Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/93/4f3d1b-8361-411e-a148-8858a559f251/1/mdy98GMqEBYTqPbJRJsp7UXBqHI.mft
File:                     mdy98GMqEBYTqPbJRJsp7UXBqHI.mft (raw, json)
Hash identifier:          8Z6UcrKmn+V283Jyt5gmeXpPuq6ljygBBtfa4aOUT/c=
Subject key identifier:   11:74:46:E0:A6:DC:4E:EC:80:93:29:AB:60:6B:95:24:6D:FA:79:AC
Authority key identifier: 99:DC:BD:F0:63:2A:10:16:13:A8:F6:C9:44:9B:29:ED:45:C1:A8:72
Certificate issuer:       /CN=99dcbdf0632a101613a8f6c9449b29ed45c1a872
Certificate serial:       01A0E1E1CC7327DB9BFD4B24743822F2D64C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mdy98GMqEBYTqPbJRJsp7UXBqHI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/4f3d1b-8361-411e-a148-8858a559f251/1/mdy98GMqEBYTqPbJRJsp7UXBqHI.mft
Manifest number:          1422
Signing time:             Sun 27 Sep 2026 08:01:06 +0000
Manifest this update:     Sun 27 Sep 2026 08:01:06 +0000
Manifest next update:     Mon 28 Sep 2026 08:01:06 +0000
Files and hashes:         1: FJy0GIfk9vV1h7loWKolSJZXo6Y.roa (hash: IuQnK7CmGBa5gJ1tL38YDwQ/LuHmRuUUuO8hQ4PDMgU=)
                          2: ZkvlusQxR0eilq71QTIX3lmLXIA.roa (hash: XZW+wXA4kuyVy7bOsoQa1YVo6hUxFESln/r1+ImNbEc=)
                          3: gl6TR5lqCe0eF2sxfbOEh2xV2Ys.roa (hash: UP0movw74FgBnc/2Abquw52G3rsl7ENPcm+vDD+jqRQ=)
                          4: mdy98GMqEBYTqPbJRJsp7UXBqHI.crl (hash: vO8eM+zrffVb9kBKitGK+EwlsTqPsCqz7Oah6hR42Co=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/4f3d1b-8361-411e-a148-8858a559f251/1/mdy98GMqEBYTqPbJRJsp7UXBqHI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/4f3d1b-8361-411e-a148-8858a559f251/1/mdy98GMqEBYTqPbJRJsp7UXBqHI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mdy98GMqEBYTqPbJRJsp7UXBqHI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 08:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e1:e1:cc:73:27:db:9b:fd:4b:24:74:38:22:f2:d6:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99dcbdf0632a101613a8f6c9449b29ed45c1a872
        Validity
            Not Before: Sep 27 08:01:06 2026 GMT
            Not After : Sep 28 08:01:06 2026 GMT
        Subject: CN=117446e0a6dc4eec809329ab606b95246dfa79ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a9:16:14:62:3a:12:89:2a:ef:69:62:3b:74:
                    35:e9:84:0b:c1:ed:68:1b:3e:32:3a:a8:f7:0f:ad:
                    b7:f0:c1:a0:d9:e5:24:6b:42:3e:5c:1f:2f:b7:fb:
                    a8:65:1c:ac:c4:f8:87:6c:a6:3a:b9:ac:a4:5e:19:
                    1e:1f:27:0b:2b:64:e2:e5:ca:d5:0c:a2:61:fc:56:
                    de:c9:b6:8c:94:15:f7:c3:26:1e:5a:50:ff:80:6d:
                    01:d1:02:b1:6d:08:be:8a:98:da:e0:b0:bf:8a:6f:
                    2c:17:e5:44:9a:d2:fb:72:1c:bf:23:a0:b2:55:88:
                    c1:06:ce:ed:b8:71:c2:ca:13:80:8d:03:1a:6c:97:
                    d9:0a:fb:f3:33:ec:d9:db:18:4e:49:d1:2d:26:66:
                    60:d8:44:f0:45:49:c1:a6:47:8c:f1:d9:1e:cf:05:
                    a0:63:6f:3b:e0:7a:ca:43:99:2a:d3:36:df:16:7a:
                    3b:48:d2:48:45:56:24:10:71:df:9e:b8:de:15:cf:
                    74:61:cc:c1:9a:57:27:26:c4:95:52:50:67:e3:ba:
                    fa:b3:d2:df:96:68:34:30:40:66:c1:32:de:97:0e:
                    42:cf:21:67:0e:0b:2a:1a:f5:c0:1d:9b:c2:a7:2c:
                    60:78:0d:cc:79:5b:18:9e:c5:b9:bc:62:6a:7e:f0:
                    1e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:74:46:E0:A6:DC:4E:EC:80:93:29:AB:60:6B:95:24:6D:FA:79:AC
            X509v3 Authority Key Identifier:
                keyid:99:DC:BD:F0:63:2A:10:16:13:A8:F6:C9:44:9B:29:ED:45:C1:A8:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdy98GMqEBYTqPbJRJsp7UXBqHI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4f3d1b-8361-411e-a148-8858a559f251/1/mdy98GMqEBYTqPbJRJsp7UXBqHI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4f3d1b-8361-411e-a148-8858a559f251/1/mdy98GMqEBYTqPbJRJsp7UXBqHI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:7e:d2:51:ea:30:8b:40:49:44:fe:22:f8:9f:35:48:c4:d3:
         75:d0:fe:c5:94:b8:02:b4:97:be:fa:ef:e8:f6:cb:79:1d:d1:
         b5:62:5d:5a:4a:a0:53:7e:0e:2b:2a:8c:4d:36:d2:de:d2:1d:
         53:91:42:50:02:cf:69:72:2e:2f:b7:16:8a:f4:fc:84:fa:90:
         db:b7:4c:58:a4:b0:41:02:60:d6:1f:f3:fa:b8:1c:8a:c5:b0:
         dd:c1:6c:30:61:ff:43:64:58:8f:bc:74:21:80:ab:7b:44:49:
         67:ec:21:4f:ed:b4:f1:cf:a9:4c:5a:85:de:57:59:3b:6b:42:
         01:ea:da:89:0c:4c:3e:98:d8:fc:31:06:ec:46:8f:89:04:8c:
         76:6e:d9:a2:72:58:3d:28:e5:21:35:57:1b:92:1e:fe:ac:bf:
         06:29:4d:69:c6:3c:48:51:a3:06:8d:96:2c:23:ea:06:f3:01:
         ea:f6:12:db:26:5c:76:e1:26:bc:27:06:0e:73:63:1e:b2:22:
         86:05:06:9e:09:57:24:a4:25:91:b9:b4:dd:92:e3:86:c8:97:
         bf:03:14:fc:c2:e4:5f:c8:7c:ff:08:aa:10:f1:cf:b6:fc:77:
         c5:20:15:3d:a2:14:2f:0c:49:27:78:45:0f:ab:71:93:1f:ad:
         33:3a:8d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 21:16:02 2026 by rpki-client