Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.mft
File:                     MVipNBic8FiR-MTlmdC5iVfplyk.mft (raw, json)
Hash identifier:          m9+4A5vGLtJL6uN6QVozDOWSq16+GTvXN+gE+KVSqqI=
Subject key identifier:   C0:71:D6:80:BA:7F:40:CB:E6:90:0A:B7:7B:79:1E:29:E5:D1:8B:15
Authority key identifier: 31:58:A9:34:18:9C:F0:58:91:F8:C4:E5:99:D0:B9:89:57:E9:97:29
Certificate issuer:       /CN=3158a934189cf05891f8c4e599d0b98957e99729
Certificate serial:       01A0D49468DBA3BD18BB7D6172A86290C15B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MVipNBic8FiR-MTlmdC5iVfplyk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.mft
Manifest number:          0928
Signing time:             Thu 24 Sep 2026 18:01:30 +0000
Manifest this update:     Thu 24 Sep 2026 18:01:30 +0000
Manifest next update:     Fri 25 Sep 2026 18:01:30 +0000
Files and hashes:         1: MVipNBic8FiR-MTlmdC5iVfplyk.crl (hash: VoNEAJHWLQW5MVkHSjtQpZDJvHHyhQLI2zZXfLa2zj8=)
                          2: SoUQ5tjPimIs5vL0jQz1k3-Y_k4.roa (hash: rxeG5Q9fjMcRXTA3/mQpeB3InL8UbHM8sXy68JYVcRc=)
                          3: WN6nm9P1utuZWbfPP4NpFvTEUfc.roa (hash: vxFDJKyu6Fl9t1C3JXTJl+d0N1fXG6sGHHUW42DW59s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MVipNBic8FiR-MTlmdC5iVfplyk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 18:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d4:94:68:db:a3:bd:18:bb:7d:61:72:a8:62:90:c1:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3158a934189cf05891f8c4e599d0b98957e99729
        Validity
            Not Before: Sep 24 18:01:30 2026 GMT
            Not After : Sep 25 18:01:30 2026 GMT
        Subject: CN=c071d680ba7f40cbe6900ab77b791e29e5d18b15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0a:7a:f8:74:8b:6e:74:df:e7:e4:95:83:a5:
                    a9:0d:c5:4e:6b:90:58:f2:b4:63:e9:18:f1:a1:32:
                    63:d3:ec:3b:ea:d1:54:cd:35:83:b7:e4:31:09:ea:
                    64:87:f6:78:7d:34:cb:23:d6:b5:ec:da:4c:2e:d6:
                    79:d2:01:31:f1:ac:49:99:1d:85:63:15:a6:ff:4e:
                    c0:6e:b5:f6:6d:6f:7b:70:b6:f3:6b:87:fb:af:34:
                    4b:48:f1:01:2c:24:6a:d5:b9:56:c5:99:1e:76:9d:
                    d1:83:22:31:e4:c5:e9:48:6e:b3:5b:d6:30:58:94:
                    7d:bd:88:38:fa:a9:af:50:28:b3:aa:66:ce:7a:69:
                    06:15:e9:d1:e0:67:a0:08:92:87:fb:44:59:4e:74:
                    84:d0:18:0e:7e:12:68:71:29:a7:bb:c9:07:c5:5a:
                    35:48:cf:0c:4b:27:15:02:d0:cb:5f:f0:60:d4:65:
                    c1:d7:d5:c9:e5:6a:44:36:dd:f6:1c:be:54:de:ae:
                    25:48:f7:55:1b:ca:e2:0b:47:24:39:bd:52:87:c3:
                    b9:04:cb:78:d9:dc:15:2c:66:c4:c6:7d:92:37:99:
                    9e:ce:ab:6e:5d:b1:c4:50:aa:89:04:24:aa:42:5c:
                    53:a2:f1:e4:c1:49:8a:40:94:08:62:f3:95:43:55:
                    63:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:71:D6:80:BA:7F:40:CB:E6:90:0A:B7:7B:79:1E:29:E5:D1:8B:15
            X509v3 Authority Key Identifier:
                keyid:31:58:A9:34:18:9C:F0:58:91:F8:C4:E5:99:D0:B9:89:57:E9:97:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MVipNBic8FiR-MTlmdC5iVfplyk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:43:6b:7c:0b:6f:56:24:c6:06:f9:c1:b2:46:9c:81:0a:6b:
         cf:7c:18:77:35:54:03:e9:4e:1c:d2:3d:88:a0:17:a4:0f:88:
         f5:14:d8:cd:5a:56:fb:2c:ae:2f:ea:f4:cb:d0:c0:3b:6a:f4:
         2c:15:de:2b:95:dd:74:6c:94:a2:26:9e:92:cb:c4:f9:e4:ba:
         fc:ac:0d:7c:bb:2a:f9:a6:bc:94:80:82:69:6b:91:8f:71:41:
         42:c5:cb:8e:24:bb:a2:ae:1f:04:9f:78:eb:aa:fd:22:e3:a5:
         42:1a:aa:cc:65:f3:07:e5:d8:68:33:46:bb:8c:aa:18:11:a2:
         13:be:8f:7f:2d:8a:10:89:1f:6b:2e:5a:80:96:9c:63:08:bc:
         3c:21:06:ee:2b:44:18:c6:b6:2f:62:89:2a:d3:7d:d9:71:c3:
         7b:fc:f0:45:05:fb:c9:42:95:5a:79:1d:e0:98:59:8a:c4:89:
         f6:0d:b6:9e:fc:bb:14:71:e2:5e:66:2d:00:d4:ee:49:31:85:
         12:29:ea:08:a4:69:df:42:20:32:54:90:b6:63:1f:f8:5d:0d:
         fc:58:9b:e7:2a:cf:18:0c:93:f6:2d:3c:18:ba:47:08:08:35:
         d2:5f:2e:74:19:b7:37:73:8f:a7:54:ca:ed:f2:53:cc:b8:5b:
         cf:99:7c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:52:39 2026 by rpki-client