Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/855ad6-a84f-4f01-bfc8-d3fd91ac7c9f/1/MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.mft
File:                     MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.mft (raw, json)
Hash identifier:          AjhUsLXJT2KVIDv6Er0WVKbSuSoUYKNWzYdehrXwiWM=
Subject key identifier:   9F:DE:BC:DF:7B:28:3E:72:89:40:49:BC:86:5D:71:F5:E3:16:4C:1F
Authority key identifier: 31:25:2C:E3:07:78:1D:03:19:FC:D7:49:4F:A6:4F:26:04:50:16:AC
Certificate issuer:       /CN=31252ce307781d0319fcd7494fa64f26045016ac
Certificate serial:       01A0D5702426255E45EF72D8283DC1075018
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/855ad6-a84f-4f01-bfc8-d3fd91ac7c9f/1/MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.mft
Manifest number:          0325
Signing time:             Thu 24 Sep 2026 22:01:31 +0000
Manifest this update:     Thu 24 Sep 2026 22:01:31 +0000
Manifest next update:     Fri 25 Sep 2026 22:01:31 +0000
Files and hashes:         1: MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.crl (hash: uZYZLvMTU+/qDOdQyWeopou5T9huIGW0Er86XU2klRI=)
                          2: aIZV0uRK5CsOfYDj0JIzyKbeZkw.roa (hash: 4yLd5mUThQNWdy1JWFgNhTCT5EuvmfZ9l6+q6YACcrQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/855ad6-a84f-4f01-bfc8-d3fd91ac7c9f/1/MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/855ad6-a84f-4f01-bfc8-d3fd91ac7c9f/1/MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d5:70:24:26:25:5e:45:ef:72:d8:28:3d:c1:07:50:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31252ce307781d0319fcd7494fa64f26045016ac
        Validity
            Not Before: Sep 24 22:01:31 2026 GMT
            Not After : Sep 25 22:01:31 2026 GMT
        Subject: CN=9fdebcdf7b283e72894049bc865d71f5e3164c1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:44:7a:ec:3b:32:88:63:73:e8:e3:ee:08:93:
                    2a:17:ec:df:ef:22:4e:b8:2f:6b:6c:fb:2c:b2:0d:
                    8f:dd:0b:ff:0b:f7:13:80:13:83:28:15:bc:8d:65:
                    fa:c9:f1:43:ee:7f:1d:c6:bc:b2:ab:47:59:64:13:
                    37:d7:6c:bf:e9:91:ea:98:1e:8c:67:47:67:10:63:
                    fd:d5:2b:f8:91:c1:07:82:7a:e9:5c:7d:42:06:a2:
                    43:08:7e:4d:ae:f5:2f:9d:61:42:d0:80:c8:fb:a5:
                    b8:e4:e1:18:5a:82:de:84:d3:e4:be:d0:36:99:1d:
                    1a:78:e7:4c:6a:25:79:c8:44:81:0f:73:85:30:d5:
                    2a:ba:dc:43:f6:b9:60:dd:21:9c:f1:04:a7:66:34:
                    3d:12:02:5a:16:34:2b:a8:f1:d3:74:6f:d6:4b:45:
                    75:1d:62:02:68:2e:16:1e:20:e5:c4:25:b0:7c:1b:
                    20:a9:a2:47:29:85:76:8a:1f:59:36:bc:c1:22:e7:
                    58:d6:25:d8:9c:b2:86:13:b5:1f:91:c4:4b:f2:48:
                    5a:33:56:7b:55:bc:12:a2:b6:fe:79:0c:13:da:a0:
                    d5:61:b3:c8:34:f9:55:91:99:bf:9f:20:3a:84:c6:
                    13:21:32:b0:d6:15:13:91:e2:58:2a:5c:de:91:74:
                    a8:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:DE:BC:DF:7B:28:3E:72:89:40:49:BC:86:5D:71:F5:E3:16:4C:1F
            X509v3 Authority Key Identifier:
                keyid:31:25:2C:E3:07:78:1D:03:19:FC:D7:49:4F:A6:4F:26:04:50:16:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/855ad6-a84f-4f01-bfc8-d3fd91ac7c9f/1/MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/855ad6-a84f-4f01-bfc8-d3fd91ac7c9f/1/MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:27:f5:b1:a6:88:3a:a7:8e:f8:7a:ed:8d:c7:20:4f:54:71:
         a5:3c:e4:13:0a:73:ef:56:86:b7:dd:e2:2f:27:ba:1f:bf:22:
         4b:56:46:31:c8:7f:33:6f:20:a4:2a:09:70:b1:4a:71:12:d5:
         05:16:21:09:68:de:8e:ea:1c:7a:39:51:fc:5d:5c:d6:87:8d:
         52:06:54:9d:30:22:aa:ba:cb:9d:07:9a:ed:0b:ae:b5:26:ed:
         c9:06:e8:ce:f6:d1:ff:a9:9c:ba:c8:71:89:5a:1e:a9:70:a1:
         9d:ed:ea:d7:e2:86:ed:6b:84:3e:d8:2a:8b:f2:2d:d9:24:dd:
         a1:9b:4c:f0:d7:dd:c2:98:0d:c5:4d:65:74:cc:4f:be:bd:70:
         be:0f:ba:1a:20:ef:8b:0e:e0:2d:47:34:3c:a0:33:e5:18:b5:
         e2:dc:5d:f2:3c:f3:a8:27:08:78:dc:27:b4:5e:f2:28:cf:0d:
         11:11:c9:df:e2:d3:65:e1:6e:cb:34:0f:a0:38:ad:5d:17:20:
         48:2b:20:6c:48:3c:e0:33:ba:7b:9a:19:64:2b:de:98:9f:16:
         33:09:e1:ec:55:fd:88:ed:22:36:7e:d6:83:25:ff:77:06:1d:
         68:c6:da:74:dd:f4:e8:05:87:36:79:4f:20:e1:fd:60:a9:19:
         bc:a4:7f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:47:01 2026 by rpki-client