Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.mft
File:                     mxl1igh4doFtwZNh6vHpQS3nP4Y.mft (raw, json)
Hash identifier:          T8FEh0nrtkzJCDfVFTHqNg6Sd2oio12HD7fYInoTpxw=
Subject key identifier:   76:6B:70:AC:DD:27:E5:3A:42:D6:1D:71:A9:85:41:E5:76:C8:86:0D
Authority key identifier: 9B:19:75:8A:08:78:76:81:6D:C1:93:61:EA:F1:E9:41:2D:E7:3F:86
Certificate issuer:       /CN=9b19758a087876816dc19361eaf1e9412de73f86
Certificate serial:       01A0C557D823C38B1E0A1917819EA56D0DA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mxl1igh4doFtwZNh6vHpQS3nP4Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.mft
Manifest number:          0B1C
Signing time:             Mon 21 Sep 2026 19:01:03 +0000
Manifest this update:     Mon 21 Sep 2026 19:01:03 +0000
Manifest next update:     Tue 22 Sep 2026 19:01:03 +0000
Files and hashes:         1: 6mL3LTAHEnWX958mvj_U__80Q9Y.roa (hash: ywx5JPQaT2XjkakDGh0HH3nPH7e5YehxWzpsRhHkQaI=)
                          2: _RoC_RNXE3s_SWdnfBHgPoNrU2M.roa (hash: wPRRqYY5EWMxD0w+AF1woDBkV71SkgmmKkudFef6WP0=)
                          3: _no2T5wGNnY26JGUD4kdd2oqfik.roa (hash: cAZL1uQQoGuptZEdg5D0yO2UPDl/TjYUL4Qg8BJ2wIg=)
                          4: mxl1igh4doFtwZNh6vHpQS3nP4Y.crl (hash: yzv8KlqCpT1loC+1oDttLCE4g1XVteNiovqfDWfzFd8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mxl1igh4doFtwZNh6vHpQS3nP4Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 19:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c5:57:d8:23:c3:8b:1e:0a:19:17:81:9e:a5:6d:0d:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b19758a087876816dc19361eaf1e9412de73f86
        Validity
            Not Before: Sep 21 19:01:03 2026 GMT
            Not After : Sep 22 19:01:03 2026 GMT
        Subject: CN=766b70acdd27e53a42d61d71a98541e576c8860d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:40:a7:02:7e:07:80:81:f4:f1:54:cb:1d:66:
                    40:26:f5:13:4f:c0:64:81:de:c4:5e:da:d8:05:1a:
                    0c:ad:a6:23:20:dd:42:d4:66:e0:f1:5d:46:0f:c8:
                    dd:9f:e5:7a:74:8f:7c:5f:e1:27:59:6c:9f:42:16:
                    4d:01:9c:69:19:cc:28:5c:9c:24:58:2f:5b:f9:ea:
                    8a:b2:ff:d6:db:fe:07:07:3d:7b:94:d9:ba:db:e4:
                    59:ad:ff:76:77:62:8c:39:c4:c4:64:72:fa:65:09:
                    ed:9f:27:74:68:13:91:06:6b:16:50:ee:06:d2:11:
                    e3:ea:3c:a4:6d:9d:10:4d:43:ad:a7:4d:a0:4a:9a:
                    31:83:7b:40:01:bb:d9:66:80:74:f8:52:da:48:11:
                    5f:86:98:b8:22:58:ee:f2:45:7f:17:5f:a7:82:a5:
                    ad:f9:06:30:64:e0:95:c8:2e:a6:00:57:c0:89:d6:
                    a5:65:7f:b0:4d:d0:80:45:72:36:6f:13:b4:d1:d7:
                    9c:f7:be:86:b6:79:54:03:84:6a:6c:d5:82:f3:15:
                    ca:a8:7b:de:5a:00:67:2c:04:f8:38:c0:5e:32:a3:
                    6f:b7:1b:d8:e3:8a:9a:70:44:e3:9b:cd:d6:07:af:
                    a4:85:8e:a8:da:33:ba:77:4b:58:fe:71:1c:8e:2e:
