Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft
File:                     mGihmSu4A33egdDIzcBpX87hfCc.mft (raw, json)
Hash identifier:          W0ExElIDKWTRF9hYaml/4FApjT5RMjgbG7E7OguXVQ4=
Subject key identifier:   57:E7:7B:E9:7D:72:84:90:19:9A:B5:08:65:A0:86:6B:22:CA:7B:DB
Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
Certificate issuer:       /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Certificate serial:       01A1754B8F507F6A9247C8984245C3EF060C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft
Manifest number:          14CF
Signing time:             Sun 25 Oct 2026 23:00:48 +0000
Manifest this update:     Sun 25 Oct 2026 23:00:48 +0000
Manifest next update:     Mon 26 Oct 2026 23:00:48 +0000
Files and hashes:         1: 6sDEpQA35ftQgC9cRb2aUxRe15M.roa (hash: 9RYUADj24edFkxjz1HOYfztJjRAg3gUE9hiqhdU7LFs=)
                          2: 9sMrMi9sFO8KgSN1cLbi-u3lvM8.roa (hash: r9Mi0ISmgqXc4MQRndutfvzx3+gJmpftorBgBM19zMU=)
                          3: CV4kyEyPMrqs-gw6w-zTvMjGT5Q.roa (hash: GvwQBFKWqGnALtG2pY9jEuPw2EDgNLgRgYwwOKULAJQ=)
                          4: Cel5VebU9XnFn51DXpiqtq9Yzgo.roa (hash: kkcF/4JG58YgyDcke34pD97l1aVYXpHB/nNUlwXCa6Y=)
                          5: If6LZrm-wB-hhB9C0yFPZo9tbQQ.roa (hash: 4babYaLwms6qTMqkJHs8CX9HE0O90ttnDzXi+y/MYEE=)
                          6: KsjvwRtdC7ElA6WAWYk0fsDa_00.roa (hash: ygwPQfipezTsIcrC5hzYSZFNHgwNil2m9OuOezohF0I=)
                          7: LhR0TaI-3l7vFbmj4OdM5VTznnM.roa (hash: W1ss0alc3roBe8jtNe6rfLpuT1b+r5ADeaOA+2GP03A=)
                          8: RKC_1mqLXMIDbGkqZMEJrCSWeCo.roa (hash: PPGCCrSEwXx1Rr+8w142QOXo4ncdDGVM4h0k0e7qrm8=)
                          9: U6vQ_9-xOxVrenXa0_Xg04rZfLY.roa (hash: OQhVM9/l+WAA3TDjGzNDJCTikubrDwOffydjFZn+MFs=)
                          10: UUD9roNkskiwye2tqwssSFEocBY.roa (hash: uz8OsG4t9MjUUcUflz9xYFC0CJuPcU2Ss0OyzWUNNtw=)
                          11: W4qxGEOnhck0eA0os9nmiLaPXEU.roa (hash: QlC0nvvSkC3Gr5lT9KAlzmA+mhP9wXRsj529IDFwxxk=)
                          12: YyEjnHRlckr_V27zZG0mJ7mtsUY.roa (hash: TMaxyAx06Cm6JWuqxguyXAjdJbsUvcCD71I5rrjSBnE=)
                          13: cWj4UtL1sFgLiFO9xaoYNOUaYKA.roa (hash: 9hZRVxjwWZjY8LooPQ/ZoNmU0pcSfdMkHBQ4mNIdQvQ=)
                          14: hxArBBPEsBmh6lA8LmpqsGC-O9Y.roa (hash: p7tJPFgjfUUpJQH1SrbPDkojOBWipCAp1Q6lO2Sk15g=)
                          15: iIxvWcwl88BImtN8o1GvbtwFtug.roa (hash: a5Q+4dXfu6wDxBWXxjzSYqzWruw5vPQbQWVRYFB3/0Q=)
                          16: ix0KuQhI-fe5sCE43gDf8AwDdMk.roa (hash: r5gzLIcFMc4LYxDWUcBWNYQE4pYOB805yyOcqZ4Ft0k=)
                          17: k4v7NOTWjKRyaZtnPspqWpfDi_c.roa (hash: CWRF8EeIQt/IjcYCA1XZwtHZO61wzXfPONIqs+tm1uA=)
                          18: mGihmSu4A33egdDIzcBpX87hfCc.crl (hash: yc8U9YqxGEjlmNlqrAcjVRXUQB6thkn4TvsoKjz2XdI=)
                          19: sf51NOhxVRdedJBM3Z0cnGoghkQ.roa (hash: LN9NTe23NXKUtbp6+7QIyRE2B1TaB0xN6+rtM8kCrNA=)
