Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft
File:                     mGihmSu4A33egdDIzcBpX87hfCc.mft (raw, json)
Hash identifier:          tQD93048qVfxNdNC2OHytdR7KD2HZ325ayRZ1wYD9dA=
Subject key identifier:   79:77:FA:33:46:03:EB:36:65:92:A3:40:6B:6F:77:E2:A5:4E:68:EE
Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
Certificate issuer:       /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Certificate serial:       01A1DB3836456989C6FAEABBBB41BD880D54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft
Manifest number:          1504
Signing time:             Sat 14 Nov 2026 18:00:56 +0000
Manifest this update:     Sat 14 Nov 2026 18:00:56 +0000
Manifest next update:     Sun 15 Nov 2026 18:00:56 +0000
Files and hashes:         1: 6qjhP6n8PTmG5EwYI4p5IfBUeKE.roa (hash: VtQ9HXDv+HSEnnvGkS7z9mrjFJA11IlWiHR278OZuhI=)
                          2: 6sDEpQA35ftQgC9cRb2aUxRe15M.roa (hash: 9RYUADj24edFkxjz1HOYfztJjRAg3gUE9hiqhdU7LFs=)
                          3: 9sMrMi9sFO8KgSN1cLbi-u3lvM8.roa (hash: r9Mi0ISmgqXc4MQRndutfvzx3+gJmpftorBgBM19zMU=)
                          4: CV4kyEyPMrqs-gw6w-zTvMjGT5Q.roa (hash: GvwQBFKWqGnALtG2pY9jEuPw2EDgNLgRgYwwOKULAJQ=)
                          5: Cel5VebU9XnFn51DXpiqtq9Yzgo.roa (hash: kkcF/4JG58YgyDcke34pD97l1aVYXpHB/nNUlwXCa6Y=)
                          6: If6LZrm-wB-hhB9C0yFPZo9tbQQ.roa (hash: 4babYaLwms6qTMqkJHs8CX9HE0O90ttnDzXi+y/MYEE=)
                          7: KsjvwRtdC7ElA6WAWYk0fsDa_00.roa (hash: ygwPQfipezTsIcrC5hzYSZFNHgwNil2m9OuOezohF0I=)
                          8: LhR0TaI-3l7vFbmj4OdM5VTznnM.roa (hash: W1ss0alc3roBe8jtNe6rfLpuT1b+r5ADeaOA+2GP03A=)
                          9: NC_YjXdLa8xhILYvWXBGe0NvaiM.roa (hash: r/SF0sm8K5qGW29wU7p/g77ElMwQHbpVRCMPRRlY/i0=)
                          10: RKC_1mqLXMIDbGkqZMEJrCSWeCo.roa (hash: PPGCCrSEwXx1Rr+8w142QOXo4ncdDGVM4h0k0e7qrm8=)
                          11: U6vQ_9-xOxVrenXa0_Xg04rZfLY.roa (hash: OQhVM9/l+WAA3TDjGzNDJCTikubrDwOffydjFZn+MFs=)
                          12: YyEjnHRlckr_V27zZG0mJ7mtsUY.roa (hash: TMaxyAx06Cm6JWuqxguyXAjdJbsUvcCD71I5rrjSBnE=)
                          13: cWj4UtL1sFgLiFO9xaoYNOUaYKA.roa (hash: 9hZRVxjwWZjY8LooPQ/ZoNmU0pcSfdMkHBQ4mNIdQvQ=)
                          14: hxArBBPEsBmh6lA8LmpqsGC-O9Y.roa (hash: p7tJPFgjfUUpJQH1SrbPDkojOBWipCAp1Q6lO2Sk15g=)
                          15: iIxvWcwl88BImtN8o1GvbtwFtug.roa (hash: a5Q+4dXfu6wDxBWXxjzSYqzWruw5vPQbQWVRYFB3/0Q=)
                          16: ix0KuQhI-fe5sCE43gDf8AwDdMk.roa (hash: r5gzLIcFMc4LYxDWUcBWNYQE4pYOB805yyOcqZ4Ft0k=)
                          17: k4v7NOTWjKRyaZtnPspqWpfDi_c.roa (hash: CWRF8EeIQt/IjcYCA1XZwtHZO61wzXfPONIqs+tm1uA=)
                          18: mGihmSu4A33egdDIzcBpX87hfCc.crl (hash: LjBG6T4aAbDd8MfVYQpuR9yTrxC2Q01ozrET6rFpeIk=)
                          19: sf51NOhxVRdedJBM3Z0cnGoghkQ.roa (hash: LN9NTe23NXKUtbp6+7QIyRE2B1TaB0xN6+rtM8kCrNA=)
