Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft
File:                     mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft (raw, json)
Hash identifier:          sJav9jEyuD39U5U7TLZzNDwdXsB3hEgrsmDk4CBwhHM=
Subject key identifier:   C4:8A:3E:11:34:20:B0:76:DC:95:B2:A3:F4:DA:CB:A1:FF:B4:AB:C4
Authority key identifier: 98:2B:56:93:B8:26:1F:B5:39:FE:A3:B1:3C:81:71:15:F0:0C:18:DF
Certificate issuer:       /CN=982b5693b8261fb539fea3b13c817115f00c18df
Certificate serial:       01A0DD60BCDCB9328F2210DFA7830DEC9F04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mCtWk7gmH7U5_qOxPIFxFfAMGN8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft
Manifest number:          09EA
Signing time:             Sat 26 Sep 2026 11:01:39 +0000
Manifest this update:     Sat 26 Sep 2026 11:01:39 +0000
Manifest next update:     Sun 27 Sep 2026 11:01:39 +0000
Files and hashes:         1: aVRqpMHpdie8kn2Zv8LidnFaG0U.roa (hash: WAT/5tpdgHMh60hpQbSEIRGs2arCro1xYD6u1qjuT7I=)
                          2: mCtWk7gmH7U5_qOxPIFxFfAMGN8.crl (hash: uafED/KFjGZ8bsD14gEPrb2EVPzr34mUqmmkEhugoVM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mCtWk7gmH7U5_qOxPIFxFfAMGN8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 11:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dd:60:bc:dc:b9:32:8f:22:10:df:a7:83:0d:ec:9f:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=982b5693b8261fb539fea3b13c817115f00c18df
        Validity
            Not Before: Sep 26 11:01:39 2026 GMT
            Not After : Sep 27 11:01:39 2026 GMT
        Subject: CN=c48a3e113420b076dc95b2a3f4dacba1ffb4abc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:74:cd:cb:f8:b8:9a:83:46:b3:a3:bb:05:c4:
                    8a:02:9f:ac:62:30:27:ad:89:ac:b3:6e:d7:a6:70:
                    bb:2f:7d:e2:2e:5d:d8:5d:df:d1:a1:fd:7a:0f:af:
                    8d:46:51:b9:4f:c7:59:50:51:91:e9:e1:1f:b5:fb:
                    f6:3b:b6:94:8b:68:6c:8d:31:16:62:ec:8c:96:b3:
                    1e:31:23:9c:8b:37:78:d0:5c:c1:54:d5:03:5d:d4:
                    d5:c8:87:cc:27:d7:3c:78:c4:4f:31:94:5c:ab:27:
                    cc:21:d0:87:e3:0d:c4:f4:c7:6f:3e:b5:92:5c:9a:
                    cb:67:87:ec:ac:66:a3:a5:66:2a:34:61:ac:8f:81:
                    26:d9:d9:5c:2b:fe:59:9e:77:6d:29:a8:ed:3b:94:
                    2c:1f:3b:d1:4a:8e:3d:18:de:a5:94:48:eb:23:7f:
                    3b:67:32:7f:fc:6a:15:04:f7:3b:07:8f:bb:9e:88:
                    e3:2e:4d:1e:69:7c:03:19:8e:03:f7:f7:4a:6d:b0:
                    21:ae:20:8d:1e:8e:cf:ce:01:ca:5b:77:84:b3:6c:
                    fa:d0:df:58:01:e5:a9:6a:fa:ff:12:80:4f:4b:24:
                    c8:f3:b7:de:1a:14:69:9f:35:67:31:92:b9:9d:d5:
                    b7:37:9a:a5:6c:5b:a5:8c:ca:56:f9:06:d0:b3:be:
                    16:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:8A:3E:11:34:20:B0:76:DC:95:B2:A3:F4:DA:CB:A1:FF:B4:AB:C4
            X509v3 Authority Key Identifier:
                keyid:98:2B:56:93:B8:26:1F:B5:39:FE:A3:B1:3C:81:71:15:F0:0C:18:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCtWk7gmH7U5_qOxPIFxFfAMGN8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:98:fd:8a:59:89:f0:4b:58:92:7f:1a:ef:63:e7:6c:69:61:
         88:48:32:56:9a:cc:6b:b5:25:42:c1:3b:6d:53:69:2e:cd:5d:
         62:68:14:78:d0:82:81:3b:a4:6c:8a:6c:3a:29:54:55:52:85:
         df:cf:f2:b1:78:75:d7:17:dd:e1:e8:fd:4d:70:a6:9c:62:72:
         b5:1d:8c:56:ac:88:03:92:aa:33:61:db:95:71:e7:74:ee:90:
         e0:8d:6c:3c:fb:7e:0d:11:5e:4b:a4:83:09:9d:2d:10:ca:52:
         d5:37:b9:41:18:5b:44:6f:58:ab:64:45:3c:97:88:0f:0d:02:
         fb:3e:31:b2:19:3d:0c:a3:3e:4f:b2:f4:2f:80:79:22:b5:e7:
         4d:42:94:4b:29:4f:64:99:a4:fe:9b:7d:f0:fc:ca:d2:f6:df:
         7b:7a:a6:a3:50:92:cb:c5:55:77:03:3a:6b:54:f3:2c:c5:19:
         b5:da:c7:dd:3c:31:1e:59:ea:f4:52:5c:4b:42:ef:08:19:52:
         24:12:25:73:1d:fb:a6:d7:f9:91:36:fe:de:a1:19:a8:fb:d1:
         c4:f3:a8:95:b9:cf:76:1e:03:fd:e1:40:92:31:48:47:ad:60:
         31:7e:e9:8c:23:a5:12:65:bf:b1:84:38:73:49:fc:41:7f:20:
         b9:96:bf:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:22:32 2026 by rpki-client