Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft
File:                     mGihmSu4A33egdDIzcBpX87hfCc.mft (raw, json)
Hash identifier:          ABqngU+iRWCi1vt7GCMUxJBJ0f7QEiBuIBdkyr4eKms=
Subject key identifier:   ED:3E:D3:60:0C:DE:CB:21:BC:86:E1:BF:41:18:36:28:76:3E:27:6A
Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
Certificate issuer:       /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Certificate serial:       01A0CF363FF08AB5A0C6CBF950BC47149D6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft
Manifest number:          1479
Signing time:             Wed 23 Sep 2026 17:00:33 +0000
Manifest this update:     Wed 23 Sep 2026 17:00:33 +0000
Manifest next update:     Thu 24 Sep 2026 17:00:33 +0000
Files and hashes:         1: 6sDEpQA35ftQgC9cRb2aUxRe15M.roa (hash: 9RYUADj24edFkxjz1HOYfztJjRAg3gUE9hiqhdU7LFs=)
                          2: 9sMrMi9sFO8KgSN1cLbi-u3lvM8.roa (hash: r9Mi0ISmgqXc4MQRndutfvzx3+gJmpftorBgBM19zMU=)
                          3: CV4kyEyPMrqs-gw6w-zTvMjGT5Q.roa (hash: GvwQBFKWqGnALtG2pY9jEuPw2EDgNLgRgYwwOKULAJQ=)
                          4: Cel5VebU9XnFn51DXpiqtq9Yzgo.roa (hash: kkcF/4JG58YgyDcke34pD97l1aVYXpHB/nNUlwXCa6Y=)
                          5: If6LZrm-wB-hhB9C0yFPZo9tbQQ.roa (hash: 4babYaLwms6qTMqkJHs8CX9HE0O90ttnDzXi+y/MYEE=)
                          6: KsjvwRtdC7ElA6WAWYk0fsDa_00.roa (hash: ygwPQfipezTsIcrC5hzYSZFNHgwNil2m9OuOezohF0I=)
                          7: LhR0TaI-3l7vFbmj4OdM5VTznnM.roa (hash: W1ss0alc3roBe8jtNe6rfLpuT1b+r5ADeaOA+2GP03A=)
                          8: RKC_1mqLXMIDbGkqZMEJrCSWeCo.roa (hash: PPGCCrSEwXx1Rr+8w142QOXo4ncdDGVM4h0k0e7qrm8=)
                          9: U6vQ_9-xOxVrenXa0_Xg04rZfLY.roa (hash: OQhVM9/l+WAA3TDjGzNDJCTikubrDwOffydjFZn+MFs=)
                          10: UUD9roNkskiwye2tqwssSFEocBY.roa (hash: uz8OsG4t9MjUUcUflz9xYFC0CJuPcU2Ss0OyzWUNNtw=)
                          11: W4qxGEOnhck0eA0os9nmiLaPXEU.roa (hash: QlC0nvvSkC3Gr5lT9KAlzmA+mhP9wXRsj529IDFwxxk=)
                          12: YyEjnHRlckr_V27zZG0mJ7mtsUY.roa (hash: TMaxyAx06Cm6JWuqxguyXAjdJbsUvcCD71I5rrjSBnE=)
                          13: cWj4UtL1sFgLiFO9xaoYNOUaYKA.roa (hash: 9hZRVxjwWZjY8LooPQ/ZoNmU0pcSfdMkHBQ4mNIdQvQ=)
                          14: hxArBBPEsBmh6lA8LmpqsGC-O9Y.roa (hash: p7tJPFgjfUUpJQH1SrbPDkojOBWipCAp1Q6lO2Sk15g=)
                          15: iIxvWcwl88BImtN8o1GvbtwFtug.roa (hash: a5Q+4dXfu6wDxBWXxjzSYqzWruw5vPQbQWVRYFB3/0Q=)
                          16: ix0KuQhI-fe5sCE43gDf8AwDdMk.roa (hash: r5gzLIcFMc4LYxDWUcBWNYQE4pYOB805yyOcqZ4Ft0k=)
                          17: k4v7NOTWjKRyaZtnPspqWpfDi_c.roa (hash: CWRF8EeIQt/IjcYCA1XZwtHZO61wzXfPONIqs+tm1uA=)
                          18: mGihmSu4A33egdDIzcBpX87hfCc.crl (hash: IvzmZ74lBOVvPKA9h0YhCS8gAxk4Jmc7e73dst3jKQk=)
                          19: sf51NOhxVRdedJBM3Z0cnGoghkQ.roa (hash: LN9NTe23NXKUtbp6+7QIyRE2B1TaB0xN6+rtM8kCrNA=)