                          20: ttggVWDiefPyqveIlfoGKCWaja4.roa (hash: NvSwdx11u/EHh453rM9xZTJvAWhbuq2a/Hj0lXbHfsQ=)
                          21: vTt98DamUvECWEMoSR5lw_z_oe4.roa (hash: xsmG4HMvRTP949NLqKrEta8cDRTk+o+O5AMMpfIwVNc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Oct 2026 23:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:75:4b:8f:50:7f:6a:92:47:c8:98:42:45:c3:ef:06:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
        Validity
            Not Before: Oct 25 23:00:48 2026 GMT
            Not After : Oct 26 23:00:48 2026 GMT
        Subject: CN=57e77be97d728490199ab50865a0866b22ca7bdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:3f:c8:db:53:6f:90:0f:e2:21:c8:8f:86:08:
                    4d:66:f8:bb:af:99:03:ff:7f:c1:1f:d8:c4:77:30:
                    b4:a0:9a:9c:03:d6:dc:f2:a2:cb:3f:57:5e:89:88:
                    3c:b8:fb:b5:dc:2f:45:16:78:ac:16:61:41:70:5c:
                    98:74:1f:ad:42:7c:4f:01:9b:38:38:91:23:e4:03:
                    85:f5:f4:9f:f6:fa:91:ba:16:84:d1:90:c4:a7:58:
                    e3:f3:01:ef:8e:a9:d6:a2:0e:57:1b:74:6e:67:54:
                    e7:77:0d:9a:6d:f4:d9:aa:34:a3:93:36:84:f1:07:
                    de:2d:79:de:11:af:0f:78:ae:a5:c5:00:eb:7f:43:
                    9a:11:ef:8c:65:f5:1a:48:81:53:79:55:07:de:ff:
                    67:7f:b0:9b:ff:ed:e2:2b:25:16:a5:96:c5:11:e3:
                    04:b7:76:b3:38:4f:1b:a8:ef:9d:24:52:2a:68:84:
                    4d:d0:6e:27:5c:29:e8:ef:a5:63:0b:97:eb:a0:4d:
                    45:db:69:65:f0:1a:f8:33:e9:8e:64:b5:a3:3d:cd:
                    c8:97:ce:8d:64:cd:a3:bb:56:ce:6b:16:02:7b:83:
                    31:a7:5c:4c:b6:07:18:01:96:04:fa:a9:04:65:2a:
                    4a:ba:fa:e3:66:d3:6c:25:15:26:b2:7b:57:da:0d:
                    51:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:E7:7B:E9:7D:72:84:90:19:9A:B5:08:65:A0:86:6B:22:CA:7B:DB
            X509v3 Authority Key Identifier:
                keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:e6:68:2d:42:5f:7b:89:80:e4:15:a8:2f:3f:1b:28:82:15:
         f6:b7:bc:50:01:da:8d:eb:a7:51:59:32:13:47:39:7d:97:58:
         3b:77:cc:50:c2:f4:3b:2e:13:51:fa:23:39:13:42:6f:b6:75:
         e9:67:7a:8f:ec:d4:67:17:7f:24:4a:a0:9e:2b:bb:92:1d:b6:
         ad:a6:04:83:ca:e9:8b:b6:48:9e:96:4e:e4:52:dd:c8:08:88:
         0e:cf:c6:a9:6e:07:5e:71:bf:d8:04:f0:19:aa:7b:9d:a6:da:
         0f:cb:71:90:51:69:d6:1a:cd:f7:1b:fc:98:0e:2d:36:c8:d7:
         c0:75:c2:dd:a1:02:12:a1:82:c5:c8:13:f8:0c:96:32:17:0b:
         33:f3:41:48:0b:36:de:06:8f:03:82:50:72:6d:52:2b:69:8f:
         6d:dd:7a:c4:16:29:78:ca:50:3c:18:48:b5:a8:47:f4:45:6e:
         95:f1:52:f7:62:04:6c:d2:f7:4f:df:34:1c:28:81:79:4f:b8:
         ec:14:ad:3d:b5:b8:f0:3b:a8:73:a8:f1:42:76:1d:4c:9b:42:
         ad:70:64:4a:8a:8c:b8:a3:4b:5e:de:c8:af:78:00:35:e6:e1:
         95:4a:6b:51:f0:05:f7:b3:2a:f7:4d:a3:ce:bb:6e:f5:6e:cc:
         d9:ee:1c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 04:33:43 2026 by rpki-client