Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.mft
File:                     mowynYdjwp8pkxq7uBlfl1A4KYs.mft (raw, json)
Hash identifier:          +MNHGckKQRpoaTr27poDnSXicXZ3YFA64FQ2x/GM7Nk=
Subject key identifier:   7A:50:63:E6:D7:E1:FD:48:DF:BF:18:16:BC:B9:6B:F1:DD:E3:83:55
Authority key identifier: 9A:8C:32:9D:87:63:C2:9F:29:93:1A:BB:B8:19:5F:97:50:38:29:8B
Certificate issuer:       /CN=9a8c329d8763c29f29931abbb8195f975038298b
Certificate serial:       01A13C38886188F035278A7CED30F849F645
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mowynYdjwp8pkxq7uBlfl1A4KYs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.mft
Manifest number:          079B
Signing time:             Wed 14 Oct 2026 21:01:40 +0000
Manifest this update:     Wed 14 Oct 2026 21:01:40 +0000
Manifest next update:     Thu 15 Oct 2026 21:01:40 +0000
Files and hashes:         1: DEtJZBXl24UTmKRuIq3pxJtnaOw.roa (hash: MndJAH2T2Jh63p0lxR3Y6bgJbjAqRwsstx6Rzo2dgCo=)
                          2: mowynYdjwp8pkxq7uBlfl1A4KYs.crl (hash: XBV6fMnLIt0PkfBjqNGu1Ljb/9cHn5ekXWXfbuPVQuI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mowynYdjwp8pkxq7uBlfl1A4KYs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 21:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3c:38:88:61:88:f0:35:27:8a:7c:ed:30:f8:49:f6:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a8c329d8763c29f29931abbb8195f975038298b
        Validity
            Not Before: Oct 14 21:01:40 2026 GMT
            Not After : Oct 15 21:01:40 2026 GMT
        Subject: CN=7a5063e6d7e1fd48dfbf1816bcb96bf1dde38355
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:df:00:e1:b0:a2:30:e6:23:de:c9:79:1d:76:
                    75:6e:1d:d8:72:43:fe:0a:e6:2b:47:c9:1c:a7:57:
                    3c:40:a3:16:87:13:ac:dd:3b:1a:08:c7:16:c6:78:
                    f6:be:ce:11:b6:51:8f:3c:26:0b:15:e5:ab:e2:18:
                    6c:7e:2a:c7:60:08:18:c1:d9:2b:d6:b3:92:79:b3:
                    a3:23:44:d3:97:52:8c:c1:56:7d:e7:65:26:06:63:
                    21:71:18:70:e4:17:e6:ce:f4:64:eb:f5:4c:53:9f:
                    3f:4f:27:9c:39:8c:7f:f7:9f:48:24:89:53:f1:cc:
                    b0:82:56:4e:38:ba:c2:e6:21:ee:1d:01:a7:2c:5b:
                    61:76:58:15:91:55:ca:7c:19:96:ca:51:90:de:3f:
                    72:86:61:17:18:e9:7b:1b:8c:54:97:14:ae:ce:34:
                    c6:93:a3:ce:ec:22:dd:da:7e:80:64:60:9e:03:34:
                    19:e6:89:2c:ee:93:d6:e6:3e:b4:12:85:6d:84:09:
                    2e:42:7f:ec:f9:f4:16:82:19:82:d0:3b:4a:84:ca:
                    ea:04:3e:13:36:ae:70:9a:9a:57:88:da:79:b0:89:
                    3b:88:63:43:46:f9:0a:7c:34:30:57:79:53:07:ec:
                    17:54:5d:c6:38:39:f4:31:b0:4a:1e:04:e2:e8:22:
                    61:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:50:63:E6:D7:E1:FD:48:DF:BF:18:16:BC:B9:6B:F1:DD:E3:83:55
            X509v3 Authority Key Identifier:
                keyid:9A:8C:32:9D:87:63:C2:9F:29:93:1A:BB:B8:19:5F:97:50:38:29:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mowynYdjwp8pkxq7uBlfl1A4KYs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:95:dc:f0:de:7c:db:7f:7c:77:96:82:f2:f1:a6:e6:da:c3:
         fc:20:47:97:99:85:29:d5:56:8b:15:bb:02:e4:07:f7:34:b6:
         51:a4:10:fc:5d:4c:24:2f:08:88:6d:69:82:70:8b:ee:3f:74:
         99:2e:90:62:a9:e6:eb:c3:c1:a9:1d:dc:5c:d7:18:53:bf:92:
         16:f4:d3:11:89:3d:80:19:b1:78:7b:10:36:71:79:13:0a:6f:
         da:b9:59:e1:4b:38:6b:dc:b5:2c:5c:a3:f0:7d:a4:f5:60:19:
         5d:e0:04:a1:fe:83:d7:ec:ab:bd:9f:d0:b8:67:3a:69:72:74:
         f7:2b:79:05:65:1b:d3:b4:11:5d:db:67:a5:89:7a:25:87:3d:
         0b:b2:9a:bb:1a:00:c5:52:b9:ea:d5:93:33:71:44:68:68:6d:
         db:64:8e:e8:22:0b:fd:ff:97:34:33:9d:66:8e:b4:63:99:ec:
         2c:d1:68:ff:6b:44:5b:b6:43:db:7a:69:a2:68:ae:5a:32:71:
         c5:8e:f2:d1:90:a0:ff:c9:f6:80:1a:7c:26:1a:a5:bb:e2:3a:
         c6:de:98:82:93:78:85:b2:68:64:62:11:cb:37:8c:11:53:80:
         e7:6c:00:7e:fb:b3:e9:07:aa:02:d6:f5:0d:74:a6:60:0b:0b:
         55:92:c4:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 08:10:33 2026 by rpki-client