Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.mft
File:                     MSQoUMrUHN91o8nWCyH8pUP3Q4Q.mft (raw, json)
Hash identifier:          zSm3Fx02XTddoVOXbFvCAavdOUqWKgvocqNZjyFCLpY=
Subject key identifier:   91:9D:19:8D:61:E5:87:5A:09:9F:B7:E4:6D:97:1E:61:E6:B8:86:84
Authority key identifier: 31:24:28:50:CA:D4:1C:DF:75:A3:C9:D6:0B:21:FC:A5:43:F7:43:84
Certificate issuer:       /CN=31242850cad41cdf75a3c9d60b21fca543f74384
Certificate serial:       01A0CBC726FA2CB3DA5FAED3CDEE65DF8C1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.mft
Manifest number:          1A6F
Signing time:             Wed 23 Sep 2026 01:00:21 +0000
Manifest this update:     Wed 23 Sep 2026 01:00:21 +0000
Manifest next update:     Thu 24 Sep 2026 01:00:21 +0000
Files and hashes:         1: I-BczlQ87u3cZxP5X5d_PlT55BM.asa (hash: DRlmLGJSRr+fe7px26Jne8q0/DHdNfMhrIjwQGGjyaI=)
                          2: MSQoUMrUHN91o8nWCyH8pUP3Q4Q.crl (hash: hAw1zhRSG3SCI4aEws3ZTiJbaQ1n/Y1snnrvth3Fw+4=)
                          3: NaTtSMcFSdIxu8H6S2lvgqrJ0Uk.roa (hash: 3H1l6ys+xgmXRMr5rMXY56PSQg72vyKmuhKkZeQKlIw=)
                          4: Ov46GgLCmGN9cynwnomndLJK3rE.roa (hash: 4L/nJ8yxPDp+NjD2T6a5/b4C4w4UlasaJygLN6MYTus=)
                          5: UqRSxyomKtUymi7IXAoPkqqc9Mg.asa (hash: J1GRn2t62rZaNAhTHkwBgbzGS8c8siyOl252umE8GzM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 01:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cb:c7:26:fa:2c:b3:da:5f:ae:d3:cd:ee:65:df:8c:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31242850cad41cdf75a3c9d60b21fca543f74384
        Validity
            Not Before: Sep 23 01:00:21 2026 GMT
            Not After : Sep 24 01:00:21 2026 GMT
        Subject: CN=919d198d61e5875a099fb7e46d971e61e6b88684
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:69:ce:09:96:3d:74:85:cb:7c:7f:a2:48:ce:
                    37:2c:a6:c6:f2:96:64:03:bb:af:b6:ee:9d:5a:ae:
                    8e:00:95:8e:77:d9:81:61:e7:32:4f:5c:37:46:c3:
                    e2:aa:e3:17:94:15:4b:3b:4a:58:e7:2e:cc:e6:9d:
                    c6:8b:81:51:74:6f:7e:01:39:d7:61:04:d7:f5:74:
                    f5:cc:d4:73:c9:89:4e:db:39:93:58:66:94:6f:61:
                    91:5b:4c:1e:8f:db:5a:97:ba:ad:f5:27:d1:4b:4f:
                    de:08:db:89:45:ae:84:4d:fa:c2:c1:d6:52:d4:53:
                    83:4b:95:43:82:78:dc:6d:1f:33:b7:e3:11:ce:23:
                    1f:0e:0c:8d:05:a6:32:6f:9f:cc:40:fa:c5:15:47:
                    c8:e4:a3:9c:80:1b:48:3e:b6:f1:2a:df:c4:40:e0:
                    b6:6f:34:7d:a4:a1:01:a6:ce:aa:dc:08:5d:f9:fa:
                    e4:e9:51:62:19:01:28:0b:67:e9:eb:25:6d:81:c3:
                    05:94:7a:70:81:c0:16:72:e2:19:93:9d:03:28:2f:
                    88:da:6d:4d:38:10:30:e2:bc:93:85:40:77:d8:62:
                    8f:56:d0:cd:9a:10:07:f4:14:7f:2e:32:71:bb:f3:
                    b2:df:e9:70:51:79:80:3c:d5:69:41:5f:3c:ed:26:
                    e1:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:9D:19:8D:61:E5:87:5A:09:9F:B7:E4:6D:97:1E:61:E6:B8:86:84
            X509v3 Authority Key Identifier:
                keyid:31:24:28:50:CA:D4:1C:DF:75:A3:C9:D6:0B:21:FC:A5:43:F7:43:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:4d:a9:01:da:97:e3:e6:2e:4f:cd:d4:fc:37:bb:0c:2c:77:
         de:9e:fe:f3:65:80:b8:5e:eb:15:dc:81:14:e4:67:55:d4:6a:
         7d:59:29:b3:21:c0:35:8e:b0:e3:ea:9b:01:cb:40:81:35:92:
         f5:37:07:a6:27:80:6e:ce:71:8a:ed:5f:55:1f:c1:c8:39:d0:
         43:44:40:12:90:8b:25:a0:5c:bf:3f:56:90:8d:6f:85:20:06:
         91:81:71:ab:b3:b8:b5:39:db:64:76:fb:f1:ca:7d:2d:ce:13:
         00:63:a5:48:c1:9b:9b:6b:b0:6a:df:7e:68:e0:16:c3:96:dc:
         cb:e1:b4:38:a2:a3:bb:0a:56:b2:9b:cc:3c:99:a8:1b:ff:9f:
         40:59:58:55:0f:04:7e:99:6b:3e:e1:9a:30:b4:fb:df:6e:3f:
         89:76:09:70:9f:f6:3c:ba:d3:7d:3a:6d:78:b5:15:a5:2f:31:
         71:c1:74:1d:87:b4:ac:74:58:c0:ab:d5:95:4d:5e:81:14:fe:
         42:dd:96:4b:09:85:c5:2a:85:9b:25:61:ff:80:11:f8:9b:b7:
         f6:8e:44:38:b1:f0:2c:e9:81:e4:c5:33:4c:c0:d2:aa:f6:0b:
         74:ba:08:a6:92:72:63:05:04:0e:4a:5a:35:6d:f1:48:fb:06:
         9b:ac:1e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:59:04 2026 by rpki-client