                          20: ttggVWDiefPyqveIlfoGKCWaja4.roa (hash: NvSwdx11u/EHh453rM9xZTJvAWhbuq2a/Hj0lXbHfsQ=)
                          21: vTt98DamUvECWEMoSR5lw_z_oe4.roa (hash: xsmG4HMvRTP949NLqKrEta8cDRTk+o+O5AMMpfIwVNc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cf:36:3f:f0:8a:b5:a0:c6:cb:f9:50:bc:47:14:9d:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
        Validity
            Not Before: Sep 23 17:00:33 2026 GMT
            Not After : Sep 24 17:00:33 2026 GMT
        Subject: CN=ed3ed3600cdecb21bc86e1bf41183628763e276a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:cc:eb:99:89:2d:81:a3:c0:20:8a:89:ac:5b:
                    59:66:96:49:a0:88:5e:c3:ce:67:b7:3c:fe:8e:9f:
                    1a:dd:a1:a2:c8:46:c6:c6:a4:84:fd:8b:d8:91:99:
                    82:20:39:61:09:bb:e0:6c:d0:e5:63:ad:39:2e:b5:
                    aa:5d:df:0e:ba:2b:1c:1f:f9:29:71:0c:c9:37:0c:
                    be:18:0d:b7:7d:1a:4a:37:13:9b:ed:ca:6a:9a:17:
                    d6:00:8b:91:69:e7:bc:64:35:aa:93:f9:18:01:a1:
                    d0:d9:9f:61:53:8b:f8:17:ea:5a:94:d9:2c:2d:d1:
                    71:f0:f2:a4:e9:da:1d:36:9f:e3:70:9f:bb:3b:a8:
                    3b:6f:62:68:2c:3a:f8:21:c4:5d:cc:7c:23:0d:0a:
                    c0:f3:58:8a:b2:32:10:7e:13:06:f4:23:42:3a:33:
                    18:a1:1c:ef:81:15:15:ac:a6:90:95:fb:26:ee:2c:
                    49:8d:e6:ee:5d:62:f4:61:c8:b4:d0:99:6d:f0:7c:
                    26:84:f3:4c:51:d4:51:a6:42:7c:7b:e8:f7:83:22:
                    bf:80:dd:82:c7:f0:c8:a7:ca:76:cc:8f:95:37:f0:
                    25:99:ca:b8:61:ac:38:da:9d:c2:ec:b2:b9:be:2c:
                    ce:e7:29:80:46:97:a4:d4:8c:0d:d7:53:72:56:dd:
                    7f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:3E:D3:60:0C:DE:CB:21:BC:86:E1:BF:41:18:36:28:76:3E:27:6A
            X509v3 Authority Key Identifier:
                keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:39:a4:f1:c7:b4:98:f8:bc:40:35:06:50:de:c3:90:de:b6:
         fc:91:e5:ec:6d:d3:4b:f2:01:eb:39:23:5a:96:a3:22:b6:6c:
         42:56:21:cc:26:10:1a:6e:65:c9:5a:f7:35:5d:09:43:b3:36:
         d8:fe:59:1f:ec:b4:1a:7c:0a:a6:78:9d:5b:52:6c:74:83:76:
         8e:ca:ae:eb:33:12:28:af:9c:fe:d0:9d:98:dd:66:a5:5f:93:
         11:fb:f9:22:cf:cb:db:fa:b2:3d:40:f4:39:d3:e5:bd:ba:ce:
         2e:3a:76:80:55:02:d7:68:33:d8:b6:f9:05:55:c0:b7:00:ac:
         92:d0:80:a0:54:a3:a7:55:ee:7b:51:5e:25:31:92:a5:da:6c:
         e3:c6:db:c7:59:75:98:96:a7:3c:76:7b:e7:7e:9f:e2:a8:71:
         2f:75:05:c8:a8:cc:47:28:28:6a:23:5a:c1:7f:39:e8:e0:c1:
         e8:38:4e:95:86:59:bb:58:9b:b8:78:b3:2f:c0:39:ab:79:1c:
         15:5b:64:bc:f6:5a:3f:8b:91:68:8f:a2:96:59:a3:f3:99:a7:
         4e:c3:62:a6:42:59:44:eb:b5:65:dd:da:1d:c5:9f:a7:73:5a:
         67:75:e8:23:b2:89:6d:02:33:a7:e7:fa:5f:d8:43:5a:f1:8b:
         28:9d:33:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 21:48:53 2026 by rpki-client