:44:60:C2
            X509v3 Authority Key Identifier:
                keyid:44:C2:95:CA:6E:E8:CA:E7:00:6B:57:7A:F5:4E:37:66:23:DF:77:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMKVym7oyucAa1d69U43ZiPfd5k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:13:29:c4:c7:85:1f:1a:33:eb:da:21:4f:9b:ab:38:f9:ae:
         2e:42:ea:eb:51:62:8b:d3:11:c3:63:0d:8a:4e:94:5d:67:66:
         b2:c1:4c:35:73:ce:f0:1b:5c:f1:09:d0:d5:14:f3:e3:06:e9:
         38:9c:29:b0:ac:5a:3f:04:d7:8b:89:a2:22:fc:5e:bd:99:74:
         5f:9f:59:92:f4:cf:1a:c5:0d:5a:f1:52:e6:99:54:50:9d:04:
         29:b4:8b:ac:c0:86:df:71:d4:d8:3e:30:3d:74:e9:41:26:f0:
         27:aa:b6:98:f9:71:24:79:40:fc:4e:d8:30:70:08:dd:e3:1f:
         5c:e9:f7:c6:57:41:bf:ec:aa:eb:88:61:5f:1b:ec:47:4b:a0:
         cd:f5:8f:45:55:fa:7d:a0:61:91:60:2a:51:8a:0d:17:db:c4:
         18:3e:84:fe:8e:37:01:f2:21:ea:2e:8c:38:46:62:8a:f5:c0:
         31:f6:93:6d:ce:2f:56:7b:ea:07:83:0a:d1:53:58:0d:51:f6:
         d3:39:fe:ac:93:b8:68:26:18:11:db:f5:85:2c:bd:e5:af:0b:
         f8:01:8b:49:a4:5e:81:c2:24:0f:a6:2c:50:bc:b6:49:9b:69:
         7f:f6:c3:b7:4e:01:31:44:93:49:8a:2f:10:dd:53:14:99:89:
         66:a0:5c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:39:43 2026 by rpki-client