Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c6/2a69bc-05a0-46f0-b423-222b03114193/1/mInX-DdYfC8jMrsJs-GtmZPXlyw.mft
File:                     mInX-DdYfC8jMrsJs-GtmZPXlyw.mft (raw, json)
Hash identifier:          fk7grF05m7PTT5h0r2tAAs8nwewI64Ahe+loF/Xva3k=
Subject key identifier:   77:75:E5:5D:18:AE:C8:26:6B:85:17:1B:5F:85:76:3E:28:BA:C8:68
Authority key identifier: 98:89:D7:F8:37:58:7C:2F:23:32:BB:09:B3:E1:AD:99:93:D7:97:2C
Certificate issuer:       /CN=9889d7f837587c2f2332bb09b3e1ad9993d7972c
Certificate serial:       01A0C6333EEFDC710A7ADF259BC7645E1F0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mInX-DdYfC8jMrsJs-GtmZPXlyw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/2a69bc-05a0-46f0-b423-222b03114193/1/mInX-DdYfC8jMrsJs-GtmZPXlyw.mft
Manifest number:          19F8
Signing time:             Mon 21 Sep 2026 23:00:42 +0000
Manifest this update:     Mon 21 Sep 2026 23:00:42 +0000
Manifest next update:     Tue 22 Sep 2026 23:00:42 +0000
Files and hashes:         1: fePebiytxTMuGPH6fSC5E4YL5wc.roa (hash: yXbEU3IXKyJOB9RtZy0YOmQELScqMwS4Y+CH/uELRY4=)
                          2: mInX-DdYfC8jMrsJs-GtmZPXlyw.crl (hash: eEajMNi74P/2OlpJNGg6WjDKkCqKuvUekkQL/XIfA+w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/2a69bc-05a0-46f0-b423-222b03114193/1/mInX-DdYfC8jMrsJs-GtmZPXlyw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/2a69bc-05a0-46f0-b423-222b03114193/1/mInX-DdYfC8jMrsJs-GtmZPXlyw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mInX-DdYfC8jMrsJs-GtmZPXlyw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 19:45:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c6:33:3e:ef:dc:71:0a:7a:df:25:9b:c7:64:5e:1f:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9889d7f837587c2f2332bb09b3e1ad9993d7972c
        Validity
            Not Before: Sep 21 23:00:42 2026 GMT
            Not After : Sep 22 23:00:42 2026 GMT
        Subject: CN=7775e55d18aec8266b85171b5f85763e28bac868
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9f:27:0b:93:c9:2e:87:3f:59:b1:ce:e0:33:
                    07:f2:e0:fb:66:81:e6:2b:6b:52:1a:ce:c2:c1:55:
                    19:25:57:28:21:4b:b6:fc:90:fe:bb:2e:18:1d:e5:
                    0f:7a:1c:e2:41:39:6f:1f:6c:74:2e:8a:2e:1d:78:
                    89:c3:e5:f0:c8:15:93:d1:00:33:23:35:87:23:66:
                    d7:db:b8:4c:2e:e7:12:43:76:32:e7:46:ac:88:66:
                    76:45:ca:c9:e5:ee:cf:d3:ca:44:92:1b:db:b4:c4:
                    69:4d:1a:d7:d9:82:8e:b4:30:1c:34:59:7a:00:31:
                    ec:33:66:ae:ad:ca:5f:0d:30:4e:5b:ed:9e:98:ad:
                    b2:88:26:a5:49:29:24:08:d4:a1:a9:00:00:15:b5:
                    96:6b:08:b5:4d:2a:41:43:2f:1e:81:88:bd:88:19:
                    ca:a9:30:be:83:7c:35:36:fe:77:50:3c:97:dc:b1:
                    cd:04:5b:58:2e:33:89:d4:80:f7:34:16:5d:8c:bf:
                    12:ea:a5:f7:e2:82:cf:3c:fd:e0:45:d7:6a:e9:dd:
                    c1:41:c0:46:72:22:39:71:64:3b:a3:0e:19:fb:d2:
                    5d:5a:8a:be:41:44:4a:02:13:54:90:43:9a:72:4a:
                    ab:c6:e6:a8:3d:bf:e1:28:33:a8:ab:e6:95:4b:f7:
                    90:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:75:E5:5D:18:AE:C8:26:6B:85:17:1B:5F:85:76:3E:28:BA:C8:68
            X509v3 Authority Key Identifier:
                keyid:98:89:D7:F8:37:58:7C:2F:23:32:BB:09:B3:E1:AD:99:93:D7:97:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mInX-DdYfC8jMrsJs-GtmZPXlyw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2a69bc-05a0-46f0-b423-222b03114193/1/mInX-DdYfC8jMrsJs-GtmZPXlyw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2a69bc-05a0-46f0-b423-222b03114193/1/mInX-DdYfC8jMrsJs-GtmZPXlyw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:f7:9c:70:73:4e:9d:01:f2:cf:dc:2b:7e:27:97:1e:68:9a:
         55:c6:fc:a8:6a:6b:ff:dd:8b:5e:bf:eb:ae:82:37:b5:e0:6c:
         32:65:a8:46:fe:03:d7:4b:1e:26:4b:4d:03:1b:10:ed:1d:66:
         22:ba:f0:75:ed:71:1b:90:32:de:c0:a7:f8:b3:79:23:99:7d:
         3f:91:0e:96:9f:26:bd:04:6a:5c:e3:7e:3f:a5:28:27:e0:c4:
         7c:de:cf:ce:3c:35:0d:21:44:21:86:3e:63:d4:80:09:20:0b:
         eb:4e:d0:4c:ff:87:d3:2a:21:df:d9:6e:a7:6e:7a:31:f4:87:
         d7:e3:a2:a7:3a:7d:ff:4a:bd:0a:d6:8f:40:d0:e9:a5:2f:77:
         f8:88:b6:3a:79:80:b7:3d:ed:9f:06:3e:9e:2d:f6:a1:28:bd:
         bd:5e:1d:b6:9b:77:db:20:b0:f4:b8:43:e9:97:22:8c:88:fa:
         b5:5f:a7:2f:01:41:0c:32:92:69:c9:aa:1a:a5:56:72:c9:24:
         2e:ac:3f:f9:f4:a6:86:10:a8:f6:5c:ff:22:1d:e2:8d:40:32:
         e1:2d:39:7a:3f:c9:a1:7c:9c:27:93:b1:1e:da:26:89:d8:ad:
         0a:c8:f3:ae:96:63:93:ec:33:c5:5b:9f:91:8f:c2:d4:be:85:
         00:b8:88:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:52:10 2026 by rpki-client