Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.mft
File:                     MBlcO7BQWGtfTlAEEYAHxIs06uU.mft (raw, json)
Hash identifier:          J44RyKctX6Lh5NcYbgUuNTXl6ha9zY0MS3GTmLgtuKs=
Subject key identifier:   8E:CF:F9:CA:42:22:D3:21:F4:24:F1:A5:B3:A6:1F:CD:7B:BE:A7:F8
Authority key identifier: 30:19:5C:3B:B0:50:58:6B:5F:4E:50:04:11:80:07:C4:8B:34:EA:E5
Certificate issuer:       /CN=30195c3bb050586b5f4e5004118007c48b34eae5
Certificate serial:       01A11907607FBB04B5A3B474DBB3C7C65CD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MBlcO7BQWGtfTlAEEYAHxIs06uU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.mft
Manifest number:          1A91
Signing time:             Thu 08 Oct 2026 01:01:16 +0000
Manifest this update:     Thu 08 Oct 2026 01:01:16 +0000
Manifest next update:     Fri 09 Oct 2026 01:01:16 +0000
Files and hashes:         1: MBlcO7BQWGtfTlAEEYAHxIs06uU.crl (hash: KFtKn0bNG6keBUB/d5++aXkkttGy/c9vG3EMDuR0St0=)
                          2: qeezGpylFYQWdw5Zzwgz6qTCezQ.roa (hash: 81jQgwS6nCCkT6pNsFrxENxQzb13LmVBgngNENTsUtk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MBlcO7BQWGtfTlAEEYAHxIs06uU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Oct 2026 22:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:19:07:60:7f:bb:04:b5:a3:b4:74:db:b3:c7:c6:5c:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30195c3bb050586b5f4e5004118007c48b34eae5
        Validity
            Not Before: Oct  8 01:01:16 2026 GMT
            Not After : Oct  9 01:01:16 2026 GMT
        Subject: CN=8ecff9ca4222d321f424f1a5b3a61fcd7bbea7f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e6:16:c6:be:f3:ca:bb:97:48:92:0e:b1:45:
                    de:47:ce:81:5c:83:c6:8e:53:20:3e:58:1b:46:b1:
                    61:6a:71:2b:05:a0:45:94:9f:a8:a8:79:04:c3:ca:
                    68:8e:1d:de:10:d7:dc:90:0e:e5:32:df:c4:49:09:
                    79:5a:d0:e3:3c:82:cb:b1:01:61:5f:94:05:23:2f:
                    0c:31:76:9f:9a:fe:66:30:d7:2e:ed:54:1a:2c:ad:
                    7c:04:da:7b:07:88:fb:52:9e:3d:9a:e7:b9:54:f4:
                    a3:b0:27:72:46:14:0f:5f:22:13:a0:b6:1e:3b:5e:
                    fe:bb:c5:32:b2:8a:ec:4a:c7:11:e7:90:44:3b:dc:
                    a8:f1:b2:89:8c:e4:8b:41:ec:7e:bb:7f:b6:33:31:
                    4d:37:0d:50:00:5a:75:61:2e:0c:91:f0:29:62:1b:
                    57:92:ca:d3:f4:e2:63:33:3d:7f:12:fa:46:59:93:
                    6a:3f:04:c2:46:eb:12:02:8b:45:39:55:b0:75:4c:
                    9b:84:f7:ca:b0:4a:46:c4:9c:92:87:30:1e:26:d0:
                    bd:c1:2b:d8:f0:93:9e:fe:51:38:3d:e0:82:b0:19:
                    c8:93:9c:eb:d0:8f:8b:71:8d:77:ee:cb:d5:74:c2:
                    93:31:02:de:c7:98:08:34:4e:34:41:54:61:b0:d9:
                    11:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:CF:F9:CA:42:22:D3:21:F4:24:F1:A5:B3:A6:1F:CD:7B:BE:A7:F8
            X509v3 Authority Key Identifier:
                keyid:30:19:5C:3B:B0:50:58:6B:5F:4E:50:04:11:80:07:C4:8B:34:EA:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBlcO7BQWGtfTlAEEYAHxIs06uU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:17:54:38:4f:b0:4b:02:31:8b:1d:47:a4:d5:d4:a0:be:39:
         c1:0c:f4:4e:e6:9e:77:b3:c3:b9:8a:a6:d5:16:fd:4b:7f:b5:
         61:93:f6:32:0f:e3:71:29:99:61:f5:89:00:91:6c:6d:32:c1:
         03:b8:67:56:ea:b3:98:c8:64:5a:51:a8:a3:1d:dc:0e:20:7f:
         1f:8c:60:18:7d:2d:26:44:95:06:1f:ae:75:58:36:ec:74:76:
         07:21:08:37:41:84:18:81:64:e6:e6:8f:35:ce:72:ff:49:f2:
         ec:ba:a2:68:1f:32:66:58:94:20:23:4f:6b:c0:ea:46:ac:fc:
         01:ca:e6:64:96:46:8f:7e:6e:3c:b7:bd:d9:c3:53:89:10:b8:
         bd:c3:25:04:46:27:0e:66:ec:b8:d1:94:4d:41:63:8f:8e:f5:
         a4:94:25:66:fc:07:6e:27:73:ac:42:1c:82:20:f8:66:60:ee:
         24:4d:c1:2f:f0:33:ff:bd:b8:b2:34:98:40:4f:aa:10:f1:a7:
         4b:d3:88:1f:76:5f:01:90:70:f1:65:02:54:91:0a:a6:37:ff:
         f1:14:e5:2a:8f:c7:4a:5e:3a:91:ff:4d:8a:26:6c:af:07:3f:
         70:1d:be:95:c9:eb:ce:6e:a5:64:ac:4d:86:ff:d6:1e:e5:37:
         03:ac:ac:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 09:22:16 2026 by rpki-client