                          20: ttggVWDiefPyqveIlfoGKCWaja4.roa (hash: NvSwdx11u/EHh453rM9xZTJvAWhbuq2a/Hj0lXbHfsQ=)
                          21: vTt98DamUvECWEMoSR5lw_z_oe4.roa (hash: xsmG4HMvRTP949NLqKrEta8cDRTk+o+O5AMMpfIwVNc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 12:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:db:38:36:45:69:89:c6:fa:ea:bb:bb:41:bd:88:0d:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
        Validity
            Not Before: Nov 14 18:00:56 2026 GMT
            Not After : Nov 15 18:00:56 2026 GMT
        Subject: CN=7977fa334603eb366592a3406b6f77e2a54e68ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:db:40:80:75:aa:26:26:5d:3d:6f:2b:d9:b2:
                    7b:92:20:61:d2:06:e1:7d:96:68:2b:43:f3:9f:55:
                    62:ea:28:da:a6:9c:97:9f:32:9c:47:07:25:2a:ba:
                    9e:10:3b:03:7b:bd:89:09:0c:7b:d2:70:55:d6:c2:
                    1e:25:2b:ab:d4:70:6e:36:06:37:8b:82:e0:01:a2:
                    b2:08:a3:a0:ec:2b:89:06:9a:15:db:f4:cb:2c:f6:
                    05:48:be:e6:ee:b3:e6:e2:6c:f4:3c:e2:cc:f6:89:
                    30:58:69:2c:23:9e:dc:f0:f6:71:82:7e:a1:03:9e:
                    62:1d:39:7e:41:df:9b:89:a2:8c:a6:ed:76:12:c4:
                    8c:ee:a2:30:a8:10:20:67:8e:7f:29:9c:0e:6c:2f:
                    51:05:c8:a3:3c:d3:62:32:11:fd:66:5e:aa:56:a8:
                    3a:51:12:91:20:29:6d:36:ed:a8:1f:99:3f:2c:21:
                    8a:7f:d5:17:15:b4:8c:61:c1:b9:f1:cd:81:65:f4:
                    f0:b9:87:98:97:43:2d:bd:d1:82:84:b5:93:83:10:
                    65:39:10:4f:73:64:f4:a2:56:74:1b:61:87:73:22:
                    f9:5a:b6:8f:12:69:c7:6a:29:87:85:2e:29:dd:1d:
                    7e:c5:8b:d8:49:2c:87:64:82:68:83:d0:b1:d2:df:
                    48:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:77:FA:33:46:03:EB:36:65:92:A3:40:6B:6F:77:E2:A5:4E:68:EE
            X509v3 Authority Key Identifier:
                keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d6:1a:e8:d6:fc:0f:e5:ff:43:ac:cd:dd:37:1c:f0:ba:ab:32:
         08:10:0c:4d:f2:be:82:c0:87:c5:a6:e9:23:be:6c:6a:ad:fd:
         e8:d5:c3:55:2e:a0:0d:e9:fb:93:63:1d:a5:17:07:37:6b:81:
         a3:af:c3:d1:27:f9:90:15:2d:53:29:0a:56:a1:2e:09:b4:d1:
         43:bb:18:73:05:17:73:bf:14:b6:23:ac:20:5c:74:8d:b8:c8:
         e5:4e:17:8d:a1:05:3c:49:4a:b1:0d:fb:c6:9b:13:dc:c2:07:
         08:14:8e:34:d6:d2:88:ec:b4:cd:06:f8:3d:cd:87:ac:4d:18:
         8d:b0:1c:87:b4:bf:e5:e0:8b:91:b2:db:33:18:66:09:52:99:
         07:f8:77:f9:d2:ce:7b:59:07:0e:eb:2c:22:f3:d9:c2:79:d3:
         87:8c:ba:de:37:ba:69:b9:04:68:c5:4d:9c:aa:62:4f:1e:38:
         83:ef:59:11:a1:21:c9:48:57:9d:5f:8c:92:62:5a:b6:0a:f4:
         f1:25:d7:25:49:31:f3:48:d8:99:63:ce:4e:65:db:63:d6:63:
         62:eb:a8:e1:94:36:a6:b9:15:00:e6:53:08:35:26:ca:2f:0d:
         4d:1d:a7:ba:05:6f:07:eb:f6:0e:10:d8:9d:69:f0:ce:1c:9e:
         d4:11:35:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:38:06 2026 by rpki-client