Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/ccdc8f-285d-43b6-8def-4b39fcabc371/1/MBYKH8YoL1eCp6in6g7SBrlEQSM.mft
File:                     MBYKH8YoL1eCp6in6g7SBrlEQSM.mft (raw, json)
Hash identifier:          txMF3Acd6+bBx+/p7V1agAU+uNk37Lwg9JH3GzCiZpE=
Subject key identifier:   7C:57:7A:E2:34:60:82:93:82:0A:34:58:42:FF:85:CB:70:A9:4D:05
Authority key identifier: 30:16:0A:1F:C6:28:2F:57:82:A7:A8:A7:EA:0E:D2:06:B9:44:41:23
Certificate issuer:       /CN=30160a1fc6282f5782a7a8a7ea0ed206b9444123
Certificate serial:       01A1076EBAB3861CEE1673A4B93EFEAF334B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MBYKH8YoL1eCp6in6g7SBrlEQSM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/ccdc8f-285d-43b6-8def-4b39fcabc371/1/MBYKH8YoL1eCp6in6g7SBrlEQSM.mft
Manifest number:          09D8
Signing time:             Sun 04 Oct 2026 15:00:59 +0000
Manifest this update:     Sun 04 Oct 2026 15:00:59 +0000
Manifest next update:     Mon 05 Oct 2026 15:00:59 +0000
Files and hashes:         1: 1SJhyocRudC4i3a4wpxvnXhK1TE.roa (hash: Q8DohD/O4S8CVYT18myTFMGAt4L6+jeYMfQ4zRODCWc=)
                          2: MBYKH8YoL1eCp6in6g7SBrlEQSM.crl (hash: 84DK7Q1ztA1TKrTBlbFV0KpHJncD4cglFy8ZvH5GtTs=)
                          3: XpKKyExlunDnIgewiAZPtg86MrQ.roa (hash: wS0s5Zz3UFUtCAGlt2SFNPs++jwDVKFp6MczP/XrPT8=)
                          4: yYnjMSBD0N1GdUhW8b3gkCvcBTY.roa (hash: UXD6Z2ZYC62V3GCh/SczjWuD8By0eruoWG1wzac/bwU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/ccdc8f-285d-43b6-8def-4b39fcabc371/1/MBYKH8YoL1eCp6in6g7SBrlEQSM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/ccdc8f-285d-43b6-8def-4b39fcabc371/1/MBYKH8YoL1eCp6in6g7SBrlEQSM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MBYKH8YoL1eCp6in6g7SBrlEQSM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 12:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:07:6e:ba:b3:86:1c:ee:16:73:a4:b9:3e:fe:af:33:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30160a1fc6282f5782a7a8a7ea0ed206b9444123
        Validity
            Not Before: Oct  4 15:00:59 2026 GMT
            Not After : Oct  5 15:00:59 2026 GMT
        Subject: CN=7c577ae234608293820a345842ff85cb70a94d05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:aa:88:45:f5:0f:dc:54:10:c2:ec:d7:d9:a5:
                    63:8c:3c:b3:7d:73:7a:41:5a:13:15:49:66:05:06:
                    db:1c:50:2d:ca:ce:5e:a0:04:9a:10:c7:2c:46:c9:
                    e0:10:ae:2d:18:2f:da:e6:60:e0:d6:21:40:98:57:
                    5d:c3:c9:0d:4b:7b:51:25:86:59:81:6c:c4:58:e3:
                    9a:69:20:b2:f1:b0:d4:6c:01:6c:f3:78:3d:cc:26:
                    c4:50:91:d8:8e:6b:1e:6e:9a:08:1a:f4:1f:c0:7c:
                    54:51:b1:d2:b3:de:ac:bb:fe:fb:26:2b:a3:d2:1b:
                    0c:ef:28:d9:b6:27:ce:9a:94:d4:d8:d3:1d:73:db:
                    35:e2:b0:a8:4a:39:b4:23:6b:cf:34:40:ab:31:88:
                    4d:00:3a:dd:ba:bc:98:24:86:da:ec:ad:82:88:70:
                    53:1b:7e:08:d5:ca:93:84:2d:f2:3e:99:a1:27:2a:
                    1b:84:01:7a:b4:68:1e:e3:f5:e8:23:1e:d1:c1:ed:
                    77:32:74:35:cd:3c:1e:82:36:45:9c:17:d2:3b:4d:
                    13:bb:03:36:99:01:47:d3:d9:e5:5e:c9:49:c5:98:
                    73:40:e8:7d:59:8b:bb:78:d5:2a:40:47:d0:f2:43:
                    ba:53:c6:f8:0c:05:22:81:dd:94:bb:6a:d8:5a:16:
                    c7:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:57:7A:E2:34:60:82:93:82:0A:34:58:42:FF:85:CB:70:A9:4D:05
            X509v3 Authority Key Identifier:
                keyid:30:16:0A:1F:C6:28:2F:57:82:A7:A8:A7:EA:0E:D2:06:B9:44:41:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBYKH8YoL1eCp6in6g7SBrlEQSM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/ccdc8f-285d-43b6-8def-4b39fcabc371/1/MBYKH8YoL1eCp6in6g7SBrlEQSM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/ccdc8f-285d-43b6-8def-4b39fcabc371/1/MBYKH8YoL1eCp6in6g7SBrlEQSM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:db:44:07:e9:5f:d4:17:4a:90:0d:4d:7a:9d:4f:7d:6c:73:
         e1:d3:36:31:ef:de:8d:1e:a9:0d:85:73:a0:7e:01:d5:43:81:
         70:d4:6a:4a:54:3e:52:94:b4:3b:83:d6:5b:07:59:fe:b2:ad:
         e2:d9:c4:47:1d:26:6e:60:dc:3a:42:cd:93:6e:f1:d5:78:d9:
         66:39:49:8e:7d:65:f1:ea:37:95:4c:9a:a7:60:57:7c:08:76:
         52:21:dc:fc:cd:d9:37:ea:88:8a:1d:c4:38:82:fa:82:ae:67:
         1a:62:0f:5a:89:13:b4:72:95:06:5b:80:3f:67:6d:f7:8f:87:
         76:50:d8:f4:94:d7:d5:63:a0:9c:5d:0f:54:a6:85:5a:46:c6:
         d9:dd:fd:a9:13:6e:db:89:93:03:cb:76:a6:8f:a6:37:54:5b:
         f2:0a:0d:a1:0e:3c:ae:97:8b:8c:f0:41:b4:0c:63:47:6c:5c:
         ec:83:10:58:2e:a1:15:4b:8f:17:48:af:fb:e9:bf:0d:47:53:
         4a:2e:d5:81:dd:e1:92:1d:59:ec:92:fd:60:c2:43:5c:c0:76:
         88:c0:c6:05:38:34:bd:d8:5f:eb:0e:2b:b0:cb:01:43:bb:48:
         a4:8e:b6:7d:db:8f:15:44:2f:0b:c8:e6:36:03:ec:e1:a5:1e:
         ca:d9:9c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 20:27:02 2026 by rpki-client