Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.mft
File:                     M41C-7P0P1bduHguZUkKI9hbcuE.mft (raw, json)
Hash identifier:          ryMx+RMN8l3g2+7/zlv2UpNp0GniRIBBrP+n0OOnBtU=
Subject key identifier:   94:96:F4:4B:14:10:BC:05:00:07:7B:B7:05:CA:E5:D3:6A:44:A6:73
Authority key identifier: 33:8D:42:FB:B3:F4:3F:56:DD:B8:78:2E:65:49:0A:23:D8:5B:72:E1
Certificate issuer:       /CN=338d42fbb3f43f56ddb8782e65490a23d85b72e1
Certificate serial:       01A0D7CD2759BC817EC2F84CC9A0DB39671C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M41C-7P0P1bduHguZUkKI9hbcuE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.mft
Manifest number:          0EEC
Signing time:             Fri 25 Sep 2026 09:02:21 +0000
Manifest this update:     Fri 25 Sep 2026 09:02:21 +0000
Manifest next update:     Sat 26 Sep 2026 09:02:21 +0000
Files and hashes:         1: 1EuhVKsVw5uoAe1_WgbtKc856tQ.roa (hash: 91jJhXvalSRHITuPYha5bt1vLrQQuYCZQo48j45dFVg=)
                          2: M41C-7P0P1bduHguZUkKI9hbcuE.crl (hash: 685izuIBIQ8qOzQF10SvLVOZFPMSewi3rEv8Sm8dEEg=)
                          3: Rg6PbbInPrmmUh3N22EeHzxOYn0.roa (hash: LEJHR9iD1d51yema4X3NSGFZJp50Z/6oaRBU+4pvUIg=)
                          4: Vb5LUMN_f-rlqzMX4GkNymfjZAc.roa (hash: xNINsOBY8pk7iexk7ULkbW+iYBp08xHS+Bw7bc6Aavk=)
                          5: uiTCPMJO6WqLGnhBcOzk3vGNCRI.roa (hash: /uSluzarRD7hzKeftDLlUNqVrK3dUPCuVWYOJEdnTrg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M41C-7P0P1bduHguZUkKI9hbcuE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 08:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d7:cd:27:59:bc:81:7e:c2:f8:4c:c9:a0:db:39:67:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=338d42fbb3f43f56ddb8782e65490a23d85b72e1
        Validity
            Not Before: Sep 25 09:02:21 2026 GMT
            Not After : Sep 26 09:02:21 2026 GMT
        Subject: CN=9496f44b1410bc0500077bb705cae5d36a44a673
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:92:2e:0b:3d:90:92:36:8f:51:ef:35:68:42:
                    66:ef:8b:cd:95:e5:0c:7e:d9:d7:5d:e8:6c:89:3a:
                    ab:79:33:00:10:5f:79:51:2f:11:86:21:f7:18:c0:
                    de:6a:f7:d5:fd:89:e8:ba:cd:8f:d0:e5:da:8d:82:
                    9a:ff:f0:df:7c:39:e9:25:73:eb:ee:09:93:ad:4a:
                    06:41:ff:a9:38:65:22:29:1b:49:03:fa:2b:f5:c9:
                    b0:71:93:0b:5d:47:39:46:f4:19:9f:0a:32:c5:cb:
                    0d:4b:28:76:fb:8f:44:a9:3f:c0:06:5e:2b:04:51:
                    83:f7:40:b9:63:ba:23:a1:6c:ca:48:c2:b2:92:52:
                    fc:71:d7:5d:27:54:b2:3e:e6:16:00:41:f6:9c:02:
                    ad:3e:87:e7:c3:fe:24:1d:bb:a0:1d:6e:99:5c:fc:
                    3b:02:fe:55:84:6b:7d:1d:4a:d0:16:8e:f3:f3:90:
                    c0:fa:24:1a:ae:a2:52:07:96:f6:be:11:35:9d:e0:
                    41:88:3f:c8:d4:1a:f7:9b:15:6c:90:16:13:a2:c7:
                    92:40:4f:79:77:cb:73:09:e5:19:bf:40:a5:5a:7a:
                    c2:23:45:7c:2b:87:2a:2e:0c:4d:cc:ea:d5:ed:4f:
                    60:41:9e:4d:3e:54:af:d2:e2:bc:56:32:c8:74:22:
                    e9:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:96:F4:4B:14:10:BC:05:00:07:7B:B7:05:CA:E5:D3:6A:44:A6:73
            X509v3 Authority Key Identifier:
                keyid:33:8D:42:FB:B3:F4:3F:56:DD:B8:78:2E:65:49:0A:23:D8:5B:72:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M41C-7P0P1bduHguZUkKI9hbcuE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:84:c7:25:0b:4b:d5:6c:5a:cc:80:71:3b:11:9d:95:3d:05:
         72:ad:96:47:3b:cc:95:52:ea:0a:5a:b3:30:ae:ad:7c:ad:59:
         f2:16:62:b9:63:b2:a8:35:6d:97:2b:eb:61:af:20:a2:7a:76:
         0f:75:e1:24:48:ec:b6:2d:6e:35:4c:8d:64:c7:5f:d7:3f:d0:
         45:7c:42:e6:20:02:1e:8b:36:c0:60:b9:ee:e9:39:8f:0b:57:
         93:da:2a:72:4b:da:b7:02:79:03:50:5d:88:b4:af:11:48:16:
         52:ed:10:4f:86:e1:b3:b4:60:4d:79:21:9c:b9:f9:3f:51:7e:
         55:9b:08:d1:bd:5d:50:f9:7d:22:ad:3e:34:0c:4f:e6:45:d6:
         8a:9d:01:51:6b:3a:a3:86:1b:5b:72:16:ef:a1:c2:0a:26:75:
         e9:a7:ac:63:9a:af:b9:e6:62:35:88:ab:a3:06:4a:9e:65:de:
         9a:9e:43:c7:a1:cc:36:7e:c2:21:33:d5:f4:9f:e6:16:90:94:
         b2:90:e1:ff:a3:c8:c7:0e:71:7c:f6:2c:ec:78:72:d4:26:6b:
         79:cc:3a:09:76:ab:8a:d3:a8:26:b1:2e:fd:0f:f0:41:7a:b5:
         16:e6:ff:7a:d4:b3:44:ec:65:f5:cf:0d:ba:60:36:a9:b4:49:
         6e:89:ec:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:22:35 2026 by rpki-client