Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.mft
File:                     miM7vd_kOGRvWG8IXl3w15vfufw.mft (raw, json)
Hash identifier:          XELij0jwYnQjBgvgVXMuqnYvwLNkpqDripQW8SOrXQA=
Subject key identifier:   C6:D9:E7:B0:74:F3:C7:B3:3F:86:F6:0D:D2:BE:36:17:42:84:42:CE
Authority key identifier: 9A:23:3B:BD:DF:E4:38:64:6F:58:6F:08:5E:5D:F0:D7:9B:DF:B9:FC
Certificate issuer:       /CN=9a233bbddfe438646f586f085e5df0d79bdfb9fc
Certificate serial:       01A0F7202E053D8FA4A3722736E1599194E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/miM7vd_kOGRvWG8IXl3w15vfufw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.mft
Manifest number:          0976
Signing time:             Thu 01 Oct 2026 11:01:16 +0000
Manifest this update:     Thu 01 Oct 2026 11:01:16 +0000
Manifest next update:     Fri 02 Oct 2026 11:01:16 +0000
Files and hashes:         1: M1ruMNKluNAuiHKd8f6PvAhDGEs.roa (hash: FWsTJhEBrkq8kPBWZ62T1F7ClTwy4cYS4tWh5TLbeTA=)
                          2: XNKWPCMOPLauToaa-Vtz2zcauoc.roa (hash: luJuVPoWx92bH75pBWbCMtwrgqr+Km6/eamqOW1HDZc=)
                          3: dyhz1TfOcl672ykR-umzk8d_7AQ.roa (hash: i2scR6hBPf9EaO7J0DMnFp1+UeNi6vv8mMyfEjaxgaY=)
                          4: miM7vd_kOGRvWG8IXl3w15vfufw.crl (hash: MNZILMTxnqoJ5bXPerXoWbBICX3uGL1yPhHd9ER1IQQ=)
                          5: nl8rJp2Gx045j4pPDWegyHxSDoU.roa (hash: 2GNCXLXhx5YXmc3JB/+CLbWieU0ZOSqkjHUYlGnPA30=)
                          6: vhhE0LlaMoAC65mEN3TyEobLF50.roa (hash: Us5rGsyQlFj4bRY6YlCqwzJno3k3/qLxqTpPkFS4SJ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/miM7vd_kOGRvWG8IXl3w15vfufw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 Oct 2026 11:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f7:20:2e:05:3d:8f:a4:a3:72:27:36:e1:59:91:94:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a233bbddfe438646f586f085e5df0d79bdfb9fc
        Validity
            Not Before: Oct  1 11:01:16 2026 GMT
            Not After : Oct  2 11:01:16 2026 GMT
        Subject: CN=c6d9e7b074f3c7b33f86f60dd2be3617428442ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d1:77:92:62:91:8a:89:d4:e7:cb:28:1f:94:
                    76:52:65:4f:9b:a1:ac:46:30:7a:98:35:be:72:1e:
                    42:b3:e6:a8:48:d4:38:d7:83:c0:4a:84:27:bd:eb:
                    a5:d8:5e:90:8a:a8:1e:9c:f8:12:69:7b:db:18:53:
                    dd:e0:a5:9f:58:64:eb:fc:83:ab:5a:80:6e:58:f0:
                    07:c6:e7:e0:ef:f5:1c:08:39:83:8b:f4:33:78:53:
                    2a:65:c4:8d:b7:4a:71:c3:d1:66:e3:33:cd:7f:54:
                    3e:e4:31:87:e1:2b:51:81:0d:e2:a4:6d:b5:21:2f:
                    cf:41:b3:8c:54:e6:df:54:04:dc:4a:77:54:f7:54:
                    f6:e7:e3:75:77:76:21:85:5c:75:da:48:e7:be:8c:
                    eb:52:47:b5:a3:09:47:8b:9f:fa:9a:43:b5:08:b5:
                    2f:e5:ce:8f:6f:36:2f:88:6e:6d:06:f1:66:8f:71:
                    b6:af:b0:ac:a8:a1:2c:35:7d:02:06:57:1e:95:96:
                    32:dd:a5:9d:2d:8f:0e:bc:5a:b9:f9:c7:66:3e:25:
                    87:bb:e4:d1:9b:aa:75:83:bd:c8:96:b2:7b:08:ac:
                    9e:2f:de:5a:5b:5a:b6:a3:32:49:30:4d:b5:5f:68:
                    97:f7:a4:c5:4b:80:4c:d4:e8:f6:d4:82:56:7e:43:
                    1a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:D9:E7:B0:74:F3:C7:B3:3F:86:F6:0D:D2:BE:36:17:42:84:42:CE
            X509v3 Authority Key Identifier:
                keyid:9A:23:3B:BD:DF:E4:38:64:6F:58:6F:08:5E:5D:F0:D7:9B:DF:B9:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/miM7vd_kOGRvWG8IXl3w15vfufw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:93:ee:26:97:c0:3b:00:e3:10:26:e4:dc:d2:14:71:6f:b5:
         52:0b:ac:7c:0c:0b:bd:e5:81:2e:ca:e7:55:2d:d0:f2:94:bb:
         a5:5b:e8:3d:6b:ca:05:f3:2e:f3:4a:1c:a9:51:e0:70:84:4d:
         6c:39:2f:e7:6f:a4:d6:14:d7:75:ff:31:3b:5d:62:16:63:a7:
         58:69:5f:5b:ff:8a:36:d3:d0:43:b3:2f:8c:a5:ab:2f:3c:96:
         a8:ac:fa:d2:7a:49:54:34:fe:98:1a:95:82:37:10:32:61:3b:
         2e:4f:bd:c7:26:e1:be:13:ee:d2:be:5f:c7:ed:e1:0e:06:20:
         07:45:a6:a9:93:eb:ec:9e:8b:4f:22:c3:fb:7d:f1:f0:cd:e7:
         41:94:fa:c9:46:5a:fa:24:5e:09:17:87:fc:74:51:6c:84:85:
         da:fa:85:5a:d2:ce:00:b5:99:88:4a:81:93:fe:6f:62:b3:34:
         6a:6b:87:32:1d:03:cc:df:75:6c:6f:1c:82:5e:63:6c:67:72:
         81:e2:ea:6f:95:b6:3c:7c:0a:61:96:72:d6:d6:fe:9a:1f:8e:
         42:7e:e1:e4:38:59:f6:1c:a1:c3:f3:58:b9:b4:56:98:d7:a4:
         8f:39:0b:92:2d:7e:60:ae:67:ef:70:4b:ca:c4:8d:92:a2:35:
         08:b9:b7:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 20:25:27 2026 by rpki-client