Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/MNimSQPPohc3l0nxi3_c6h2rbbQ.mft
File:                     MNimSQPPohc3l0nxi3_c6h2rbbQ.mft (raw, json)
Hash identifier:          JanHFqhw36b/fetSxN5CNuq7D1Ucsx/Y04YsbnBUcw8=
Subject key identifier:   8C:95:DF:B4:C7:E4:3D:EE:50:EB:FB:4F:C7:7E:09:1F:74:97:47:63
Authority key identifier: 30:D8:A6:49:03:CF:A2:17:37:97:49:F1:8B:7F:DC:EA:1D:AB:6D:B4
Certificate issuer:       /CN=30d8a64903cfa217379749f18b7fdcea1dab6db4
Certificate serial:       01A0C77D0DE060D7713266A9FCCF05BE80F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MNimSQPPohc3l0nxi3_c6h2rbbQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/MNimSQPPohc3l0nxi3_c6h2rbbQ.mft
Manifest number:          1A71
Signing time:             Tue 22 Sep 2026 05:00:56 +0000
Manifest this update:     Tue 22 Sep 2026 05:00:56 +0000
Manifest next update:     Wed 23 Sep 2026 05:00:56 +0000
Files and hashes:         1: AXw4H6AyvkJpuy6rORnE-0aUd2k.asa (hash: Znha8k05/5Bh1g8iCPsWv7sezDaqLavdM3cnOlJL2lI=)
                          2: MNimSQPPohc3l0nxi3_c6h2rbbQ.crl (hash: F2e5D/YxaV/erLP7haVWWeWVW35004QmoUNVXBrNngs=)
                          3: ZTjWvW3_UDwWz5igtbbCJdukgBg.roa (hash: yrRO/z/hbGoHDtMqzYpJp8RqBS++UjuABdQAeDOiMoA=)
                          4: osvG5e1YigFoLoa__yzX-J5l27E.roa (hash: SlrGXFD11o+sZzla3/g1JmWekd8M1LFWjbdkdCRUg50=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/MNimSQPPohc3l0nxi3_c6h2rbbQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/MNimSQPPohc3l0nxi3_c6h2rbbQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MNimSQPPohc3l0nxi3_c6h2rbbQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c7:7d:0d:e0:60:d7:71:32:66:a9:fc:cf:05:be:80:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30d8a64903cfa217379749f18b7fdcea1dab6db4
        Validity
            Not Before: Sep 22 05:00:56 2026 GMT
            Not After : Sep 23 05:00:56 2026 GMT
        Subject: CN=8c95dfb4c7e43dee50ebfb4fc77e091f74974763
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:37:fa:5a:7f:b6:c6:a5:a2:9e:61:e7:4a:8a:
                    63:a4:fd:10:ab:ec:15:8d:7c:ab:35:b2:16:05:dc:
                    a4:14:51:e6:a2:98:34:37:17:ab:9c:f4:52:54:75:
                    7e:27:43:57:ae:46:63:8a:64:66:99:c9:a3:c6:25:
                    ab:5a:53:9e:ad:1a:1c:01:ca:6b:2b:64:45:2b:87:
                    20:a5:88:d3:02:f2:8a:3f:30:15:71:23:ba:4f:ba:
                    9d:ae:5f:0e:00:e3:ab:16:58:05:0a:fd:81:11:56:
                    c5:ed:8b:75:ef:e2:0d:0b:5f:3b:d4:73:43:9c:fe:
                    99:72:46:30:87:fe:1b:58:4e:fc:c9:d5:ad:63:f0:
                    fa:6f:fd:8d:fc:6a:88:be:0f:b7:8d:a0:78:02:fc:
                    53:6c:69:05:5d:f3:d5:f5:e6:ef:51:ca:76:06:b5:
                    86:20:72:15:1a:49:b6:2b:68:f9:ea:19:e1:9d:8b:
                    dd:2a:6c:41:48:c5:59:7f:8d:db:3d:1d:79:58:6e:
                    41:da:24:94:cf:80:aa:f6:9c:19:3a:60:6f:a3:e1:
                    0c:a5:0f:1e:b4:25:33:d2:72:73:05:d2:6b:e0:91:
                    32:31:fd:de:69:13:99:8f:33:5d:cc:28:33:71:6b:
                    1f:29:8d:c4:67:22:11:80:7f:cf:01:86:46:3e:e3:
                    64:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:95:DF:B4:C7:E4:3D:EE:50:EB:FB:4F:C7:7E:09:1F:74:97:47:63
            X509v3 Authority Key Identifier:
                keyid:30:D8:A6:49:03:CF:A2:17:37:97:49:F1:8B:7F:DC:EA:1D:AB:6D:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MNimSQPPohc3l0nxi3_c6h2rbbQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/MNimSQPPohc3l0nxi3_c6h2rbbQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/MNimSQPPohc3l0nxi3_c6h2rbbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:0b:dc:7f:fe:d1:1d:38:7a:08:aa:44:fb:58:a4:7f:a5:7f:
         b6:06:52:e5:ec:c2:7c:7b:d7:6f:42:5e:5e:66:80:32:29:4d:
         ca:7e:58:af:17:8d:47:75:3d:b6:c6:e1:60:4a:50:f6:0f:41:
         c6:c0:be:4a:b5:97:25:9d:5d:e3:d2:f2:03:f4:6b:65:5e:61:
         ef:2b:c0:93:4d:d3:3a:ff:4e:f5:ea:59:70:d5:78:85:05:e6:
         c8:23:6f:f8:d4:cd:04:a4:72:5c:8b:64:95:ad:9c:4a:2c:c0:
         79:8c:90:c9:76:00:ea:93:3f:cd:07:0e:65:12:81:77:6c:82:
         4c:3c:e9:7e:7f:21:b5:6c:97:3f:a4:3f:06:3e:55:e4:3e:1b:
         df:9d:31:cb:e2:71:65:0e:4d:c8:1a:4f:6c:1a:98:94:94:3e:
         d5:d8:9d:aa:46:cd:eb:ea:ba:61:10:2f:be:e8:c6:de:b0:e2:
         b8:85:28:8f:26:24:01:65:12:b3:f4:80:9d:7f:e6:8e:4a:82:
         aa:19:05:46:d2:c4:99:f7:74:67:05:4c:2d:b2:51:64:b3:e3:
         17:93:53:10:dd:7a:3f:33:9d:df:19:4e:2a:65:3f:f5:23:88:
         b1:13:58:89:5a:e8:11:c2:52:00:f3:d7:b7:2d:a8:a4:a7:4b:
         cc:bf:0c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:05:49 2026 by rpki-client