Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.mft
File:                     rMMoWMzalYbG2WceMQ1RwoJoxFk.mft (raw, json)
Hash identifier:          MbGGmE9XyhdI3BTa51NVWbbVuzLRmrbMMjXW99va19E=
Subject key identifier:   49:E7:C6:93:B7:64:AC:38:2B:C5:FE:43:AC:88:5A:CF:19:6D:A2:A5
Authority key identifier: AC:C3:28:58:CC:DA:95:86:C6:D9:67:1E:31:0D:51:C2:82:68:C4:59
Certificate issuer:       /CN=acc32858ccda9586c6d9671e310d51c28268c459
Certificate serial:       01A0E51A24100E93B693DCF6E5538620EAEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rMMoWMzalYbG2WceMQ1RwoJoxFk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.mft
Manifest number:          1A13
Signing time:             Sun 27 Sep 2026 23:01:30 +0000
Manifest this update:     Sun 27 Sep 2026 23:01:30 +0000
Manifest next update:     Mon 28 Sep 2026 23:01:30 +0000
Files and hashes:         1: NZ4KU7XjOTlJfpxZEeYBOqiocLc.roa (hash: 1hvoqCoD4N6W+G9hGoZfjVl3mm68AnZJdnlCiI2tn30=)
                          2: rMMoWMzalYbG2WceMQ1RwoJoxFk.crl (hash: 8OvMa3dkVR70yYRVrfRte40wRgIXmSrgwuENHaIC4mU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rMMoWMzalYbG2WceMQ1RwoJoxFk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 23:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e5:1a:24:10:0e:93:b6:93:dc:f6:e5:53:86:20:ea:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acc32858ccda9586c6d9671e310d51c28268c459
        Validity
            Not Before: Sep 27 23:01:30 2026 GMT
            Not After : Sep 28 23:01:30 2026 GMT
        Subject: CN=49e7c693b764ac382bc5fe43ac885acf196da2a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:90:f2:ea:95:a0:2e:d1:cb:ac:db:5a:4e:86:
                    5b:06:2b:5a:46:77:79:31:6a:fd:a6:91:47:4a:7f:
                    77:95:25:37:37:cf:80:e5:d1:70:d6:f9:ca:da:68:
                    84:60:1c:57:ba:55:96:3a:75:11:8e:2d:74:21:ca:
                    91:57:3a:70:6c:58:9b:5b:98:a1:a1:59:a5:ea:f9:
                    9d:72:31:8f:d3:38:e2:ec:a6:c9:6b:6d:d1:d4:75:
                    f8:ea:a8:3a:b6:54:22:19:2f:97:7a:b4:25:d3:00:
                    90:71:a6:88:af:f8:d1:c9:c6:23:6a:d4:47:cd:e2:
                    8f:96:a4:86:ab:1a:23:80:8e:a9:6a:21:1f:22:e0:
                    76:b8:fb:e1:d6:0d:bf:66:51:e9:4d:f1:f1:2f:ce:
                    2d:0a:e8:0d:d5:9d:10:8f:02:c6:f7:1d:64:0c:09:
                    e5:33:d6:15:e3:d9:19:97:1c:c7:b9:4c:4e:bf:30:
                    4a:40:ad:69:3f:c8:f1:b7:fc:0d:9a:30:b3:7a:f7:
                    72:53:74:33:f9:45:d5:f1:b4:9d:8f:ea:87:a4:50:
                    36:ea:6b:31:85:20:dd:70:16:38:7b:58:42:73:a6:
                    14:e4:5f:d9:32:5c:ed:81:a4:b2:ce:13:95:56:79:
                    1e:e9:40:d2:93:54:98:f1:b0:b6:3f:b6:98:34:62:
                    7c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:E7:C6:93:B7:64:AC:38:2B:C5:FE:43:AC:88:5A:CF:19:6D:A2:A5
            X509v3 Authority Key Identifier:
                keyid:AC:C3:28:58:CC:DA:95:86:C6:D9:67:1E:31:0D:51:C2:82:68:C4:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMMoWMzalYbG2WceMQ1RwoJoxFk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:ea:12:43:ad:75:42:c8:70:df:5c:86:75:53:0c:8a:3a:21:
         3c:f0:65:44:7d:3a:43:24:96:e2:4d:f1:61:1c:2c:c2:bb:3b:
         48:de:83:e3:c4:1b:33:21:7d:8c:97:42:60:01:de:6a:67:a5:
         cc:fe:ec:77:c5:b6:43:71:e2:67:e7:6c:ce:5e:4a:db:68:a0:
         74:1a:32:91:09:2b:d3:00:3d:33:18:89:94:dd:bb:47:5c:e3:
         79:85:85:fe:5c:c0:48:45:c2:a6:62:7c:f4:23:28:08:36:0e:
         d2:0e:25:b5:e2:9f:e8:60:75:16:ed:95:a5:27:56:86:cc:4c:
         2d:28:1d:b7:06:33:e8:dd:de:60:75:db:64:0f:98:e5:27:6b:
         97:10:7f:ee:e9:0a:2f:2d:b5:46:83:a9:b9:42:55:5b:4d:29:
         d1:03:fa:f4:53:8e:39:ae:06:f0:b4:65:d6:ae:4a:6d:c9:06:
         38:46:fe:46:71:0a:6c:a3:2a:a8:ef:39:01:18:20:9c:cc:c9:
         a9:1b:5d:d5:f5:50:4a:63:25:74:56:d9:3c:df:c4:4a:04:f7:
         49:9b:2a:16:7e:52:59:fc:f9:93:dc:4d:6f:9f:67:fc:db:80:
         98:7d:d1:0f:49:8d:47:3e:77:49:7f:ec:1d:08:d9:30:78:cb:
         0e:f0:68:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 10:24:36 2026 by rpki-client