Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.mft
File:                     mlVQ6QipuWiMKarJiVNT3qg2xFo.mft (raw, json)
Hash identifier:          Mv2I8swhmNbURnsuJ7lU8wROBvvuYZztCqy+9+b9KfY=
Subject key identifier:   38:79:A0:C9:5C:D9:7B:63:23:78:B2:35:80:D8:CB:CF:3C:67:C7:9E
Authority key identifier: 9A:55:50:E9:08:A9:B9:68:8C:29:AA:C9:89:53:53:DE:A8:36:C4:5A
Certificate issuer:       /CN=9a5550e908a9b9688c29aac9895353dea836c45a
Certificate serial:       01A0DC4E337373271ECA2B00FF5DBA990F9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mlVQ6QipuWiMKarJiVNT3qg2xFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.mft
Manifest number:          1A79
Signing time:             Sat 26 Sep 2026 06:01:47 +0000
Manifest this update:     Sat 26 Sep 2026 06:01:47 +0000
Manifest next update:     Sun 27 Sep 2026 06:01:47 +0000
Files and hashes:         1: 9HrYFMMhRzunORVYCvC_pb-N7bs.roa (hash: XF9butY/Gh4KQYkahnljs5A/itIVZDX8G2S0GnjfQz4=)
                          2: 9WusnEA7UsiroKwVXFKCOaUJb3c.roa (hash: fb+KrV1ZjwlDY775gAvNE53AejRLewrgw0HPLBs+ie0=)
                          3: EpVqLX2wGdjg6RHIKlcFAYrzxZM.roa (hash: I+GdKkkhDVqSQlbstKKL56Ml+Mm3LF7CHLrw/iB8Sm0=)
                          4: aT21_RL1m6rGeB-ld5KbAq-VyRY.roa (hash: igzeABuSc631EbNOWtmlhHktMnf95zdqHlwzunblRoQ=)
                          5: fxXc8wbPjKGD4puVQjlJ2BJLkBM.roa (hash: EEXGCWxUBBoXL23a53HiVBgcrVJh78DOonzUJ1eNahc=)
                          6: mlVQ6QipuWiMKarJiVNT3qg2xFo.crl (hash: ssSJjpHhnGGFAwiB0+y5D5xnT5/N5kwl2CF29NlgZUc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mlVQ6QipuWiMKarJiVNT3qg2xFo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 06:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dc:4e:33:73:73:27:1e:ca:2b:00:ff:5d:ba:99:0f:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a5550e908a9b9688c29aac9895353dea836c45a
        Validity
            Not Before: Sep 26 06:01:47 2026 GMT
            Not After : Sep 27 06:01:47 2026 GMT
        Subject: CN=3879a0c95cd97b632378b23580d8cbcf3c67c79e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d3:fd:de:e5:d3:1a:18:9a:73:fa:21:cf:ab:
                    cf:f7:f5:3c:7c:98:5c:00:27:3a:1b:5c:10:ff:29:
                    42:86:93:84:4e:1b:0e:ae:3f:2e:e6:84:42:51:92:
                    14:8c:8e:d6:85:d1:bb:d7:79:b6:2e:6f:1e:49:59:
                    7a:ee:be:ee:cc:11:10:63:92:3d:7f:01:82:c0:62:
                    fb:b9:97:39:e4:3d:ab:68:68:14:2e:32:35:fc:d2:
                    54:54:4a:32:e4:ed:ad:9d:65:5d:9c:69:cd:2c:1b:
                    57:a8:d5:6a:91:5d:07:06:db:11:97:ca:15:f0:9d:
                    f6:92:d3:f0:62:b9:6a:75:5b:ab:c0:f9:a0:6b:31:
                    f8:de:cb:83:4a:73:28:0f:f3:28:61:6a:59:ab:c5:
                    b9:df:48:44:90:b7:c4:fd:e3:96:08:1c:b4:b5:3c:
                    4c:10:38:90:cd:68:ac:42:96:23:85:9c:cc:b9:1d:
                    ef:f9:64:1b:5b:0c:17:d4:b1:17:c7:3f:86:ee:34:
                    cf:8b:4d:64:64:5c:a0:ff:71:b0:0a:d8:35:43:4e:
                    91:77:3c:3b:37:66:bb:5f:f9:95:35:63:97:4c:9c:
                    69:10:a2:62:20:0f:36:ee:ce:8d:c0:27:10:5e:3f:
                    88:9e:83:24:62:28:00:8a:62:18:56:aa:ab:8e:fa:
                    33:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:79:A0:C9:5C:D9:7B:63:23:78:B2:35:80:D8:CB:CF:3C:67:C7:9E
            X509v3 Authority Key Identifier:
                keyid:9A:55:50:E9:08:A9:B9:68:8C:29:AA:C9:89:53:53:DE:A8:36:C4:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mlVQ6QipuWiMKarJiVNT3qg2xFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:54:f5:3d:87:39:ed:2c:60:8c:5b:d6:72:93:d1:9a:c3:6f:
         9b:e9:ae:c5:52:17:19:ae:da:73:77:c5:7a:ab:bd:26:f7:15:
         2d:90:82:57:0a:c5:3f:b1:6a:75:a5:50:08:65:15:0d:73:5a:
         d9:50:4b:1b:87:fb:8d:77:d0:ef:13:25:6e:45:b1:f8:e7:58:
         cd:a1:e5:27:7c:3b:a7:26:5b:b0:c1:1f:59:9a:83:7e:36:7b:
         fd:cb:ad:a2:49:02:ce:61:7b:3e:fd:f1:7c:87:d1:af:c6:07:
         38:75:5d:48:28:b6:5f:8e:fa:85:14:ae:4b:12:ad:5d:77:57:
         af:df:6b:62:0a:57:d2:ea:6e:71:36:70:8a:9c:f3:cb:65:0b:
         11:25:33:10:f7:3d:8e:5e:a9:db:e8:1f:74:12:09:5e:b5:b5:
         34:e0:1c:be:2e:6a:28:8f:fd:8e:66:be:a3:1c:5b:85:d4:53:
         0d:54:c2:92:43:fa:5e:6b:34:2c:6b:95:5b:2e:fa:14:7e:36:
         26:ae:18:77:70:5b:7d:55:2a:3e:c6:cf:81:dd:6c:9e:a4:9d:
         50:14:d6:5e:9c:41:60:49:b0:02:0d:76:a1:aa:0d:6f:9f:7b:
         8e:97:30:b3:06:58:04:09:86:e7:35:a6:15:f5:0f:2f:87:e5:
         d4:9b:1f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:09:24 2026 by rpki-client