Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.mft
File:                     ES0MTxbciSISn_YFDiNVYjF1ZeU.mft (raw, json)
Hash identifier:          t1GCRhFZZbeon8f44aogSc3KWu82et8J2ojctVt7Gl0=
Subject key identifier:   97:92:ED:77:43:AC:BD:03:53:2C:B3:F2:70:E1:A1:E7:D8:A6:88:9A
Authority key identifier: 11:2D:0C:4F:16:DC:89:22:12:9F:F6:05:0E:23:55:62:31:75:65:E5
Certificate issuer:       /CN=112d0c4f16dc8922129ff6050e235562317565e5
Certificate serial:       01A0CDB60EC1390D4B5F69182CC30C3C7550
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ES0MTxbciSISn_YFDiNVYjF1ZeU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.mft
Manifest number:          1A6C
Signing time:             Wed 23 Sep 2026 10:00:55 +0000
Manifest this update:     Wed 23 Sep 2026 10:00:55 +0000
Manifest next update:     Thu 24 Sep 2026 10:00:55 +0000
Files and hashes:         1: 6ZC-AU-L5WqpZGLxzGOhgHsE1Cg.roa (hash: UlcGyQuYQRtTD6A9l9CK5v44VAfVgy8O5yhh3y24c6s=)
                          2: ES0MTxbciSISn_YFDiNVYjF1ZeU.crl (hash: IAH73GBGhJSLPU7Zt16SNjGP2kXiZgOlCvwYnm0XX3I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ES0MTxbciSISn_YFDiNVYjF1ZeU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 10:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cd:b6:0e:c1:39:0d:4b:5f:69:18:2c:c3:0c:3c:75:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=112d0c4f16dc8922129ff6050e235562317565e5
        Validity
            Not Before: Sep 23 10:00:55 2026 GMT
            Not After : Sep 24 10:00:55 2026 GMT
        Subject: CN=9792ed7743acbd03532cb3f270e1a1e7d8a6889a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ec:10:dd:18:b8:6a:d9:8b:06:d1:59:79:a4:
                    1d:e7:dd:48:72:d8:b3:29:7b:07:e6:b1:17:ff:39:
                    48:b4:05:f5:22:8f:6d:4b:cc:c7:aa:4d:ab:be:bb:
                    b3:3f:d4:8a:39:87:ef:ba:e0:9b:01:a1:d9:db:4d:
                    b1:b1:e4:d4:43:9d:7c:7d:57:4d:7a:07:16:2b:27:
                    f7:76:65:ea:e6:99:92:8e:88:02:61:e1:72:c6:87:
                    fc:d2:e6:a6:3c:d9:66:86:c5:cb:8a:eb:ff:7e:95:
                    72:af:d0:df:30:b7:b2:41:19:ed:c7:2e:24:51:1f:
                    d6:13:72:a8:df:d0:32:21:a8:0d:cf:2f:03:9e:0b:
                    8d:63:67:40:fa:0a:f2:5e:e7:fe:1b:48:a7:61:5a:
                    b4:12:75:27:fe:b0:80:38:cb:3e:eb:2f:9c:04:dc:
                    16:75:23:8f:c9:0f:6f:e1:19:32:c4:76:b6:ea:ac:
                    35:4e:77:99:81:24:11:d7:ff:11:bf:3f:fb:b6:ca:
                    0c:15:19:3a:b5:3e:34:c5:07:7f:29:11:13:11:90:
                    87:51:96:e2:a5:9d:49:c9:d6:f9:92:45:ad:bf:09:
                    71:14:b0:f7:eb:8b:da:63:67:6f:fb:6a:25:0e:76:
                    02:bf:c3:04:6b:b1:d8:c6:89:7f:c2:c0:d9:70:16:
                    a6:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:92:ED:77:43:AC:BD:03:53:2C:B3:F2:70:E1:A1:E7:D8:A6:88:9A
            X509v3 Authority Key Identifier:
                keyid:11:2D:0C:4F:16:DC:89:22:12:9F:F6:05:0E:23:55:62:31:75:65:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ES0MTxbciSISn_YFDiNVYjF1ZeU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:c7:a1:e5:5b:65:eb:ef:eb:98:ba:80:90:3c:99:3b:ac:73:
         16:28:6a:ee:a1:f9:7b:15:07:de:44:b3:7f:8d:77:eb:0e:7f:
         4e:25:39:02:66:a5:3e:7c:eb:73:03:4b:88:9e:46:0a:06:b6:
         78:49:2a:67:78:2b:4b:ce:dc:0b:18:5f:44:df:a4:dd:a1:77:
         af:87:81:73:5e:6b:b2:8c:00:44:bb:35:f4:25:ad:62:4d:13:
         23:1c:e2:d8:18:4c:ac:b4:3c:e4:23:f0:0b:6d:11:27:8b:87:
         bf:ee:d4:ce:d7:86:13:41:be:58:0a:b1:02:18:2b:b1:4c:e2:
         6f:66:c7:c3:ad:26:88:4d:1d:8a:ce:a7:ea:95:72:01:86:9e:
         be:b2:55:ff:22:8b:6c:f7:e0:f6:2d:e3:d8:16:f7:5a:90:97:
         14:c2:ce:a6:24:72:e9:fd:66:f3:c6:66:87:7f:0d:69:fa:bd:
         c5:f5:b8:39:eb:6b:d5:8b:ab:ab:0b:df:ab:53:f6:de:59:63:
         ea:2f:35:3e:6d:04:52:79:02:9d:8f:71:37:0f:0a:70:6c:49:
         db:79:8d:a8:75:2c:94:32:40:1c:99:f3:03:62:f1:95:a9:74:
         dd:35:66:fc:34:e3:51:d8:2a:f9:ea:3e:ba:8b:ad:a8:fe:57:
         27:de:a1:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 20:40:43 2026 by rpki-client