                    b4:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:6B:70:AC:DD:27:E5:3A:42:D6:1D:71:A9:85:41:E5:76:C8:86:0D
            X509v3 Authority Key Identifier:
                keyid:9B:19:75:8A:08:78:76:81:6D:C1:93:61:EA:F1:E9:41:2D:E7:3F:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mxl1igh4doFtwZNh6vHpQS3nP4Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:56:c0:8f:1f:47:75:bf:07:e1:1e:da:58:45:17:88:04:c2:
         ec:b9:7f:0f:7b:fb:06:85:08:f7:3c:18:a8:95:90:23:ea:5a:
         3c:11:53:75:9e:b8:77:e9:79:8e:2c:dc:e4:ee:d4:32:60:5a:
         fb:f8:10:12:e1:25:90:af:b8:e6:cd:e0:0e:2f:45:8d:37:e1:
         41:44:67:06:2c:95:2a:85:bb:f8:05:fa:52:64:8b:4b:64:39:
         c2:d4:d4:9f:2d:df:2d:80:1f:87:f0:6e:39:10:18:fd:ef:30:
         9e:aa:98:bd:b3:04:bc:cc:53:1e:9a:db:c6:f0:62:d7:de:e9:
         ba:3e:59:ed:74:2b:b3:70:6d:c2:e0:1d:22:51:2a:2b:12:21:
         67:67:7c:e4:ce:78:b8:1f:46:91:67:31:f4:5b:35:45:ac:ef:
         4e:c0:f5:0d:0b:15:cc:c6:e6:df:21:dc:87:d2:6b:8c:49:d7:
         3a:f2:51:d8:b9:8c:0b:1e:79:13:1a:ea:2b:df:d0:5b:3d:83:
         cf:65:29:73:5e:17:7e:75:e3:09:d8:0a:67:6b:2e:ca:91:12:
         24:28:79:aa:68:d3:07:30:de:ee:46:fb:73:9e:48:70:89:87:
         c7:3d:4c:85:21:ed:9f:85:46:42:1b:31:1a:d2:7e:9b:bd:4a:
         4d:c1:5e:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDFV9gjw4seChkXgZ6lbQ2jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliMTk3NThhMDg3ODc2ODE2ZGMxOTM2MWVhZjFlOTQxMmRl
NzNmODYwHhcNMjYwOTIxMTkwMTAzWhcNMjYwOTIyMTkwMTAzWjAzMTEwLwYDVQQD
Eyg3NjZiNzBhY2RkMjdlNTNhNDJkNjFkNzFhOTg1NDFlNTc2Yzg4NjBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkCnAn4HgIH08VTLHWZAJvUTT8Bk
gd7EXtrYBRoMraYjIN1C1Gbg8V1GD8jdn+V6dI98X+EnWWyfQhZNAZxpGcwoXJwk
WC9b+eqKsv/W2/4HBz17lNm62+RZrf92d2KMOcTEZHL6ZQntnyd0aBORBmsWUO4G
0hHj6jykbZ0QTUOtp02gSpoxg3tAAbvZZoB0+FLaSBFfhpi4Ilju8kV/F1+ngqWt
+QYwZOCVyC6mAFfAidalZX+wTdCARXI2bxO00dec976GtnlUA4RqbNWC8xXKqHve
WgBnLAT4OMBeMqNvtxvY44qacETjm83WB6+khY6o2jO6d0tY/nEcji60SQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHZrcKzdJ+U6QtYdcamFQeV2yIYNMB8GA1UdIwQY
MBaAFJsZdYoIeHaBbcGTYerx6UEt5z+GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXhsMWlnaDRkb0Z0d1pOaDZ2SHBRUzNuUDRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9iYTZmM2UtZTk1Yi00OGQyLTg0MTkt
NDEzZGE2NjdhOGJlLzEvbXhsMWlnaDRkb0Z0d1pOaDZ2SHBRUzNuUDRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9iYTZmM2UtZTk1Yi00OGQyLTg0MTktNDEzZGE2NjdhOGJl
LzEvbXhsMWlnaDRkb0Z0d1pOaDZ2SHBRUzNuUDRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL1bAjx9H
db8H4R7aWEUXiATC7Ll/D3v7BoUI9zwYqJWQI+paPBFTdZ64d+l5jizc5O7UMmBa
+/gQEuElkK+45s3gDi9FjTfhQURnBiyVKoW7+AX6UmSLS2Q5wtTUny3fLYAfh/Bu
ORAY/e8wnqqYvbMEvMxTHprbxvBi197puj5Z7XQrs3BtwuAdIlEqKxIhZ2d85M54
uB9GkWcx9Fs1RazvTsD1DQsVzMbm3yHch9JrjEnXOvJR2LmMCx55ExrqK9/QWz2D
z2Upc14XfnXjCdgKZ2suypESJCh5qmjTBzDe7kb7c55IcImHxz1MhSHtn4VGQhsx
GtJ+m71KTcFegw==
-----END CERTIFICATE-----
Generated at Tue Sep 22 02:21:11 2026 by rpki-client