Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.mft
File:                     mGmeAMEXUdAbNeNfwCl9om6seeo.mft (raw, json)
Hash identifier:          XSsZ/24hrjW0FfDUxAQMNaVzLUJbPi85E9z7ryVfYqs=
Subject key identifier:   2B:54:67:FC:D9:9A:3D:1F:7A:84:4B:16:9C:21:2F:D1:1E:83:7C:9F
Authority key identifier: 98:69:9E:00:C1:17:51:D0:1B:35:E3:5F:C0:29:7D:A2:6E:AC:79:EA
Certificate issuer:       /CN=98699e00c11751d01b35e35fc0297da26eac79ea
Certificate serial:       01A0DB3BC18B063E26A768FC0070C1C6D446
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mGmeAMEXUdAbNeNfwCl9om6seeo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.mft
Manifest number:          081B
Signing time:             Sat 26 Sep 2026 01:02:01 +0000
Manifest this update:     Sat 26 Sep 2026 01:02:01 +0000
Manifest next update:     Sun 27 Sep 2026 01:02:01 +0000
Files and hashes:         1: mGmeAMEXUdAbNeNfwCl9om6seeo.crl (hash: 0zqEKCVk3MJQm5XyELT61jLH9zpg1t5QBg44VKw2HkY=)
                          2: z_44jtrGJfD6zh9PidW-GJCCXns.roa (hash: wkQhSLVYP9oo4jjQ5UZW99eD0rUSG+lto+V5IH7d35w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mGmeAMEXUdAbNeNfwCl9om6seeo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 01:02:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:db:3b:c1:8b:06:3e:26:a7:68:fc:00:70:c1:c6:d4:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98699e00c11751d01b35e35fc0297da26eac79ea
        Validity
            Not Before: Sep 26 01:02:01 2026 GMT
            Not After : Sep 27 01:02:01 2026 GMT
        Subject: CN=2b5467fcd99a3d1f7a844b169c212fd11e837c9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:43:6b:5c:5e:36:79:6a:97:97:34:f7:dd:24:
                    a5:ae:20:fa:a8:0d:66:3a:2a:17:87:ab:f2:9e:62:
                    16:41:1b:0a:29:d2:9d:aa:b1:43:6d:62:22:ca:06:
                    4d:d3:92:52:3f:c2:c6:e2:59:6f:3f:c3:9c:8b:65:
                    ab:17:b1:cf:a7:36:bd:fb:97:ec:55:7c:0a:db:e6:
                    29:31:d6:64:f1:b1:b3:7e:e3:1e:31:bc:01:c8:da:
                    3e:f8:2e:d7:f9:6e:70:18:ea:e4:f0:dd:12:34:cf:
                    64:5e:7b:12:be:ce:b2:40:51:09:92:ad:85:97:11:
                    ef:65:af:ef:0e:c0:c7:7d:fe:70:ca:fa:d5:8f:43:
                    7d:2c:d6:b9:61:68:59:dc:01:ed:6c:56:a5:36:b0:
                    ab:fb:01:d9:5c:3b:10:47:11:c9:57:64:94:65:31:
                    33:12:d5:6b:96:59:2f:94:b6:c4:8d:e7:37:7f:24:
                    b8:30:49:c5:45:ce:14:ab:83:83:b7:04:26:47:69:
                    72:80:ae:5d:1d:70:bd:90:ea:0e:72:ff:26:c5:9d:
                    50:57:6b:87:ba:fa:3d:aa:8c:24:73:a1:d5:67:ed:
                    b8:94:4b:a5:1e:40:d9:6c:23:12:de:9d:ec:53:c3:
                    c9:08:e6:88:de:2e:c9:f4:35:aa:74:e6:cd:11:43:
                    ba:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:54:67:FC:D9:9A:3D:1F:7A:84:4B:16:9C:21:2F:D1:1E:83:7C:9F
            X509v3 Authority Key Identifier:
                keyid:98:69:9E:00:C1:17:51:D0:1B:35:E3:5F:C0:29:7D:A2:6E:AC:79:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGmeAMEXUdAbNeNfwCl9om6seeo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:4f:44:14:79:84:bf:e5:31:aa:4f:e6:0e:d0:4b:67:99:c4:
         85:93:bf:8f:42:7a:78:01:57:98:19:68:41:8a:e8:c0:77:d8:
         cc:76:07:d5:63:73:68:73:f0:78:57:78:52:ca:67:d4:48:7e:
         d9:d4:d7:47:48:40:9a:30:d0:4a:b4:b5:66:50:f2:aa:14:8f:
         31:a2:d1:1b:ed:e9:d5:32:fa:4a:ab:f3:34:f9:4d:94:67:ee:
         fb:88:46:9c:80:63:7f:78:f9:dd:20:94:ae:ce:78:ee:92:5e:
         99:28:c6:fb:cc:1f:63:4d:a6:dd:7c:5f:08:dc:af:27:92:e7:
         98:a4:f4:00:44:40:54:d2:fb:6d:a4:09:bf:5f:f9:d9:40:61:
         16:5a:19:48:ea:80:4a:d0:e6:e6:97:f0:5c:06:74:19:5e:4f:
         c2:2e:9b:bd:8b:f8:4f:d8:3c:13:72:96:a8:8a:d4:4a:71:f8:
         bf:8a:c0:8c:1d:24:84:44:f6:bf:39:3d:c2:db:6d:f5:2e:c7:
         46:b5:d2:f4:49:41:dd:31:38:2b:96:52:78:a2:ba:32:e1:7e:
         2f:73:61:d6:ff:48:1e:8b:a3:a5:58:ab:ef:67:f3:9d:c2:88:
         70:bb:8b:3d:e7:4e:9f:00:b4:05:33:c2:1b:be:74:3a:04:f2:
         6d:ff:8c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:35:43 2026 by rpki-client