Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/812a15-c6e4-416a-b09d-84bf31de8413/1/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.mft
File:                     MKnJV9IJHSTg3-X2bJe-SqH5MIQ.mft (raw, json)
Hash identifier:          uOK5uksWBKkiXCPg5CgUD4Sred33Qu/RwxVcxrk33LA=
Subject key identifier:   82:58:13:77:BD:6C:50:0C:D2:63:A2:98:A6:B1:FF:92:68:A6:E6:21
Authority key identifier: 30:A9:C9:57:D2:09:1D:24:E0:DF:E5:F6:6C:97:BE:4A:A1:F9:30:84
Certificate issuer:       /CN=30a9c957d2091d24e0dfe5f66c97be4aa1f93084
Certificate serial:       01A0CBC74485BD69C15D73069C411741466A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/812a15-c6e4-416a-b09d-84bf31de8413/1/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.mft
Manifest number:          1A67
Signing time:             Wed 23 Sep 2026 01:00:28 +0000
Manifest this update:     Wed 23 Sep 2026 01:00:28 +0000
Manifest next update:     Thu 24 Sep 2026 01:00:28 +0000
Files and hashes:         1: MKnJV9IJHSTg3-X2bJe-SqH5MIQ.crl (hash: jpfVLbkbrF29wI3EPToQ+39Xl3bKrBMQF41kPWYvJE4=)
                          2: PI-iyfgjqOsckNLoaqd8v_mV8Ao.roa (hash: xH29u4bjzu1wjXHSI6AzFo4CKDsCw4Lu39FOZp62TT4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/812a15-c6e4-416a-b09d-84bf31de8413/1/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/812a15-c6e4-416a-b09d-84bf31de8413/1/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cb:c7:44:85:bd:69:c1:5d:73:06:9c:41:17:41:46:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30a9c957d2091d24e0dfe5f66c97be4aa1f93084
        Validity
            Not Before: Sep 23 01:00:28 2026 GMT
            Not After : Sep 24 01:00:28 2026 GMT
        Subject: CN=82581377bd6c500cd263a298a6b1ff9268a6e621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:be:6b:37:79:b6:f6:c8:7b:9a:a1:8a:3b:da:
                    cd:63:37:bc:28:7d:ef:06:af:43:3b:3e:7c:dc:42:
                    3c:1c:ca:36:dc:f8:e3:37:68:2c:04:b3:a1:c9:db:
                    9e:1b:35:c9:27:3a:d3:5a:31:5b:f1:5d:76:53:04:
                    5c:7e:bf:6e:25:67:4c:91:eb:6c:bb:b1:78:a2:1c:
                    79:0f:26:c0:95:e7:e7:b3:97:13:0e:45:a3:da:4e:
                    76:1b:c4:6d:37:c6:a7:99:cf:28:ab:74:55:1f:11:
                    0e:5b:e5:54:88:fb:e3:a8:72:4d:1e:11:21:e4:7e:
                    1d:1b:13:20:4f:0c:55:1e:a4:ea:3d:52:37:03:60:
                    a3:e0:83:68:0a:d8:f9:2b:8c:db:48:eb:be:63:cc:
                    ec:94:19:8e:8e:98:d3:c0:e2:74:89:b9:29:91:c1:
                    54:91:ad:69:73:34:18:f6:4e:5e:43:cf:fa:23:c4:
                    31:8d:2c:0e:21:78:a7:c8:b1:06:e9:e5:5b:5d:e8:
                    59:ee:71:7f:8f:43:30:72:31:c2:94:ca:78:c3:25:
                    45:d1:40:5e:9b:fb:ca:2b:be:da:b7:23:5d:c0:a2:
                    6e:87:85:da:6b:d0:54:48:9d:95:27:57:c1:7e:e7:
                    96:61:8f:1b:d7:e7:94:a6:79:a6:71:59:13:6e:e5:
                    8d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:58:13:77:BD:6C:50:0C:D2:63:A2:98:A6:B1:FF:92:68:A6:E6:21
            X509v3 Authority Key Identifier:
                keyid:30:A9:C9:57:D2:09:1D:24:E0:DF:E5:F6:6C:97:BE:4A:A1:F9:30:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/812a15-c6e4-416a-b09d-84bf31de8413/1/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/812a15-c6e4-416a-b09d-84bf31de8413/1/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:c5:5a:86:e8:f5:ff:09:68:d7:a3:4a:51:0d:69:bd:28:18:
         ae:e2:a4:69:83:68:01:d6:2b:2b:d6:8d:d2:0e:4d:86:8d:68:
         64:25:c9:96:7e:9e:0b:aa:82:8b:61:ed:ca:a5:de:cd:25:c4:
         2d:81:73:97:4f:51:8d:b3:48:da:52:fd:5b:0d:bf:cf:8f:6a:
         81:8f:aa:44:fc:81:c7:7a:17:05:2b:80:ee:46:76:37:00:72:
         23:f6:f7:02:b1:f2:d6:ff:67:a0:0c:63:86:76:0b:90:2d:e6:
         ff:e0:1f:81:be:62:9f:c0:38:98:c7:97:e4:c5:b3:1e:ae:3f:
         b0:e2:a7:5a:0f:20:b3:e5:53:62:a7:72:6f:ab:71:21:8a:e1:
         e9:f7:50:c9:af:0f:f4:73:b8:63:af:b3:31:58:8d:7e:74:78:
         15:57:45:d1:93:19:f7:42:3d:98:89:3d:79:c3:61:77:7b:a5:
         91:59:ba:e7:fe:b8:fd:b6:b0:75:24:5b:7e:24:95:b8:52:06:
         6d:a7:d4:ff:8a:11:07:e2:47:31:62:ab:04:9b:69:71:6d:f5:
         a4:06:71:cb:a7:9f:24:ce:2b:f0:06:75:88:3d:d6:65:a5:24:
         d0:64:f5:29:23:35:2f:0d:a6:e3:3b:77:4d:02:87:6e:64:32:
         04:f8:de:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:01:37 2026 by rpki-client