Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.mft
File:                     MHLNXfcyOVerh8B_XN0VyR7_yNU.mft (raw, json)
Hash identifier:          lOCfaHc51+5KO7mBZcCG6e2NChP+3319+sNRHeuce7w=
Subject key identifier:   BE:9B:C7:06:BC:41:B5:F8:7C:E3:89:95:7F:13:1C:FE:86:99:FE:FB
Authority key identifier: 30:72:CD:5D:F7:32:39:57:AB:87:C0:7F:5C:DD:15:C9:1E:FF:C8:D5
Certificate issuer:       /CN=3072cd5df7323957ab87c07f5cdd15c91effc8d5
Certificate serial:       01A110A9165598C204F16C0737BCE36D1525
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MHLNXfcyOVerh8B_XN0VyR7_yNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.mft
Manifest number:          0780
Signing time:             Tue 06 Oct 2026 10:01:19 +0000
Manifest this update:     Tue 06 Oct 2026 10:01:19 +0000
Manifest next update:     Wed 07 Oct 2026 10:01:19 +0000
Files and hashes:         1: B5LeEaJvi3HeQSD41vCBPOSwCqA.roa (hash: J8iyDcJo2rN2bShtgQufGUQCMMmmWJ3P0+AOI3a4/74=)
                          2: FSHb4zqpIh3Akxw5EoTNpuLXjWI.roa (hash: SqvMQwiK+3k9rUMpX3V6L4hGcrAmDvVmALug/oB9sFU=)
                          3: MHLNXfcyOVerh8B_XN0VyR7_yNU.crl (hash: r1QTZQZop8GbXR9vwFB0NuGnDvc+p2ApupdAfqwseEY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MHLNXfcyOVerh8B_XN0VyR7_yNU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Oct 2026 10:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:10:a9:16:55:98:c2:04:f1:6c:07:37:bc:e3:6d:15:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3072cd5df7323957ab87c07f5cdd15c91effc8d5
        Validity
            Not Before: Oct  6 10:01:19 2026 GMT
            Not After : Oct  7 10:01:19 2026 GMT
        Subject: CN=be9bc706bc41b5f87ce389957f131cfe8699fefb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5c:eb:fe:38:aa:e9:75:3f:21:e9:f3:82:c3:
                    0b:61:5c:40:78:c1:36:8a:61:a3:36:cc:eb:a3:f1:
                    24:eb:38:ad:d0:ff:cd:69:c2:39:82:2d:9a:28:76:
                    ce:73:79:4b:98:26:8e:98:84:a5:e1:5c:4f:06:65:
                    60:87:59:48:8c:f0:eb:79:70:06:4f:42:10:40:08:
                    da:be:b3:59:43:db:cf:6f:5b:73:7e:98:fc:f3:9a:
                    0b:4d:5f:2b:c0:c7:4e:e2:c6:22:9a:77:ad:26:4b:
                    fe:7e:d3:ba:19:67:5f:96:1e:a6:b0:01:67:4b:00:
                    99:5c:94:64:d8:d8:7e:6e:83:95:9c:44:03:81:42:
                    80:86:6e:f6:35:2f:5b:ae:db:ca:f8:29:dd:8e:82:
                    e6:d2:a3:8d:a4:ea:10:28:77:08:f5:77:a1:95:4d:
                    6f:92:f9:a5:89:5a:4d:b2:35:92:29:45:05:6a:bc:
                    c2:e1:d8:e0:a6:4f:5c:d0:1a:0a:54:cd:c2:dd:37:
                    d6:5e:90:3a:8c:f5:5f:26:b8:6e:47:3b:48:47:b2:
                    aa:9f:81:a4:83:55:3d:cc:a0:26:a8:08:6a:5e:51:
                    ed:0e:fa:f3:8c:4e:f3:d6:1e:b1:04:84:a9:0e:9d:
                    26:f6:e5:d8:12:46:a4:fe:d8:5b:e6:96:60:7f:f8:
                    76:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:9B:C7:06:BC:41:B5:F8:7C:E3:89:95:7F:13:1C:FE:86:99:FE:FB
            X509v3 Authority Key Identifier:
                keyid:30:72:CD:5D:F7:32:39:57:AB:87:C0:7F:5C:DD:15:C9:1E:FF:C8:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHLNXfcyOVerh8B_XN0VyR7_yNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:ff:0c:f6:46:bc:27:b5:40:1d:b2:25:fc:b8:63:5f:96:5e:
         58:17:7f:ab:dc:9c:ba:32:b2:d2:18:38:44:d9:d1:d0:00:5d:
         33:a9:14:a3:cc:5d:e1:04:44:02:d6:39:26:17:22:6d:00:78:
         80:85:2b:60:0b:4c:b2:81:fe:59:af:ae:ad:e8:5f:e3:64:d9:
         2f:2d:6a:d7:0d:77:0e:22:00:5f:f4:22:c7:32:3c:b3:87:de:
         7e:eb:2a:76:79:65:29:87:3b:1d:78:10:c2:76:0e:dc:19:9d:
         4f:fb:38:f1:ef:43:d1:05:2f:1f:b2:26:7b:53:9c:d2:66:d8:
         6d:6e:e8:5a:b9:70:83:85:c5:ab:db:fd:eb:f5:b4:14:89:2e:
         ef:46:2a:28:36:90:e7:0b:57:a5:c5:6e:d7:21:c2:6b:8f:34:
         89:b3:a1:86:6f:1d:6d:12:43:79:4b:de:53:11:db:ae:84:6c:
         08:e0:01:47:12:32:82:03:7e:07:48:b9:2a:74:1c:92:1a:42:
         98:52:29:24:55:eb:85:1a:05:55:da:3b:5d:09:ad:36:cc:03:
         94:db:05:97:7b:19:48:f1:26:10:d7:3b:49:67:ce:27:15:e9:
         06:fc:d5:2e:fa:51:42:99:a1:31:35:e1:e5:9d:cd:7b:49:7d:
         df:b1:26:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 19:42:09 2026 by rpki-client