Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.mft
File:                     maLC7PWMRLNaDaKVf_TcouYLaGo.mft (raw, json)
Hash identifier:          dlicqvq9Zcj/T2UU7h8vRNC9QdQ5eYG845jWJX+LQqk=
Subject key identifier:   71:2F:63:9A:EE:56:1A:88:20:05:A3:55:B6:13:21:34:5C:D8:AB:D7
Authority key identifier: 99:A2:C2:EC:F5:8C:44:B3:5A:0D:A2:95:7F:F4:DC:A2:E6:0B:68:6A
Certificate issuer:       /CN=99a2c2ecf58c44b35a0da2957ff4dca2e60b686a
Certificate serial:       01A0D538CF52C31CC4303FC6A37F7848F43F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/maLC7PWMRLNaDaKVf_TcouYLaGo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.mft
Manifest number:          1A78
Signing time:             Thu 24 Sep 2026 21:01:04 +0000
Manifest this update:     Thu 24 Sep 2026 21:01:04 +0000
Manifest next update:     Fri 25 Sep 2026 21:01:04 +0000
Files and hashes:         1: CQ22INHNBj4XjlCUrI5XIygZ-R0.roa (hash: XIhPQfL8JPX1XhK5bY8YDY2+uw01ecHaNFfLz05TOJ0=)
                          2: KJY5nxCnM8VflNqrt-fuQ6cuQes.roa (hash: CD+3ziwBgnP7/0qdqqYvm343nyyRQZA21pgLWpHPvXc=)
                          3: lnG5zaZt-7xO_hAn8wuZTfTqkgM.roa (hash: AlDx5dd5qCfr7Hi5X2lV2/K6+UMvJudIe04xWsHdrCg=)
                          4: maLC7PWMRLNaDaKVf_TcouYLaGo.crl (hash: zMyQQjpTMOVJ+TM142/rSq9kKAD8z8Sv/7+9hV18e2k=)
                          5: pgw_vXBhOHyYYmolPmheFOInOlo.roa (hash: FBhZNS8WeqSQq7ASqmhTPAh4HzJGXnwv4pIHLO19zl4=)
                          6: vcqIh9RGrfqsmlHa25tlLbDVTfk.roa (hash: 8nj2WBXLZRsVEzQqCt+NovapA3YHbN5awEImncwyZTU=)
                          7: x1x-cyI_biGTaUkZngKWx4DjWCs.roa (hash: aGX6ptYmiAeod9VDsNlQzerfO//pVNDw6U3vNGlEKjM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/maLC7PWMRLNaDaKVf_TcouYLaGo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d5:38:cf:52:c3:1c:c4:30:3f:c6:a3:7f:78:48:f4:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99a2c2ecf58c44b35a0da2957ff4dca2e60b686a
        Validity
            Not Before: Sep 24 21:01:04 2026 GMT
            Not After : Sep 25 21:01:04 2026 GMT
        Subject: CN=712f639aee561a882005a355b61321345cd8abd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:0b:ac:9b:69:48:52:da:f4:8f:66:d8:20:4f:
                    2d:29:0d:79:5c:68:c6:e4:b3:2b:d7:11:17:5d:3c:
                    8b:cd:8e:c1:59:3a:f6:a4:f0:a9:6c:21:56:cd:61:
                    28:6b:bd:8c:3f:68:a7:64:90:b7:6c:0f:6a:3d:9c:
                    41:1e:c0:49:4d:e6:39:a9:b2:10:38:e4:2b:11:9d:
                    33:0d:f1:e3:7c:90:e2:d2:fa:8f:ea:39:80:c0:05:
                    b5:1a:f3:c0:42:a4:38:56:04:84:1d:c4:91:21:08:
                    b4:6c:61:1d:fc:9b:99:8f:de:0f:af:6e:78:3d:22:
                    bb:f4:8c:d2:f8:de:96:41:e8:4f:0d:35:03:8b:72:
                    df:ac:14:b8:e5:b7:de:9a:cf:71:ec:a5:65:65:b0:
                    85:60:26:99:59:b5:f6:72:47:fc:76:89:36:28:25:
                    e6:74:12:c8:1b:90:15:f4:4b:0b:97:82:16:55:29:
                    03:78:d1:82:f5:fc:53:4b:3a:36:51:3e:60:6c:84:
                    82:3f:82:d6:aa:6e:a0:8b:a6:9b:ff:25:fd:00:1a:
                    cf:b2:3f:93:55:8a:37:dc:a2:dc:dd:76:5f:22:11:
                    10:ca:66:a9:b2:c5:68:05:83:8f:1a:18:75:b3:30:
                    c6:4f:45:4c:8d:9e:4c:2d:8c:92:a9:ce:e4:86:bd:
                    67:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:2F:63:9A:EE:56:1A:88:20:05:A3:55:B6:13:21:34:5C:D8:AB:D7
            X509v3 Authority Key Identifier:
                keyid:99:A2:C2:EC:F5:8C:44:B3:5A:0D:A2:95:7F:F4:DC:A2:E6:0B:68:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maLC7PWMRLNaDaKVf_TcouYLaGo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:c1:74:1e:c8:b0:b3:f3:2a:a0:d4:64:06:36:04:26:7a:0f:
         5f:f7:0b:ef:68:7e:3f:36:7a:64:9c:48:10:2e:5a:9b:13:6f:
         bb:6f:2b:92:a5:da:84:dc:60:8e:24:10:30:06:e3:48:9c:9e:
         87:a7:f8:1c:bc:47:0b:38:b3:e7:d4:3d:55:d5:4b:e3:c0:71:
         6e:9b:8c:d3:be:f7:a5:bb:69:6b:2a:7f:52:3e:7b:83:bc:c0:
         46:b7:c4:59:bc:7b:c1:0b:67:a6:d2:ad:59:76:d5:13:fc:14:
         6c:86:00:1f:33:78:c1:60:37:42:e7:d1:bc:a1:f9:5f:65:94:
         4f:e7:b1:b5:6e:31:90:bf:e8:06:78:5a:f6:e9:3b:e0:df:3e:
         bd:be:76:d8:02:ee:49:ab:51:a5:f9:48:b4:72:23:6d:53:13:
         36:a7:08:33:d1:91:a1:cd:f4:8f:62:51:17:7d:d6:9c:24:5f:
         c2:5b:b0:7f:ad:62:66:fd:cf:b4:0f:0c:a2:75:1f:dc:fa:73:
         b4:49:89:d5:5f:61:f0:a4:e1:4a:d7:93:7a:c2:88:ec:e9:b7:
         f1:76:2c:96:ce:67:a8:c1:43:19:88:50:97:fb:a4:2c:95:19:
         b9:2a:7f:fe:d1:1c:3a:b1:3a:75:c2:31:a6:66:4a:9c:22:de:
         2c:4c:c3:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 01:43:44 2026 by rpki-client