Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/mJOu9ftQfvDjW2gtqo56vAPDoq8.mft
File:                     mJOu9ftQfvDjW2gtqo56vAPDoq8.mft (raw, json)
Hash identifier:          coSRnGBBhY54WocCKp8EP9BgRFr44AtCVYyZTQ0dp8w=
Subject key identifier:   0B:36:53:09:CC:7D:AD:EC:F6:AB:66:60:51:97:0C:15:DD:BF:FD:8C
Authority key identifier: 98:93:AE:F5:FB:50:7E:F0:E3:5B:68:2D:AA:8E:7A:BC:03:C3:A2:AF
Certificate issuer:       /CN=9893aef5fb507ef0e35b682daa8e7abc03c3a2af
Certificate serial:       01A0DBA8ED95B473BA0F643C692F6B146C5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mJOu9ftQfvDjW2gtqo56vAPDoq8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/mJOu9ftQfvDjW2gtqo56vAPDoq8.mft
Manifest number:          EB
Signing time:             Sat 26 Sep 2026 03:01:16 +0000
Manifest this update:     Sat 26 Sep 2026 03:01:16 +0000
Manifest next update:     Sun 27 Sep 2026 03:01:16 +0000
Files and hashes:         1: kVvC-_-04DQXpYRg6lgLRiqfMyM.roa (hash: wW4B7Glo9u2CvT2Wk4ZEfWPagqRobvUbw8zAr1FyeoA=)
                          2: mJOu9ftQfvDjW2gtqo56vAPDoq8.crl (hash: YcLaldPKgs8AGwIe3is7x4FtK85DoEFzJwZKs0WP/Uc=)
                          3: yF8L1puSFQ1FrD58Xc4G7CVaa-4.roa (hash: UoXPx27v5kpQSQjO96icjRk2Ax/d8OdPzqWgLXo6hq4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/mJOu9ftQfvDjW2gtqo56vAPDoq8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/mJOu9ftQfvDjW2gtqo56vAPDoq8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mJOu9ftQfvDjW2gtqo56vAPDoq8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:db:a8:ed:95:b4:73:ba:0f:64:3c:69:2f:6b:14:6c:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9893aef5fb507ef0e35b682daa8e7abc03c3a2af
        Validity
            Not Before: Sep 26 03:01:16 2026 GMT
            Not After : Sep 27 03:01:16 2026 GMT
        Subject: CN=0b365309cc7dadecf6ab666051970c15ddbffd8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a2:e7:ca:ea:0a:b3:93:64:75:36:70:2f:5a:
                    58:a2:79:da:73:bc:51:ba:f8:b0:d1:83:3e:76:af:
                    ca:13:4f:d0:67:13:bf:52:8e:ed:c5:36:82:28:7a:
                    77:2c:43:2e:a4:73:40:31:df:90:8a:d6:33:85:b8:
                    5e:69:ef:ba:d2:77:c8:d8:a4:e2:70:9c:05:33:fe:
                    5e:c3:17:c6:9e:29:6c:3c:74:86:99:95:6c:c4:9e:
                    a3:86:61:56:d7:2a:91:92:c6:d6:c2:fa:24:99:df:
                    4c:57:3b:64:0d:d5:08:dc:6c:13:4c:52:d8:8d:da:
                    8f:81:3f:87:40:d5:82:e8:07:c7:82:56:f1:ce:f5:
                    cf:32:ae:13:e3:2d:67:ac:d9:f2:84:60:69:87:d4:
                    c5:bd:4c:d2:d4:39:db:69:5e:f4:10:55:f1:ff:8c:
                    7c:85:68:6f:80:df:51:fa:47:71:71:5e:b9:1c:b1:
                    d0:6b:64:f8:86:2e:53:4c:64:b8:11:fd:ea:f2:97:
                    29:cd:8e:f3:ae:70:5e:e5:c0:f5:dc:e6:c2:89:0e:
                    72:d2:4b:d4:71:c5:1e:1a:1e:e6:77:bf:c8:7f:f1:
                    a8:b2:03:0e:66:c5:aa:a8:8a:18:2d:a1:c5:55:fb:
                    d9:d5:30:26:54:32:72:4c:08:aa:e5:9b:f8:07:13:
                    95:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:36:53:09:CC:7D:AD:EC:F6:AB:66:60:51:97:0C:15:DD:BF:FD:8C
            X509v3 Authority Key Identifier:
                keyid:98:93:AE:F5:FB:50:7E:F0:E3:5B:68:2D:AA:8E:7A:BC:03:C3:A2:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJOu9ftQfvDjW2gtqo56vAPDoq8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/mJOu9ftQfvDjW2gtqo56vAPDoq8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/mJOu9ftQfvDjW2gtqo56vAPDoq8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:8d:0b:48:19:e7:4c:36:a5:22:49:76:dc:9e:20:cc:25:a5:
         9e:21:0e:84:f0:11:6f:b7:09:2f:08:5c:c8:44:10:37:7c:1e:
         81:5c:6d:48:d1:14:67:1b:84:fa:32:10:85:6f:4d:a3:26:7f:
         d9:1c:57:af:24:1f:e9:32:44:5c:08:13:62:95:12:5c:1e:97:
         41:97:82:fc:6e:6f:11:68:11:11:38:3a:1f:39:13:ee:fa:af:
         5c:48:c2:8e:a9:5d:1f:a0:37:ee:bc:0f:69:00:7c:d5:a5:12:
         8e:f8:99:9b:9c:18:d7:01:2f:36:7b:82:cb:02:c6:6a:0e:a3:
         c8:30:56:b1:54:fa:a6:0c:77:fb:f5:6d:b9:f9:c7:65:91:7a:
         29:c1:a8:da:af:32:df:d4:a5:bb:f6:08:29:38:e3:a6:e5:af:
         7a:c6:f3:81:85:c7:a8:df:38:e4:00:a9:60:09:bb:23:4b:c8:
         3a:a3:3b:23:52:d2:58:de:4e:43:22:53:0e:e4:61:e5:ff:17:
         24:7b:a6:17:83:49:af:bc:36:2c:54:48:39:91:e6:d0:5b:c7:
         08:83:41:13:39:1d:50:67:ab:c8:e1:5c:48:c4:74:f6:a7:5a:
         53:64:4a:0c:fe:4e:a4:dc:7a:5f:80:f9:ad:8d:35:5a:9b:25:
         42:42:ca:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:24:51 2026 by rpki-client