Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/a8941a-7250-48ec-aaf8-6d8ea9d1cd73/1/MGE0vPWfWB1rdmMM-oeGeHaikhU.mft
File:                     MGE0vPWfWB1rdmMM-oeGeHaikhU.mft (raw, json)
Hash identifier:          ej+WFZNRtc0uZv/LpE6ffCdkOWzhgB8FroYFM/S53G0=
Subject key identifier:   E4:AB:6B:87:DC:CB:6E:91:6D:DC:76:57:B5:96:E6:EC:D2:8E:BA:97
Authority key identifier: 30:61:34:BC:F5:9F:58:1D:6B:76:63:0C:FA:87:86:78:76:A2:92:15
Certificate issuer:       /CN=306134bcf59f581d6b76630cfa87867876a29215
Certificate serial:       01A0D26DF4B06C89377BE4AA46D42945E3A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MGE0vPWfWB1rdmMM-oeGeHaikhU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/a8941a-7250-48ec-aaf8-6d8ea9d1cd73/1/MGE0vPWfWB1rdmMM-oeGeHaikhU.mft
Manifest number:          160C
Signing time:             Thu 24 Sep 2026 08:00:16 +0000
Manifest this update:     Thu 24 Sep 2026 08:00:16 +0000
Manifest next update:     Fri 25 Sep 2026 08:00:16 +0000
Files and hashes:         1: MGE0vPWfWB1rdmMM-oeGeHaikhU.crl (hash: T6Werl1yB5UPHTJC5wC/4eDicps9LcSe5rw3cLtMpn4=)
                          2: _J-j7B7EBVpS6iWSIcOV728Uk0g.roa (hash: +Uy6WqqggKFrmTGgRkmBqe1HnPUwyMjAxaGGze9f2+I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/a8941a-7250-48ec-aaf8-6d8ea9d1cd73/1/MGE0vPWfWB1rdmMM-oeGeHaikhU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/a8941a-7250-48ec-aaf8-6d8ea9d1cd73/1/MGE0vPWfWB1rdmMM-oeGeHaikhU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MGE0vPWfWB1rdmMM-oeGeHaikhU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 08:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d2:6d:f4:b0:6c:89:37:7b:e4:aa:46:d4:29:45:e3:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=306134bcf59f581d6b76630cfa87867876a29215
        Validity
            Not Before: Sep 24 08:00:16 2026 GMT
            Not After : Sep 25 08:00:16 2026 GMT
        Subject: CN=e4ab6b87dccb6e916ddc7657b596e6ecd28eba97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d5:08:14:eb:cc:df:54:8e:80:b3:e8:e0:f7:
                    31:53:da:d1:0a:e8:6b:b3:45:28:af:50:8c:bd:f6:
                    d2:dc:c5:da:03:38:77:a0:b2:42:81:11:31:79:93:
                    53:dc:cc:89:d0:d5:56:f1:13:a5:c1:cf:19:94:e9:
                    dd:d7:3d:bc:bc:2f:08:12:f3:34:3a:d5:e4:cf:97:
                    c3:37:4a:6f:2a:b9:8b:e7:eb:e9:3a:74:ec:8a:20:
                    76:93:a4:6a:33:3c:65:d7:cb:c0:e4:0a:66:8b:1a:
                    81:c5:ad:1f:1a:52:d2:a0:f5:22:c9:20:c4:ef:50:
                    d1:ea:93:b2:9a:82:b6:39:c4:fe:aa:77:f0:9b:be:
                    f8:92:73:3e:97:95:d1:1b:72:eb:01:3f:32:df:ce:
                    d5:61:a7:de:12:d3:07:5e:cb:14:65:a6:2d:22:77:
                    61:3b:73:d4:df:84:18:11:01:41:73:ff:1c:84:78:
                    41:c3:0a:0c:e2:79:5d:d3:35:3c:74:93:e8:b0:97:
                    ca:5f:71:f2:a0:25:11:d0:29:09:ad:da:7b:b4:e4:
                    f4:c8:60:91:3e:cc:37:26:e0:ec:72:fc:a6:9b:d1:
                    d8:6d:5d:03:7b:c0:c9:fd:08:e4:f0:5e:96:0c:7e:
                    81:28:20:87:48:c0:fd:a3:ef:85:d2:03:17:89:d7:
                    6f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:AB:6B:87:DC:CB:6E:91:6D:DC:76:57:B5:96:E6:EC:D2:8E:BA:97
            X509v3 Authority Key Identifier:
                keyid:30:61:34:BC:F5:9F:58:1D:6B:76:63:0C:FA:87:86:78:76:A2:92:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGE0vPWfWB1rdmMM-oeGeHaikhU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a8941a-7250-48ec-aaf8-6d8ea9d1cd73/1/MGE0vPWfWB1rdmMM-oeGeHaikhU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a8941a-7250-48ec-aaf8-6d8ea9d1cd73/1/MGE0vPWfWB1rdmMM-oeGeHaikhU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:49:42:38:09:1b:b6:90:62:f2:a8:21:f9:da:c6:8e:cf:6e:
         01:62:23:cb:1f:b0:2b:91:ed:b3:93:c1:90:a7:68:96:49:85:
         e9:f0:de:95:91:db:9b:32:e3:5f:cc:db:aa:4a:7c:1e:55:22:
         30:cf:2f:f5:1b:24:ba:a5:ab:96:0d:c8:09:88:57:39:fb:76:
         64:5e:61:e8:73:f2:7b:c6:3c:8c:ea:21:5d:65:75:12:ce:06:
         88:62:cd:54:06:25:aa:1b:f6:01:be:ba:13:0f:e5:47:e3:39:
         e6:eb:fa:48:2f:fa:de:b4:e5:5a:bd:a1:dc:c1:05:a0:15:ca:
         39:7f:35:4e:a3:f5:0e:b6:4c:8e:00:96:06:10:8a:ee:a1:72:
         21:67:c2:6d:70:41:b6:c1:9f:b0:18:94:6e:df:3d:30:4b:8f:
         2e:0f:08:a8:c7:58:3d:eb:27:e4:99:ad:ed:90:8e:12:10:41:
         63:4b:b7:61:2b:e7:88:61:4b:7d:49:4e:d7:f2:e3:04:9e:2c:
         b0:90:75:67:9e:59:74:4d:86:72:7c:7a:9a:df:58:fe:df:3c:
         52:64:8b:09:2c:b7:71:03:25:3d:c1:6e:b5:c4:c8:8c:2a:ea:
         64:7b:b0:34:b7:44:0d:cf:f8:2b:58:1d:5e:48:56:a6:35:d1:
         4f:32:ad:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:38:16 2026 by rpki-client