Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/6cba1a-5f4d-4308-bf46-eb37a85a82c5/1/MYKMmdNcuS4tU9rxKOSX6EG2OrA.mft
File:                     MYKMmdNcuS4tU9rxKOSX6EG2OrA.mft (raw, json)
Hash identifier:          OeWfumhHgNiW3CHp+hwsAECeXdjHQt/ISJB+CEJjyYY=
Subject key identifier:   19:5E:58:70:4E:44:89:FA:B8:F2:A1:A4:EA:39:FF:ED:8A:58:B6:16
Authority key identifier: 31:82:8C:99:D3:5C:B9:2E:2D:53:DA:F1:28:E4:97:E8:41:B6:3A:B0
Certificate issuer:       /CN=31828c99d35cb92e2d53daf128e497e841b63ab0
Certificate serial:       01A10CCC16AF0F65CBA46DB78A0B31CEB005
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYKMmdNcuS4tU9rxKOSX6EG2OrA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/6cba1a-5f4d-4308-bf46-eb37a85a82c5/1/MYKMmdNcuS4tU9rxKOSX6EG2OrA.mft
Manifest number:          112F
Signing time:             Mon 05 Oct 2026 16:01:04 +0000
Manifest this update:     Mon 05 Oct 2026 16:01:04 +0000
Manifest next update:     Tue 06 Oct 2026 16:01:04 +0000
Files and hashes:         1: GkouH-o047T5JTSoOlFrFlZ6LAk.roa (hash: LyKAkgLhQ3B6LkGr5mqVhCq49UmdkcvtOyqh3Ra9Jtw=)
                          2: KIqHcyHjzUZJ3cC9r4o9D_YRiaE.roa (hash: Wjg6EvOWdh1EArjC2HdiYoGrTNwnd1GKg0SQ1DQtlJM=)
                          3: MYKMmdNcuS4tU9rxKOSX6EG2OrA.crl (hash: aVEUaCTeDcP6BEiYbqnOY3FyZDtWdV808b+xCTUbpBQ=)
                          4: jGgiZ8UgkX-ZfqBNajQ9uue-Rrc.roa (hash: XIdiJuC/vzsQTCNcPtjQEtIJRyHtsvJsPgJI2QdsCTU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/6cba1a-5f4d-4308-bf46-eb37a85a82c5/1/MYKMmdNcuS4tU9rxKOSX6EG2OrA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/6cba1a-5f4d-4308-bf46-eb37a85a82c5/1/MYKMmdNcuS4tU9rxKOSX6EG2OrA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MYKMmdNcuS4tU9rxKOSX6EG2OrA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 Oct 2026 14:13:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:0c:cc:16:af:0f:65:cb:a4:6d:b7:8a:0b:31:ce:b0:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31828c99d35cb92e2d53daf128e497e841b63ab0
        Validity
            Not Before: Oct  5 16:01:04 2026 GMT
            Not After : Oct  6 16:01:04 2026 GMT
        Subject: CN=195e58704e4489fab8f2a1a4ea39ffed8a58b616
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:92:51:6e:5f:ef:cd:7f:7a:c9:3f:51:2b:59:
                    9e:3f:34:e3:f3:31:83:ad:70:84:19:f4:03:7d:32:
                    bd:f8:59:2f:8a:0d:48:78:24:fa:68:d7:5c:03:60:
                    22:fd:d3:a5:b2:6f:81:06:d4:71:83:dd:69:8d:ec:
                    70:e0:13:83:11:85:16:e8:7b:ff:be:b4:41:34:63:
                    2e:d2:73:3f:7b:de:9f:c6:3e:0c:0b:15:36:bb:3d:
                    5e:34:0f:e9:99:1d:f0:05:34:a4:8d:7d:5a:74:ac:
                    ea:59:0f:01:c5:be:37:c3:cd:f1:e5:45:22:62:8e:
                    98:ca:25:44:03:86:bc:04:d9:15:b4:26:27:d5:17:
                    c9:e0:0a:90:eb:5f:58:f6:9f:1e:88:08:31:75:0f:
                    ac:00:d5:2f:b7:42:ba:33:80:14:f5:77:6d:46:f6:
                    07:ae:2f:fc:6f:fd:97:82:0b:5d:77:68:9d:9a:f9:
                    8f:b0:06:22:74:44:d0:ed:43:80:d9:b6:2d:19:9b:
                    06:65:60:08:0b:ff:82:e5:6f:81:be:7f:21:11:26:
                    a3:f9:6b:85:23:73:68:d7:f3:72:fb:5a:bf:fa:2d:
                    73:d1:83:5d:4c:9d:e1:29:f0:ec:c8:61:fb:b7:65:
                    d9:9a:b9:ae:6c:1e:09:bc:0f:fb:8b:0e:d6:a6:c3:
                    46:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:5E:58:70:4E:44:89:FA:B8:F2:A1:A4:EA:39:FF:ED:8A:58:B6:16
            X509v3 Authority Key Identifier:
                keyid:31:82:8C:99:D3:5C:B9:2E:2D:53:DA:F1:28:E4:97:E8:41:B6:3A:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYKMmdNcuS4tU9rxKOSX6EG2OrA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6cba1a-5f4d-4308-bf46-eb37a85a82c5/1/MYKMmdNcuS4tU9rxKOSX6EG2OrA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6cba1a-5f4d-4308-bf46-eb37a85a82c5/1/MYKMmdNcuS4tU9rxKOSX6EG2OrA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:16:ea:2e:9c:9b:7f:2b:f6:8c:59:7d:48:d2:56:19:ab:b1:
         64:d7:5c:18:15:fa:65:c8:74:e7:5e:43:5b:5e:a3:f0:25:95:
         ca:71:31:8e:87:12:bf:cc:e8:a9:b4:e9:9a:4d:00:be:86:ad:
         45:04:d2:69:2a:b7:31:8f:fd:a4:bd:a5:d2:f9:91:aa:78:12:
         2e:26:b5:1b:05:87:6f:d1:5f:a6:bb:b2:94:c8:ba:4b:e7:4e:
         1f:1a:a1:d3:b3:11:72:5e:34:ee:82:65:bb:bc:cf:96:ca:ed:
         65:5e:b4:a5:ff:21:e3:fe:c1:ee:4d:e4:43:c8:a1:15:d2:cd:
         18:72:c1:b8:02:4f:98:e4:f2:d5:fc:ae:9f:d5:d4:a0:6c:4a:
         37:bc:93:07:45:50:0a:0f:90:d7:f1:63:b0:bc:27:1e:c0:7a:
         73:65:56:dd:90:c8:d3:1c:c5:67:d2:9e:d9:ef:c8:c6:8f:4b:
         95:7d:34:5f:de:9b:fa:e4:5e:bc:ae:41:5b:6b:82:94:ed:ca:
         c7:f9:48:84:70:b0:40:cc:b0:3c:94:b5:15:d0:94:a4:9f:df:
         50:ba:e2:d8:fa:16:4b:e5:32:1e:72:fc:c9:04:19:df:41:d2:
         a7:1e:ab:71:03:f6:fe:a5:45:76:7e:f6:84:40:d1:4d:f2:85:
         25:09:e8:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 00:57:51 2026 by rpki-client