Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.mft
File:                     MXvyYLzaMCviwgdijPsWRHhhT-U.mft (raw, json)
Hash identifier:          SLsBPlgsI0cR8jKZbEXpLpFk22fnVeXlZfcsDgA81rM=
Subject key identifier:   3E:E9:67:E0:E9:65:79:96:FC:E5:1D:D5:29:F9:D0:1D:74:64:B0:AF
Authority key identifier: 31:7B:F2:60:BC:DA:30:2B:E2:C2:07:62:8C:FB:16:44:78:61:4F:E5
Certificate issuer:       /CN=317bf260bcda302be2c207628cfb164478614fe5
Certificate serial:       01A138FFCF795BC677B1B8FF56B4928649EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MXvyYLzaMCviwgdijPsWRHhhT-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.mft
Manifest number:          1216
Signing time:             Wed 14 Oct 2026 06:00:51 +0000
Manifest this update:     Wed 14 Oct 2026 06:00:51 +0000
Manifest next update:     Thu 15 Oct 2026 06:00:51 +0000
Files and hashes:         1: MXvyYLzaMCviwgdijPsWRHhhT-U.crl (hash: 57zdIwbOniBBd4syJXg7qdt6c+yVu4US8wSFs1WzuvQ=)
                          2: xerBMxNW-woKiA8KHx0KcXB634A.roa (hash: AR2Ndl4ICAGHIwDUvuX6ce4+Y2SPrh5ql1qQ6H1YP74=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MXvyYLzaMCviwgdijPsWRHhhT-U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 06:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:38:ff:cf:79:5b:c6:77:b1:b8:ff:56:b4:92:86:49:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=317bf260bcda302be2c207628cfb164478614fe5
        Validity
            Not Before: Oct 14 06:00:51 2026 GMT
            Not After : Oct 15 06:00:51 2026 GMT
        Subject: CN=3ee967e0e9657996fce51dd529f9d01d7464b0af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1a:03:fd:62:68:80:9d:ed:d9:15:db:f8:49:
                    f7:86:10:00:8b:2e:54:c8:4e:3f:6a:86:bc:60:cf:
                    eb:a8:58:43:44:8b:f0:4f:ca:0e:01:0c:82:f7:91:
                    de:5d:41:6b:1f:dd:13:a2:6e:31:b6:0f:8b:af:9d:
                    d6:9d:af:b9:d3:2d:b8:ae:95:95:04:a4:7d:66:1e:
                    4b:f8:d8:c2:5e:66:a8:2e:69:54:e2:b2:3d:94:1c:
                    ed:6e:8b:f3:2c:80:01:dc:c8:84:c1:55:68:49:8b:
                    b6:4a:d5:c1:c3:c9:ec:3d:e8:48:3c:2e:7b:5d:4d:
                    d1:85:06:58:64:6b:cd:db:ec:71:05:6e:7e:db:91:
                    fe:79:83:7e:86:41:df:8d:3c:06:41:66:c4:93:7b:
                    6e:9e:b3:46:15:06:3d:4c:03:d9:e8:bf:81:8f:ca:
                    c8:b9:c9:b7:67:98:bf:68:4b:38:a4:54:1c:9f:be:
                    8c:4d:33:48:38:f6:c5:ea:d0:cc:66:7e:ec:50:a9:
                    63:81:da:f9:6a:76:6d:8e:36:e0:d0:fb:b2:f0:65:
                    ec:18:84:f1:7f:8e:24:71:31:00:30:fd:b8:be:46:
                    5b:a2:4b:f5:58:3e:9f:c1:ae:15:73:d0:39:31:66:
                    69:b5:40:9b:bc:e0:d9:cd:b9:0a:da:9c:5a:f8:33:
                    dc:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:E9:67:E0:E9:65:79:96:FC:E5:1D:D5:29:F9:D0:1D:74:64:B0:AF
            X509v3 Authority Key Identifier:
                keyid:31:7B:F2:60:BC:DA:30:2B:E2:C2:07:62:8C:FB:16:44:78:61:4F:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MXvyYLzaMCviwgdijPsWRHhhT-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:59:52:a4:9a:f0:6b:8e:67:77:f7:3e:5c:9e:34:62:b5:e3:
         70:a2:ea:d2:eb:74:37:7b:7a:3e:48:2c:3f:28:39:38:e5:ca:
         33:20:7f:01:55:4c:70:74:bc:66:99:61:63:9c:48:9b:bc:09:
         4a:01:41:ca:b6:69:a6:a6:07:81:2a:7c:e3:7f:28:a4:3e:8c:
         f6:1e:8a:19:9e:87:53:d5:cd:38:cf:fc:6c:7c:4a:d2:db:de:
         13:79:5a:4d:5b:09:4e:4a:1b:e1:97:3d:cb:17:39:fe:a3:d8:
         de:41:ab:50:79:31:1e:ed:ce:10:45:3b:e6:3e:20:38:66:ef:
         34:d1:32:42:8d:ba:1e:ca:9d:39:8d:9f:6f:17:4b:fc:6b:24:
         46:49:f1:1b:2c:ec:e2:91:79:32:46:51:ee:99:6c:6b:81:0a:
         b4:8d:41:4c:56:f2:e3:26:e5:95:4b:f9:0b:d9:a2:87:26:dd:
         aa:b9:c0:f2:73:37:10:87:1c:d6:f4:ae:b0:cc:c3:f6:5d:fd:
         ba:77:e5:39:f3:fd:56:33:47:ff:ab:64:df:d0:64:c3:0c:4f:
         b7:21:0a:0a:db:2d:45:40:f1:78:ef:b6:93:70:c4:0c:2d:8a:
         2d:cd:a7:e8:22:04:49:db:2e:b9:0f:1c:3c:af:f5:31:7a:10:
         4f:fc:b4:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 14:44:31 2026 by rpki-client