Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.mft
File:                     mGmeAMEXUdAbNeNfwCl9om6seeo.mft (raw, json)
Hash identifier:          P/mNO+ZGmnI8PQ9wmVNC3biuS838o3xYkyEbKW5Ns34=
Subject key identifier:   F4:5F:94:84:92:B1:59:BE:59:06:C9:46:BF:7A:4B:D2:6C:CF:AC:9A
Authority key identifier: 98:69:9E:00:C1:17:51:D0:1B:35:E3:5F:C0:29:7D:A2:6E:AC:79:EA
Certificate issuer:       /CN=98699e00c11751d01b35e35fc0297da26eac79ea
Certificate serial:       01A0E107367AB6572A58B659B4DA1D4D2783
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mGmeAMEXUdAbNeNfwCl9om6seeo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.mft
Manifest number:          081E
Signing time:             Sun 27 Sep 2026 04:02:21 +0000
Manifest this update:     Sun 27 Sep 2026 04:02:21 +0000
Manifest next update:     Mon 28 Sep 2026 04:02:21 +0000
Files and hashes:         1: mGmeAMEXUdAbNeNfwCl9om6seeo.crl (hash: 1RIu/BEwtTG0q+3s/bxwFMW/dj0e1cfzMQwo5zbdSuU=)
                          2: z_44jtrGJfD6zh9PidW-GJCCXns.roa (hash: wkQhSLVYP9oo4jjQ5UZW99eD0rUSG+lto+V5IH7d35w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mGmeAMEXUdAbNeNfwCl9om6seeo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 04:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e1:07:36:7a:b6:57:2a:58:b6:59:b4:da:1d:4d:27:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98699e00c11751d01b35e35fc0297da26eac79ea
        Validity
            Not Before: Sep 27 04:02:21 2026 GMT
            Not After : Sep 28 04:02:21 2026 GMT
        Subject: CN=f45f948492b159be5906c946bf7a4bd26ccfac9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e1:1e:9a:9e:17:e5:41:d9:a3:1e:a2:13:c3:
                    fb:8e:e6:08:21:99:91:04:fc:92:69:53:e2:26:38:
                    4c:ef:fe:a2:aa:93:c0:96:2f:ea:2a:f5:45:f0:c9:
                    1f:a0:7c:53:51:c8:14:89:48:da:04:ac:d6:0b:95:
                    30:85:ec:b5:35:f8:9b:07:3c:c4:7a:fa:4b:11:f8:
                    62:f1:42:be:47:4b:57:da:a3:3e:6c:e3:fd:01:c7:
                    28:7c:9c:45:ec:c3:8c:4c:86:3c:2d:81:d6:fb:c4:
                    d2:61:16:7a:c0:28:59:56:bf:f1:50:08:12:4a:eb:
                    47:83:e0:61:de:32:78:b6:8c:bf:a9:4c:eb:cf:83:
                    0d:93:b3:c9:1f:b7:47:00:90:fb:d7:75:e0:c4:7a:
                    12:17:8d:d2:83:49:a7:68:0f:8c:0f:30:cc:43:03:
                    16:51:52:14:2f:2f:29:b3:15:e5:85:93:39:70:10:
                    5f:6f:b0:c0:76:f0:0b:90:2c:e7:10:51:fa:4b:b1:
                    cb:45:46:a2:7c:42:c7:aa:3d:28:b7:27:c9:a7:c2:
                    ce:d7:ee:42:ea:3a:4d:6c:f9:e7:fe:9a:8f:0e:fa:
                    c8:cf:39:88:84:96:f9:7a:25:37:90:66:d2:90:d7:
                    5a:67:eb:d3:d6:f6:9e:d6:f0:ff:4e:e7:8d:42:b9:
                    93:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:5F:94:84:92:B1:59:BE:59:06:C9:46:BF:7A:4B:D2:6C:CF:AC:9A
            X509v3 Authority Key Identifier:
                keyid:98:69:9E:00:C1:17:51:D0:1B:35:E3:5F:C0:29:7D:A2:6E:AC:79:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGmeAMEXUdAbNeNfwCl9om6seeo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:50:b7:77:3e:a4:1f:82:57:fd:63:81:5c:d7:5c:82:9e:ca:
         db:ef:57:c6:4c:e4:e8:a4:84:f5:d7:a2:42:ee:69:d1:d9:02:
         bd:ce:5f:08:fb:3a:2b:f3:d4:44:b9:42:54:43:20:e2:2a:8f:
         34:a1:40:b5:55:3d:3c:c7:16:b7:e7:dc:2c:03:7b:ff:b5:9a:
         19:5f:69:50:97:b6:58:56:49:39:51:53:8a:68:1e:23:ff:ef:
         3d:b4:01:66:2a:37:fd:9a:38:62:0a:c7:2c:55:82:05:be:ae:
         49:ac:41:67:9b:13:2b:71:2a:8b:c7:66:a0:2f:77:3d:27:4d:
         8d:b7:52:3a:8e:43:19:bd:51:f9:ba:7b:f1:5e:11:60:7f:8b:
         93:72:18:76:9e:2c:c1:fc:63:f2:60:45:84:34:a2:38:a2:85:
         3e:5b:f5:85:2a:96:26:29:61:54:9a:91:6c:9f:7d:28:2b:58:
         fc:fe:63:2d:96:f4:68:7c:b6:7b:85:36:31:4e:71:93:cc:b8:
         8c:96:4b:12:4f:c6:ec:10:20:64:fb:81:f7:42:07:99:69:a0:
         90:69:28:54:8b:16:6e:ae:8b:ec:1d:1a:34:cb:41:a0:8a:56:
         cd:90:32:31:1e:b9:f7:1e:c1:0e:5e:2c:10:a1:83:49:49:e0:
         f9:69:db:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:09:54 2026 by rpki-client