Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.mft
File:                     Mgskp0Dy5hYyBQrcFGwe5qPmhsU.mft (raw, json)
Hash identifier:          T//cFwnZ2to3SLvlq7TWHBWVKr+rKMF1XfB4NDUaTuI=
Subject key identifier:   19:64:27:66:B0:B0:34:34:18:9E:33:D0:17:9D:6F:55:1D:A2:6E:AF
Authority key identifier: 32:0B:24:A7:40:F2:E6:16:32:05:0A:DC:14:6C:1E:E6:A3:E6:86:C5
Certificate issuer:       /CN=320b24a740f2e61632050adc146c1ee6a3e686c5
Certificate serial:       01A0BDD4F0FF812ED0814554C7D55192C801
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.mft
Manifest number:          1A66
Signing time:             Sun 20 Sep 2026 08:00:44 +0000
Manifest this update:     Sun 20 Sep 2026 08:00:44 +0000
Manifest next update:     Mon 21 Sep 2026 08:00:44 +0000
Files and hashes:         1: 2UPTAgiJvUFj9KxwMHk_neJV1Ts.roa (hash: chaCLnBUf8VW3Cyy0U4Y2DmReJ/YoQuLRxfoEk9G/Zs=)
                          2: 5r35RdY0vy4lh3WOV010F9-QFXw.roa (hash: G+I8XeYNJKZwLdV9Hm/0m91ziGrBNMHkmj6EJpZj11c=)
                          3: CIsoBMnJ1HH2_kjCOniPyHt_zdo.roa (hash: rIsVKuNDzl7s31Uqv2wlQw7E8fHntXl7uQadNq2LiGk=)
                          4: LU_rRpVG0rNU5sbORgmoor-WG8E.roa (hash: v6SXttNOyzn7P8hwnB7Tofa/4Bnu7wdokfdtafR2ixc=)
                          5: Mgskp0Dy5hYyBQrcFGwe5qPmhsU.crl (hash: cIS80yR0eXtP7DOF832+0ubpLUxz0n2hnpdU1X92bHY=)
                          6: SP8ZFm--93L34rMKDZHfL8Eh_ro.roa (hash: cp6DWhPPeKxvKEzaDsnvDh3dMYI9vYEIXkFKulFhNyA=)
                          7: aZAulIKVvXbN8omq0JhX_jGTQpQ.roa (hash: a1Ep0d4JmHuZC92VG94ayoNuXL+o7ITThTyrhPBbaU4=)
                          8: exjfT9uAFU7f_gIJUid1TXJtR8A.roa (hash: 4rc5j3Of5lWDlFZbenegwws4HWNu69CTDYEmMKe9DAY=)
                          9: o6k4KBPjdil3WuB7HudYZFQVuio.roa (hash: 5XEGVtaoTy/OrakXg9NARGFxY6y76Ds7hBFFlDQicdE=)
                          10: rcsE8T3loa9paQtOZYTdGqYZZdQ.roa (hash: aTqIKXOe4lJEG0nzJ4iYV8aOwdLjU0r2z02TUxqz12s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 05:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:bd:d4:f0:ff:81:2e:d0:81:45:54:c7:d5:51:92:c8:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=320b24a740f2e61632050adc146c1ee6a3e686c5
        Validity
            Not Before: Sep 20 08:00:44 2026 GMT
            Not After : Sep 21 08:00:44 2026 GMT
        Subject: CN=19642766b0b03434189e33d0179d6f551da26eaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:cf:de:d1:0d:8a:8b:87:fa:71:a6:c7:d3:3e:
                    fe:a3:b3:f3:b6:bc:82:19:75:b2:5c:e5:35:1d:1b:
                    77:00:0e:d7:d3:ca:fd:3d:29:65:c6:4e:e2:3d:30:
                    a5:89:90:37:20:fa:03:89:d2:0d:7b:54:ee:db:ee:
                    49:db:1e:59:1f:ac:7c:61:10:7b:ab:96:7e:64:f7:
                    55:6a:f1:12:a6:eb:eb:c7:d6:3b:c3:02:9a:ce:5c:
                    13:92:15:b1:a1:24:4e:1d:6f:54:37:6e:09:ff:5b:
                    e5:5e:11:d8:d8:3b:e2:00:a9:1f:a2:4c:a5:ce:1d:
                    7b:d8:a0:b9:b2:09:71:10:a5:cf:ac:52:e6:af:d9:
                    31:c6:39:9a:23:de:2d:f6:e6:dd:d3:66:8b:e8:4d:
                    6e:4d:0d:37:3c:7f:e7:ad:96:1f:4a:58:d8:8c:38:
                    da:df:ce:1a:97:aa:57:8f:c1:94:c9:9a:7a:ee:6c:
                    1d:35:9b:25:dc:60:c0:2b:e5:f4:21:ba:72:e2:12:
                    5f:58:d1:40:44:93:a7:63:86:fe:fb:ac:0f:17:27:
                    ae:95:a3:ef:f3:48:f9:1c:1d:1a:a5:34:a9:c4:e2:
                    90:3d:a9:82:7d:a5:54:f1:67:e8:50:ab:af:17:96:
                    3b:a1:0e:5c:85:ef:75:bc:99:04:31:1e:19:53:a0:
                    38:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:64:27:66:B0:B0:34:34:18:9E:33:D0:17:9D:6F:55:1D:A2:6E:AF
            X509v3 Authority Key Identifier:
                keyid:32:0B:24:A7:40:F2:E6:16:32:05:0A:DC:14:6C:1E:E6:A3:E6:86:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:e1:22:f9:5f:11:76:d7:b0:53:25:b1:d4:d8:64:ee:d5:76:
         45:a6:db:83:d4:3d:df:43:d8:41:10:73:f6:7d:50:af:04:45:
         9d:e7:0a:10:ea:58:cb:db:26:f2:6c:fd:4f:f3:43:d9:5d:9f:
         de:e6:31:73:8c:73:36:0b:cf:aa:b2:ae:4c:52:8f:47:f8:d4:
         d3:6d:6b:bc:70:6c:ec:8e:d8:60:a8:61:1e:12:97:2c:85:f0:
         1b:47:93:02:2e:2f:e8:74:fc:ee:81:34:7a:6f:3d:87:1f:41:
         57:64:8f:92:53:c9:5b:5c:01:7f:da:19:ac:94:50:67:b6:27:
         8c:c8:9c:85:62:ce:49:64:bc:e7:1d:07:46:54:ce:3a:19:89:
         43:71:4c:ba:e3:a8:55:2e:28:f5:be:19:3f:da:27:96:7e:bd:
         23:43:f3:09:49:53:8f:f2:04:cf:a1:7c:91:80:36:de:d7:7b:
         9c:c3:03:2c:5a:4f:79:b4:bb:d3:6c:0d:50:ec:23:3e:96:4b:
         bb:41:dd:c0:9d:b4:e5:cc:d5:c6:55:cd:fe:08:70:91:3d:44:
         9c:c5:d3:e4:a8:0f:1b:c7:54:4a:d7:97:7d:87:ee:22:e8:b1:
         d4:25:b6:57:e3:e7:7e:74:fe:df:b1:c9:c6:53:12:13:62:f7:
         99:30:0b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 15:03:52 2026 by rpki-client