Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.mft
File:                     mvGIoEu0XU7nTETcdtcf_73AT2A.mft (raw, json)
Hash identifier:          REY/una/0iRWkuRO/PgcS+RmXCzgAH5NXCWWic6w1Uk=
Subject key identifier:   66:2A:43:3E:26:36:61:8F:31:95:33:2B:3C:0B:1C:13:1A:07:A8:D0
Authority key identifier: 9A:F1:88:A0:4B:B4:5D:4E:E7:4C:44:DC:76:D7:1F:FF:BD:C0:4F:60
Certificate issuer:       /CN=9af188a04bb45d4ee74c44dc76d71fffbdc04f60
Certificate serial:       01A0CD47DDB94EEACFC039E7B369222F9BC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mvGIoEu0XU7nTETcdtcf_73AT2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.mft
Manifest number:          1A68
Signing time:             Wed 23 Sep 2026 08:00:34 +0000
Manifest this update:     Wed 23 Sep 2026 08:00:34 +0000
Manifest next update:     Thu 24 Sep 2026 08:00:34 +0000
Files and hashes:         1: iFAn1u3EcEzNKFFEGLpbIFooV4w.roa (hash: QNlIF2jmeLo4oV4a+RaHCBWLuy9tqbGyVZgSq0+yZ+A=)
                          2: mvGIoEu0XU7nTETcdtcf_73AT2A.crl (hash: WOc15J7MX6cfYcmMGIIgI4OpKGu4vWzi2NurDGjSo64=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mvGIoEu0XU7nTETcdtcf_73AT2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 08:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cd:47:dd:b9:4e:ea:cf:c0:39:e7:b3:69:22:2f:9b:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9af188a04bb45d4ee74c44dc76d71fffbdc04f60
        Validity
            Not Before: Sep 23 08:00:34 2026 GMT
            Not After : Sep 24 08:00:34 2026 GMT
        Subject: CN=662a433e2636618f3195332b3c0b1c131a07a8d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:af:b0:e4:a6:89:32:b9:81:d7:af:b4:22:f1:
                    08:29:ae:7f:41:b9:df:a5:3a:4d:08:1f:31:a8:f6:
                    55:f6:17:9a:ad:27:9f:23:53:61:04:da:32:fe:06:
                    ef:0c:52:a8:a0:59:42:39:18:c5:78:11:0e:7d:60:
                    b4:ce:2f:24:fa:83:3b:1a:ec:2f:64:20:e5:8b:a5:
                    42:4f:ec:b0:67:a2:3e:6c:91:63:e8:61:64:4d:a4:
                    08:40:44:63:a8:70:ce:33:7f:5e:a1:b2:07:98:f5:
                    1c:77:4f:25:6b:34:24:82:28:55:be:b8:ef:48:cd:
                    3a:fd:84:e5:27:3c:f5:73:a9:7d:62:29:65:60:68:
                    ad:89:4a:4d:1e:60:ee:24:a9:5f:3b:c2:a9:46:c8:
                    48:e5:6a:57:e7:39:7f:67:5b:ac:9b:a8:e1:de:f2:
                    30:5a:17:60:06:da:48:42:05:e8:7f:fb:f2:e4:82:
                    f6:56:fa:ac:f5:c9:17:80:d9:9f:ab:7c:4e:80:26:
                    c5:8f:da:33:5e:6e:63:d9:75:c0:ed:df:d0:f7:db:
                    a2:bd:57:65:31:c6:75:1e:15:63:d7:b0:62:67:8d:
                    91:c9:80:b6:02:c5:13:45:5a:ed:48:bd:ab:11:55:
                    06:5e:c7:68:c2:59:d6:d0:99:61:62:fa:66:4e:d0:
                    05:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:2A:43:3E:26:36:61:8F:31:95:33:2B:3C:0B:1C:13:1A:07:A8:D0
            X509v3 Authority Key Identifier:
                keyid:9A:F1:88:A0:4B:B4:5D:4E:E7:4C:44:DC:76:D7:1F:FF:BD:C0:4F:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mvGIoEu0XU7nTETcdtcf_73AT2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:45:b2:41:d1:6c:53:d7:37:97:2a:12:07:cd:93:af:50:9a:
         35:1b:94:cc:38:c7:8d:69:85:d7:04:c0:5f:66:06:b8:a7:ba:
         eb:66:e9:b3:b8:1c:ed:b1:04:41:b9:26:ec:a0:aa:68:d3:4e:
         22:f9:56:66:ab:89:3a:bb:88:ec:ec:0a:26:06:7c:70:e7:ea:
         6b:95:03:93:dd:89:de:de:4d:c9:af:49:ab:e3:30:f8:9f:b1:
         1e:a2:d0:b5:51:92:12:b8:0a:89:38:c1:63:41:40:04:b9:76:
         b0:2b:71:bb:e7:d0:52:0e:62:3e:cb:1e:8a:12:ed:60:f6:5f:
         13:39:07:59:24:4f:cb:14:98:74:3a:6f:a4:d8:c4:91:01:d9:
         ed:44:81:26:ae:61:96:08:d3:c1:dd:d6:01:d5:4d:8e:8f:06:
         5b:cf:29:9e:4a:87:ce:4a:91:54:15:33:5b:aa:eb:10:9d:05:
         15:81:4e:73:71:82:a9:ff:a7:2f:ba:b1:00:59:50:ed:00:45:
         01:ca:db:dc:d8:f7:ee:65:7a:6b:50:41:c0:f4:5f:67:c3:eb:
         ca:ca:57:c4:a5:b1:04:e1:8c:a4:6c:49:6f:e4:1c:38:e7:59:
         9d:8e:71:6b:94:9a:c3:f0:63:15:76:30:ce:57:b1:e4:99:e9:
         74:8b:ac:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:58:39 2026 by rpki-client