Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.mft
File:                     MSOZsSkM1Bmni9L7MR47x9-fXx8.mft (raw, json)
Hash identifier:          TYIqFPN31sbkZfBWO7IiSuE7Fw2vsdCfac+5UpJhfgo=
Subject key identifier:   7B:EC:63:BF:DE:46:C6:B6:0F:E2:D3:B6:AA:AD:7C:7E:01:B4:4A:2E
Authority key identifier: 31:23:99:B1:29:0C:D4:19:A7:8B:D2:FB:31:1E:3B:C7:DF:9F:5F:1F
Certificate issuer:       /CN=312399b1290cd419a78bd2fb311e3bc7df9f5f1f
Certificate serial:       01A127D59A647C5F908250431C04AA85A6B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MSOZsSkM1Bmni9L7MR47x9-fXx8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.mft
Manifest number:          05A7
Signing time:             Sat 10 Oct 2026 22:01:12 +0000
Manifest this update:     Sat 10 Oct 2026 22:01:12 +0000
Manifest next update:     Sun 11 Oct 2026 22:01:12 +0000
Files and hashes:         1: MSOZsSkM1Bmni9L7MR47x9-fXx8.crl (hash: PXtfWg10IPETMHdcRkFTaFdN+DUZKsLSDwqN3s3t6Sk=)
                          2: NZcLGrLahjEtjP7fLNWfO9mZoLE.roa (hash: zL4AvdmqKuWo9f0HM/Qoz6/mOwYwWcYK23qO3ml73Nc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MSOZsSkM1Bmni9L7MR47x9-fXx8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 20:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:27:d5:9a:64:7c:5f:90:82:50:43:1c:04:aa:85:a6:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=312399b1290cd419a78bd2fb311e3bc7df9f5f1f
        Validity
            Not Before: Oct 10 22:01:12 2026 GMT
            Not After : Oct 11 22:01:12 2026 GMT
        Subject: CN=7bec63bfde46c6b60fe2d3b6aaad7c7e01b44a2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a4:53:2b:fa:53:d5:f6:17:86:d7:c1:a2:f5:
                    71:f2:d5:e9:f2:b0:d5:b7:db:35:9f:a6:06:cc:9e:
                    35:87:b3:18:d4:19:e0:d7:a6:b5:f5:c9:dc:af:de:
                    0c:e9:b8:d3:e3:41:d7:d4:66:4d:fd:73:ae:fb:14:
                    c9:0c:2e:d2:2e:48:bc:c7:93:08:49:c5:aa:d3:a4:
                    ef:40:34:48:e4:47:a2:2c:0a:f6:75:70:2a:8f:b9:
                    e0:0e:20:63:7f:8d:25:68:63:0f:26:e0:08:cd:1c:
                    2c:10:89:cb:99:d5:ef:05:91:e9:8a:85:68:22:49:
                    e0:5f:c2:69:85:89:f6:80:37:80:23:af:17:6a:6b:
                    34:45:09:e2:2b:4f:bd:e9:50:31:18:fa:7c:9e:e9:
                    b4:84:06:bd:c0:3c:eb:9e:33:8e:b6:c2:d9:9d:6a:
                    8b:d6:3a:fd:be:05:c7:92:4f:04:08:91:ce:79:f0:
                    8c:a4:8b:a3:9d:84:cd:54:a2:a1:77:2f:cc:1e:69:
                    c3:77:c3:08:a9:13:78:e6:87:60:bb:e4:b4:98:71:
                    56:da:2f:95:e9:41:ca:8c:53:d0:d9:d0:fd:f0:1f:
                    bb:48:10:c6:25:64:5d:2f:e0:93:73:35:88:8e:42:
                    2e:fa:ea:25:8a:f9:e4:9c:61:ae:ce:ed:18:ce:95:
                    c9:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:EC:63:BF:DE:46:C6:B6:0F:E2:D3:B6:AA:AD:7C:7E:01:B4:4A:2E
            X509v3 Authority Key Identifier:
                keyid:31:23:99:B1:29:0C:D4:19:A7:8B:D2:FB:31:1E:3B:C7:DF:9F:5F:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MSOZsSkM1Bmni9L7MR47x9-fXx8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:94:e3:5b:83:c1:42:b6:f4:b7:28:f2:96:fe:6c:6e:d1:6a:
         0b:8d:3a:84:68:05:02:22:30:ce:76:c4:6a:a9:73:58:9d:b4:
         02:9a:55:6e:50:12:e2:b7:e1:02:76:c0:ae:8b:f2:21:88:81:
         20:6e:ee:60:6c:3a:85:14:c2:ef:7d:13:b6:77:b4:c4:02:ca:
         91:40:a5:18:06:f1:8b:69:1b:96:3d:7b:ea:61:fb:7e:c4:a4:
         70:2a:9c:31:41:82:8e:cc:f3:fb:4e:5a:ca:a0:ef:2a:cc:00:
         ab:40:94:57:b6:64:39:d9:59:2d:65:5d:b0:be:b0:47:0d:55:
         46:ea:d3:db:7a:9f:a9:d8:0c:6f:83:fc:e6:6c:60:c7:b1:12:
         9f:39:bf:b6:f4:59:36:ba:0b:bf:00:01:ff:21:65:a0:b3:60:
         39:5d:49:e1:e0:3d:be:97:bc:b7:74:38:57:77:ee:43:9b:9c:
         c8:a1:b1:eb:02:e2:17:16:8d:94:f4:54:91:c2:0a:6a:ad:14:
         b5:cf:0b:63:d3:47:77:07:26:16:80:d5:8e:11:4d:9c:80:b6:
         c7:bd:40:82:bb:33:54:dc:27:dc:73:76:d6:4f:30:cf:84:e9:
         97:28:a8:12:98:9c:4e:e5:55:bc:65:03:b2:64:1b:41:be:3f:
         b7:90:9a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 03:51:14 2026 by rpki-client