Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.mft
File:                     mu2VdsknICkWjE0aQXXRp8ocUe4.mft (raw, json)
Hash identifier:          e6b5wtGAJup/k6OJDYkR/W1VvQjVp4g6y1O1h7cvzm4=
Subject key identifier:   B3:35:97:1C:A5:89:08:84:2E:61:8D:67:88:78:AA:B5:76:90:8A:91
Authority key identifier: 9A:ED:95:76:C9:27:20:29:16:8C:4D:1A:41:75:D1:A7:CA:1C:51:EE
Certificate issuer:       /CN=9aed9576c9272029168c4d1a4175d1a7ca1c51ee
Certificate serial:       01A1329071914C7A0F6BD43B5B9565EBC90D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mu2VdsknICkWjE0aQXXRp8ocUe4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.mft
Manifest number:          13C0
Signing time:             Tue 13 Oct 2026 00:01:29 +0000
Manifest this update:     Tue 13 Oct 2026 00:01:29 +0000
Manifest next update:     Wed 14 Oct 2026 00:01:29 +0000
Files and hashes:         1: mu2VdsknICkWjE0aQXXRp8ocUe4.crl (hash: KZM+9uxYAPRsr+P2gXUU4TE9xGPZqPQMN6h6avWdM0g=)
                          2: oGhU7IJoDElhSJr9URGhXOwAaLk.roa (hash: RlkIPIJZ2vJYpwqoiUxVktYoRH+UnOVJBwSR2Sn3Qb0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mu2VdsknICkWjE0aQXXRp8ocUe4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Oct 2026 23:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:32:90:71:91:4c:7a:0f:6b:d4:3b:5b:95:65:eb:c9:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9aed9576c9272029168c4d1a4175d1a7ca1c51ee
        Validity
            Not Before: Oct 13 00:01:29 2026 GMT
            Not After : Oct 14 00:01:29 2026 GMT
        Subject: CN=b335971ca58908842e618d678878aab576908a91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ed:3b:2e:9e:b0:4d:4f:4d:39:7d:68:bb:e5:
                    50:fa:fa:b6:c4:f7:47:08:05:1f:50:ee:4c:e4:3a:
                    11:ec:ea:c9:83:50:c8:6f:06:fb:75:11:ab:57:f1:
                    41:de:a2:82:c4:aa:0f:e4:4e:82:e8:58:9e:d9:f9:
                    23:36:a4:82:e7:60:47:5f:29:6f:07:7b:78:25:36:
                    b5:44:a4:71:9b:73:db:e2:cd:74:c6:18:5a:59:d8:
                    b3:36:30:c5:e0:21:28:eb:24:00:24:69:f0:f3:c8:
                    f4:2e:dd:a6:d0:ab:df:0b:f2:39:4e:b9:73:c2:b2:
                    9a:ff:fe:6b:dd:64:00:b2:c0:72:9f:4f:f5:f3:d2:
                    17:47:72:95:4d:6d:f4:52:3b:8a:f6:ba:b3:1a:da:
                    64:88:89:68:68:a2:c8:7f:fd:87:6a:9c:30:0b:68:
                    22:07:5f:dc:09:49:2f:8c:3f:8c:5f:8b:45:6f:3f:
                    09:05:81:dc:59:21:b3:b8:12:9a:b3:5a:3e:e4:7a:
                    e5:d3:19:1f:81:0a:1a:ea:f2:21:cb:80:b6:e6:ad:
                    73:c0:fa:5f:cb:01:23:20:61:2a:fc:67:eb:59:74:
                    ed:fd:cc:47:a6:42:85:f0:f4:a6:4f:e6:37:9a:20:
                    06:60:31:6a:3f:83:18:5a:1b:46:25:66:e1:14:12:
                    09:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:35:97:1C:A5:89:08:84:2E:61:8D:67:88:78:AA:B5:76:90:8A:91
            X509v3 Authority Key Identifier:
                keyid:9A:ED:95:76:C9:27:20:29:16:8C:4D:1A:41:75:D1:A7:CA:1C:51:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu2VdsknICkWjE0aQXXRp8ocUe4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:a2:74:57:6a:cb:ed:10:93:52:bb:dd:31:f9:22:3a:68:ab:
         2b:17:5d:af:37:fc:bf:51:fb:29:18:63:bc:2f:04:c5:31:94:
         59:96:83:fb:4a:33:9a:83:ca:b4:57:51:d5:45:42:c3:32:47:
         31:9a:d4:19:ed:ea:71:1f:a3:3b:c4:6d:e6:fa:34:5a:c5:f7:
         06:5c:ed:ab:de:ae:ed:ba:29:20:ad:cb:bf:58:38:fd:37:29:
         7d:e6:a7:ae:d8:d4:04:fa:d8:d8:79:85:67:ee:b0:21:31:16:
         bb:2d:ad:5d:6d:74:81:63:f7:f0:91:68:0b:aa:86:b4:fe:33:
         9a:02:12:12:a2:ec:ad:5a:e4:d5:e0:0f:c3:91:a0:08:1a:ff:
         47:91:dd:78:43:75:fe:e7:9a:93:0d:92:84:93:c3:9c:9c:98:
         8e:78:e1:70:c1:e5:39:bf:12:43:e7:e3:b8:bf:0f:49:c2:5c:
         a1:84:8c:32:52:1c:19:57:b8:6f:ce:3c:93:12:8d:40:73:a3:
         a3:81:80:4c:85:07:8f:4d:63:6b:b2:9b:ca:d3:7c:3d:17:c3:
         2b:c9:4e:ab:f9:4d:ff:22:8e:bb:7e:b7:13:8c:7a:0b:20:a0:
         28:55:87:67:1a:2c:41:1a:0d:7d:24:31:be:2c:d3:66:10:ab:
         03:11:0b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 09:16:47 2026 by rpki-client