Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/f08716-4d2a-46ed-bded-af3e7d42968d/1/mUqt73Cb43uczULMK4xzLDlxUPo.mft
File:                     mUqt73Cb43uczULMK4xzLDlxUPo.mft (raw, json)
Hash identifier:          w7f6+CAqXoLm5wn4bW4eUFauo5tMQGzRYV1hYAz/oRk=
Subject key identifier:   5C:11:E3:6D:11:D5:FC:A3:5D:11:81:4D:32:91:6A:ED:80:0E:A5:49
Authority key identifier: 99:4A:AD:EF:70:9B:E3:7B:9C:CD:42:CC:2B:8C:73:2C:39:71:50:FA
Certificate issuer:       /CN=994aadef709be37b9ccd42cc2b8c732c397150fa
Certificate serial:       01A0CBC7ABFBC7FAA5AA2A1D86CF2E3ABA77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mUqt73Cb43uczULMK4xzLDlxUPo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/f08716-4d2a-46ed-bded-af3e7d42968d/1/mUqt73Cb43uczULMK4xzLDlxUPo.mft
Manifest number:          1A4D
Signing time:             Wed 23 Sep 2026 01:00:55 +0000
Manifest this update:     Wed 23 Sep 2026 01:00:55 +0000
Manifest next update:     Thu 24 Sep 2026 01:00:55 +0000
Files and hashes:         1: alIVB3DRNeac3-KBgtiTOAlVqYg.roa (hash: 5rWQXWfQK4PnnDUyWE3w/iefHP9zcHf0QTSdTcrqmsE=)
                          2: mUqt73Cb43uczULMK4xzLDlxUPo.crl (hash: iSCUJaW5H0N1wK2jNowoCPtyIWsMU+5dC1V1Sn8wh54=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/f08716-4d2a-46ed-bded-af3e7d42968d/1/mUqt73Cb43uczULMK4xzLDlxUPo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/f08716-4d2a-46ed-bded-af3e7d42968d/1/mUqt73Cb43uczULMK4xzLDlxUPo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mUqt73Cb43uczULMK4xzLDlxUPo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cb:c7:ab:fb:c7:fa:a5:aa:2a:1d:86:cf:2e:3a:ba:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=994aadef709be37b9ccd42cc2b8c732c397150fa
        Validity
            Not Before: Sep 23 01:00:55 2026 GMT
            Not After : Sep 24 01:00:55 2026 GMT
        Subject: CN=5c11e36d11d5fca35d11814d32916aed800ea549
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:bd:4d:c4:05:12:fb:91:d5:ea:ff:91:aa:78:
                    6b:d6:ad:7d:87:53:12:c5:0f:a7:e7:cc:88:67:c7:
                    00:60:28:25:ce:7a:b5:f3:15:c3:65:49:be:5e:25:
                    53:3c:c9:50:ff:04:70:12:3f:05:04:2e:bb:62:ff:
                    72:52:23:ec:5e:0e:02:90:18:c0:08:9f:80:a9:b5:
                    5f:f1:e5:04:5d:58:f4:19:f3:5b:de:37:27:d7:b6:
                    8b:05:ca:32:a2:66:74:88:bd:81:c7:d5:d8:90:d6:
                    c6:f1:e8:a5:76:27:15:f7:be:4a:b2:cd:d3:17:f0:
                    af:cb:40:15:64:35:51:7d:e7:7a:af:c4:90:8e:f4:
                    63:84:79:ec:38:f1:0a:3c:22:3a:ff:cc:7e:ce:06:
                    77:5f:42:87:b8:f6:70:19:77:e3:86:5a:92:de:60:
                    ed:d4:80:62:19:bf:fc:fa:09:88:84:c7:2b:5d:dd:
                    a2:7f:97:16:43:a9:14:f1:1c:65:99:f9:c1:c8:50:
                    cc:38:b8:12:bf:19:ef:6a:a3:72:8a:d7:63:20:ce:
                    02:73:9b:33:6c:e8:9d:60:ba:9f:3d:6b:c2:28:8f:
                    3f:fe:32:34:46:36:6c:5c:9e:54:03:b5:2d:59:54:
                    c2:1d:70:ad:c0:1b:35:d5:34:a0:ca:90:a0:38:49:
                    9f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:11:E3:6D:11:D5:FC:A3:5D:11:81:4D:32:91:6A:ED:80:0E:A5:49
            X509v3 Authority Key Identifier:
                keyid:99:4A:AD:EF:70:9B:E3:7B:9C:CD:42:CC:2B:8C:73:2C:39:71:50:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mUqt73Cb43uczULMK4xzLDlxUPo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/f08716-4d2a-46ed-bded-af3e7d42968d/1/mUqt73Cb43uczULMK4xzLDlxUPo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/f08716-4d2a-46ed-bded-af3e7d42968d/1/mUqt73Cb43uczULMK4xzLDlxUPo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:3c:b6:04:12:2e:39:9e:da:e5:26:f8:24:9b:f2:3c:f1:10:
         cd:29:13:bd:eb:40:61:15:03:78:e4:49:36:88:a6:65:f7:4e:
         23:54:f5:21:f0:0b:c8:6c:45:71:fe:73:b1:a4:5c:6f:e9:88:
         ab:e6:91:d4:af:b1:bb:ce:99:dc:33:5c:f8:d3:29:ca:28:b9:
         70:9a:c9:f2:d4:36:f9:c5:1c:cd:fb:16:dd:67:16:d8:eb:95:
         c7:24:7c:ad:93:ce:78:69:de:d8:02:27:14:e4:d8:eb:09:18:
         7e:01:a5:2e:96:a2:39:bd:7c:a6:7a:63:95:a9:0a:ce:56:6b:
         08:4b:01:92:2a:da:6d:47:a2:fd:02:fb:d1:3f:56:fe:3c:8a:
         b8:d7:71:4f:cb:b4:fa:98:4a:84:fc:4b:37:96:e0:f8:d8:cd:
         55:00:82:f0:0b:63:f6:42:58:d8:8f:1d:87:7d:73:92:e7:f5:
         d9:be:bd:c5:37:b0:b0:b5:12:5d:2c:4e:15:fa:f9:b6:10:11:
         35:68:57:67:3a:b3:8f:55:21:30:a3:f9:23:c2:13:18:1f:7a:
         a0:bd:11:65:99:c3:06:85:bc:41:7b:3a:c7:56:6f:3d:93:4a:
         b3:88:0e:aa:db:4b:af:39:c4:64:02:50:b6:b0:8f:6a:12:1b:
         d1:39:64:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:19:52 2026 by rpki-client