Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/9755f2-bd2d-4e52-8ae7-85b00203b2a2/1/mcFmTbj325Ln1EZQdic5W8EH3V0.mft
File:                     mcFmTbj325Ln1EZQdic5W8EH3V0.mft (raw, json)
Hash identifier:          lQl70nu7o4l/oDs25feEi3nGm3DD5RqZ7B8x3WCyv40=
Subject key identifier:   CC:54:1A:EB:E6:EB:B7:10:1F:61:5E:E9:0D:8A:A3:1A:5E:3D:C2:E4
Authority key identifier: 99:C1:66:4D:B8:F7:DB:92:E7:D4:46:50:76:27:39:5B:C1:07:DD:5D
Certificate issuer:       /CN=99c1664db8f7db92e7d446507627395bc107dd5d
Certificate serial:       01A0D1251066C08E14E214B172A89C1DAFA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mcFmTbj325Ln1EZQdic5W8EH3V0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/9755f2-bd2d-4e52-8ae7-85b00203b2a2/1/mcFmTbj325Ln1EZQdic5W8EH3V0.mft
Manifest number:          74
Signing time:             Thu 24 Sep 2026 02:01:02 +0000
Manifest this update:     Thu 24 Sep 2026 02:01:02 +0000
Manifest next update:     Fri 25 Sep 2026 02:01:02 +0000
Files and hashes:         1: L3SCpmXJBeENQlngFVsPO7y4j9I.roa (hash: TNxBSmMFYjhX4xx6VIgUZfTdujBVV7wlaoUOw5FQgSs=)
                          2: mcFmTbj325Ln1EZQdic5W8EH3V0.crl (hash: of1oSz8gXa1aEBur1Wki9Kl9Ite5YD/1cDSnsGOhEJ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/9755f2-bd2d-4e52-8ae7-85b00203b2a2/1/mcFmTbj325Ln1EZQdic5W8EH3V0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/9755f2-bd2d-4e52-8ae7-85b00203b2a2/1/mcFmTbj325Ln1EZQdic5W8EH3V0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mcFmTbj325Ln1EZQdic5W8EH3V0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:25:10:66:c0:8e:14:e2:14:b1:72:a8:9c:1d:af:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99c1664db8f7db92e7d446507627395bc107dd5d
        Validity
            Not Before: Sep 24 02:01:02 2026 GMT
            Not After : Sep 25 02:01:02 2026 GMT
        Subject: CN=cc541aebe6ebb7101f615ee90d8aa31a5e3dc2e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4b:04:0d:57:ff:f0:3a:b8:85:1a:56:a6:b4:
                    31:20:fc:04:94:51:d8:6c:21:a1:6d:35:54:04:69:
                    04:04:a0:d5:dc:cb:a2:8a:3e:67:87:45:60:5e:cd:
                    72:59:60:81:7e:52:46:8f:8e:3e:06:07:84:a7:17:
                    68:5d:4e:36:f1:17:4b:5e:9c:e9:da:60:64:1a:47:
                    b2:ee:50:cd:4c:3d:09:1c:c2:29:82:96:18:3d:94:
                    89:14:ba:6c:1e:57:1f:85:01:23:43:3e:6d:f2:66:
                    b5:1f:f1:7f:4d:3d:dc:23:67:37:44:88:e2:bd:c7:
                    0f:dd:67:b5:35:f8:c1:52:04:ed:40:2b:c5:8d:59:
                    de:1e:a7:ea:e0:30:67:25:64:c1:91:93:2e:ab:3e:
                    a1:8b:17:43:13:e4:0a:a1:71:e5:d0:16:ce:43:e0:
                    59:f9:39:68:70:c3:fe:55:d1:1b:0f:fe:9a:be:de:
                    4c:6d:40:1c:aa:a0:f5:9f:f9:04:c8:0b:2b:ee:97:
                    2d:16:8a:ac:05:b1:c1:00:93:bc:d9:80:34:9d:db:
                    8e:d3:fa:c9:d0:ab:95:ec:c9:44:7b:3f:a7:68:ab:
                    8e:b1:9e:ac:3b:4a:e2:82:20:b1:87:26:bb:3c:49:
                    70:53:5a:13:9e:8c:1b:80:1f:6e:5a:45:e2:74:39:
                    21:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:54:1A:EB:E6:EB:B7:10:1F:61:5E:E9:0D:8A:A3:1A:5E:3D:C2:E4
            X509v3 Authority Key Identifier:
                keyid:99:C1:66:4D:B8:F7:DB:92:E7:D4:46:50:76:27:39:5B:C1:07:DD:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mcFmTbj325Ln1EZQdic5W8EH3V0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/9755f2-bd2d-4e52-8ae7-85b00203b2a2/1/mcFmTbj325Ln1EZQdic5W8EH3V0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/9755f2-bd2d-4e52-8ae7-85b00203b2a2/1/mcFmTbj325Ln1EZQdic5W8EH3V0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:81:3b:13:4b:51:22:48:75:1a:f4:aa:8c:98:ad:dd:0d:c7:
         3f:46:cf:4f:c7:0d:f4:8e:a5:de:9f:6f:4f:b3:d0:9b:40:47:
         01:db:7a:6a:5f:a6:85:e3:fc:c6:d7:14:f7:bc:16:1d:68:eb:
         c5:77:e9:12:d5:16:9a:04:3c:be:88:e8:1b:8d:01:3d:ae:27:
         57:85:33:f8:8f:d7:61:c3:2e:80:50:82:79:5d:a9:45:a2:a8:
         56:45:37:de:a4:98:81:ea:e0:9c:85:45:99:af:54:2d:40:e6:
         af:90:dd:be:42:a4:a5:da:e7:09:27:b4:da:8d:d5:c9:88:f8:
         b5:9d:7e:88:a9:bc:6e:78:a5:c6:9a:04:55:23:16:31:5c:1c:
         30:1e:21:85:c1:89:35:4a:78:72:7a:af:06:9d:3b:69:6e:94:
         c2:02:ba:eb:d1:43:a9:71:19:28:36:47:6a:39:71:bb:9d:8a:
         a6:77:4f:28:27:aa:f9:3b:c4:b6:01:35:49:9a:07:58:66:eb:
         7d:0e:9c:64:44:77:7c:31:85:fb:2b:a7:cc:3e:f2:7f:37:f9:
         aa:d9:5c:c1:b6:a2:8b:76:23:33:f2:d8:13:da:b6:d5:6c:1a:
         4a:3f:cd:d7:4a:1a:7f:66:c0:12:8d:84:5b:04:01:af:91:32:
         d1:17:08:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:11:13 2026 by rpki-client