Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.mft
File:                     mBLkkaqmVbYyTbzAz_AKjWMZEHY.mft (raw, json)
Hash identifier:          cEWM2Dan1Vv+aJC+/JKz73yv8maO4wQCutpCV31wOKY=
Subject key identifier:   7A:31:D7:F5:FB:B5:4C:0C:82:81:73:1B:2A:8A:C7:40:3A:1B:6A:D7
Authority key identifier: 98:12:E4:91:AA:A6:55:B6:32:4D:BC:C0:CF:F0:0A:8D:63:19:10:76
Certificate issuer:       /CN=9812e491aaa655b6324dbcc0cff00a8d63191076
Certificate serial:       01A0DCF27114464B80EB6327E08A861C54A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mBLkkaqmVbYyTbzAz_AKjWMZEHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.mft
Manifest number:          17D3
Signing time:             Sat 26 Sep 2026 09:01:11 +0000
Manifest this update:     Sat 26 Sep 2026 09:01:11 +0000
Manifest next update:     Sun 27 Sep 2026 09:01:11 +0000
Files and hashes:         1: 0ZP1YlMOxuFGcwCLj4TKGjg8sfM.roa (hash: VhKxH0518mejo08ToVhYHPgDOHhInMaaDygZ1dTqm3Y=)
                          2: HYc8PMbOFsRAWOME7rl0Q65YY00.roa (hash: 52xFMZrAWpFOsty+L7I8JPsQwCx7ytoOFt1BHFVVDH0=)
                          3: RQbysAt1GgspnWOfwyBwad4EPWw.roa (hash: vfkA0hp4PretiDOgOmfw6YA3bRwSiVq26snYswjOLco=)
                          4: TEEO5INFoFOS-MGXLrvKsA4z6og.roa (hash: T0NYFqzX6is45agO0ikp5meW9VU+vzUTgYc02wqqV0s=)
                          5: kNrttXxRkvGtSS-ZxC6SB63f7PI.roa (hash: ejrGju4Fa38mlMegmP+17sgwP0nRgaGrfvKHwJ3IgXI=)
                          6: mBLkkaqmVbYyTbzAz_AKjWMZEHY.crl (hash: 8Wa2sjslfLTW/iYuDCYd714tL/jG23U6ftGyVQKDIec=)
                          7: p4r6oFVf_7adlAVGWXJxKf8EppM.roa (hash: owCMZC+EfEJsGbITAZGEtQMox//iXNzQga5JAwM4WlA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mBLkkaqmVbYyTbzAz_AKjWMZEHY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dc:f2:71:14:46:4b:80:eb:63:27:e0:8a:86:1c:54:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9812e491aaa655b6324dbcc0cff00a8d63191076
        Validity
            Not Before: Sep 26 09:01:11 2026 GMT
            Not After : Sep 27 09:01:11 2026 GMT
        Subject: CN=7a31d7f5fbb54c0c8281731b2a8ac7403a1b6ad7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:77:f7:cb:83:6d:97:5d:32:c5:87:ea:bd:cd:
                    0b:d8:28:31:fc:00:a1:7e:66:7d:ab:fd:18:b3:dc:
                    00:49:1f:b2:eb:6d:16:72:cb:e7:bd:d8:eb:59:36:
                    f6:7c:00:36:0a:29:d2:f3:6d:96:28:7d:21:e1:e7:
                    14:47:98:36:4f:8f:43:34:43:ba:16:af:0c:ae:67:
                    a3:a5:c1:78:60:ce:88:dd:94:c5:50:9e:13:4a:56:
                    8c:17:6e:47:b0:93:a6:23:f6:d0:18:39:a3:a4:22:
                    88:32:2d:96:c6:4e:1a:d1:49:df:09:ff:bf:92:68:
                    63:50:b7:68:59:b0:f8:6e:3a:08:0e:96:38:12:d4:
                    73:ee:c8:a4:63:f8:fa:09:02:c9:a6:cd:69:2d:f7:
                    63:db:5e:04:34:ef:6f:5a:5a:4f:92:35:f8:6e:23:
                    98:34:93:43:2b:2d:7c:5e:2d:b2:ff:fd:a9:3a:6b:
                    4b:67:77:3d:38:db:53:9b:a0:be:32:55:22:b8:53:
                    39:85:bc:88:75:b8:12:6e:f9:72:8a:1b:6c:1c:b0:
                    d8:20:6b:24:24:20:e9:7a:75:60:46:f3:c3:0f:8c:
                    75:7a:b5:ff:9c:36:32:1c:3a:33:9f:bc:a9:c5:b6:
                    62:8d:14:19:2e:7c:40:71:10:bf:c7:3b:25:21:24:
                    5a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:31:D7:F5:FB:B5:4C:0C:82:81:73:1B:2A:8A:C7:40:3A:1B:6A:D7
            X509v3 Authority Key Identifier:
                keyid:98:12:E4:91:AA:A6:55:B6:32:4D:BC:C0:CF:F0:0A:8D:63:19:10:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mBLkkaqmVbYyTbzAz_AKjWMZEHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:92:47:85:cf:31:b6:36:7b:78:9b:e8:6f:8a:c2:39:b2:09:
         ce:a9:4a:3f:f9:f5:5d:58:d1:ad:c8:d7:6d:c3:a8:48:1f:01:
         9c:ef:05:a5:8b:c3:35:17:ca:d5:30:a8:b5:b2:ed:1e:a3:ed:
         15:58:ed:46:81:3b:66:0e:cd:c9:0b:38:ce:92:1e:60:70:7c:
         5d:4e:de:f7:ea:c2:2e:ae:d5:29:85:98:da:18:f8:d5:61:0c:
         f0:5a:f6:04:2d:a6:34:01:1a:9e:a4:e6:49:ff:08:08:ea:4e:
         ab:d6:d4:c4:fe:13:bb:97:c4:f9:38:51:53:95:a5:12:4e:36:
         b4:a1:ef:fd:30:23:b0:45:50:d5:0e:73:fe:24:7b:68:b5:4c:
         9c:10:8d:b3:3f:e2:98:69:8a:92:4e:ba:9f:b9:08:9c:e0:5f:
         c4:c8:ce:48:98:a0:f1:45:0c:ce:c5:21:1d:8e:89:09:ac:d0:
         2a:2e:52:9c:aa:5b:8f:4d:60:bb:23:81:e9:9c:5e:75:97:84:
         6e:b3:ca:00:c8:1e:9e:6b:9a:f1:b1:91:76:5b:71:a4:4f:8d:
         03:ab:e1:8b:bf:ed:d0:96:9b:d0:2a:d8:c5:16:03:8e:52:65:
         39:fc:e4:97:73:f5:84:52:6f:7b:25:b2:80:a9:79:33:ba:9a:
         ee:48:70:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:56:04 2026 by rpki-client