Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.mft
File:                     MtRJGf3QivuaTQqHeJIwESUd1_A.mft (raw, json)
Hash identifier:          MHlGZLimBEfMb7aN10G5ezF7H7uQ/OpmBFVvaIf7Jus=
Subject key identifier:   F6:DE:B1:4B:F8:FE:A7:78:E7:C8:D6:9F:0D:90:7E:C4:18:50:57:21
Authority key identifier: 32:D4:49:19:FD:D0:8A:FB:9A:4D:0A:87:78:92:30:11:25:1D:D7:F0
Certificate issuer:       /CN=32d44919fdd08afb9a4d0a8778923011251dd7f0
Certificate serial:       01A14CF49C968E11DAA4FE5A0AF78687C988
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MtRJGf3QivuaTQqHeJIwESUd1_A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.mft
Manifest number:          1148
Signing time:             Sun 18 Oct 2026 03:01:01 +0000
Manifest this update:     Sun 18 Oct 2026 03:01:01 +0000
Manifest next update:     Mon 19 Oct 2026 03:01:01 +0000
Files and hashes:         1: 0XCnRmv9lrifFN6Zm_R0C_c5zNk.roa (hash: nCcYx5cHOz71cIaI4A31GrDOCs0TzM6iUrtdozko0AI=)
                          2: 1M3xsOh_lxfEcm0dFrzEOzv-AnE.roa (hash: dnKbu4kjPt0WacaLtGX58/WNe6QRITRJWyWfqyKVROk=)
                          3: AkDqoti2jMyoiBk-NlJdbzsxP7o.roa (hash: vkwpwrU8dQpZYrtzJ9iLn4mM79k2FfRrJDHtiC3P7zQ=)
                          4: MtRJGf3QivuaTQqHeJIwESUd1_A.crl (hash: C9jlFOAcZTGUWmS42mgeVXoUK3JiN9ca6Kqb0ffq7mc=)
                          5: SKMsMlvFHq04VKwS3lm6052RCVc.roa (hash: 74hqP0+K6nKV5HbAvUfvyaw3sL3nIFw0LV1GaOKsxeg=)
                          6: VTg1Pqh6gGxJdPipIvY_2TxmpEE.roa (hash: Re8cRmXCQziE0FT8UEdT+XdkZBUXadu9ZmK30fLj6l0=)
                          7: mC7mkIwEqc9a-OMJRYaVx_ENs6k.roa (hash: Ere1hv6QWF8tKoShPDJZzGSBUfmu4dnSImCVYAe6USY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MtRJGf3QivuaTQqHeJIwESUd1_A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Oct 2026 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:4c:f4:9c:96:8e:11:da:a4:fe:5a:0a:f7:86:87:c9:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32d44919fdd08afb9a4d0a8778923011251dd7f0
        Validity
            Not Before: Oct 18 03:01:01 2026 GMT
            Not After : Oct 19 03:01:01 2026 GMT
        Subject: CN=f6deb14bf8fea778e7c8d69f0d907ec418505721
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:d7:40:68:d5:b9:74:05:03:27:97:50:85:72:
                    93:83:37:3a:cb:d2:1f:6a:62:ee:27:89:d7:d0:60:
                    ae:41:49:ee:5e:a1:c0:19:c5:a2:83:3b:54:11:64:
                    ac:60:dd:5f:73:78:19:35:11:94:ec:37:98:33:53:
                    ae:4b:28:7d:49:f2:77:af:ba:27:70:e5:5b:08:fd:
                    d1:79:ff:fc:f9:11:de:d4:3b:12:68:44:77:0c:3b:
                    b9:f5:b3:47:2c:49:9f:d6:f2:6c:2b:93:59:19:34:
                    ef:dd:74:db:07:2a:1a:59:d2:70:d1:2e:b8:b5:00:
                    ce:28:ad:cb:4c:88:c6:58:ac:b4:f6:14:86:fd:e2:
                    ef:b3:1f:36:c1:63:d3:ac:1d:d9:a6:a6:1f:8f:07:
                    25:d7:a5:fa:21:39:0f:c0:2e:aa:c2:8c:9b:6d:3f:
                    c9:59:51:d8:57:96:87:77:db:b9:f2:12:3f:e8:05:
                    ee:ed:98:a0:e7:53:1c:d6:e5:30:d2:17:43:f1:e6:
                    06:00:27:8c:72:26:ca:b6:2e:b6:d6:ef:9c:76:4c:
                    fc:de:93:ff:ba:39:4e:00:94:f2:c6:ad:6b:2e:f7:
                    ae:46:00:ea:78:9d:80:b7:57:3c:38:09:2a:b8:54:
                    26:1f:f8:74:fa:3d:8a:1e:d2:4b:6d:cd:c7:52:44:
                    4e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:DE:B1:4B:F8:FE:A7:78:E7:C8:D6:9F:0D:90:7E:C4:18:50:57:21
            X509v3 Authority Key Identifier:
                keyid:32:D4:49:19:FD:D0:8A:FB:9A:4D:0A:87:78:92:30:11:25:1D:D7:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MtRJGf3QivuaTQqHeJIwESUd1_A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:12:85:e9:e0:a7:ce:3a:f9:a3:c2:75:56:a3:6c:20:9e:39:
         dd:89:01:7f:09:e9:f3:18:8b:0c:e0:b1:ba:77:e4:54:fc:72:
         1d:29:96:4c:5a:19:20:3d:53:70:02:bb:f1:cb:92:db:99:d4:
         99:6a:29:b3:7d:5d:27:7e:79:c2:a3:f5:a0:29:0b:3f:3d:3f:
         7c:cc:1d:ef:d5:89:a7:a1:ad:e5:44:fe:f8:f2:34:4b:97:09:
         8e:3c:92:1a:37:6d:df:10:07:26:4a:a8:6a:e9:d5:a3:e2:55:
         0a:fe:5a:f9:84:96:d7:78:9e:6a:d9:df:4b:73:b0:80:3a:09:
         91:38:35:d1:8d:2f:2f:ed:07:01:99:ce:f0:24:c8:87:36:f5:
         2a:35:0a:5b:2f:64:3b:ad:92:10:5d:9a:c9:82:32:9a:d1:b5:
         5a:7f:11:a6:57:7a:3b:a6:12:99:41:7c:7f:ac:f2:5d:d3:6d:
         d7:4a:ea:e9:f4:fb:b0:20:2a:60:27:35:89:32:fc:45:b1:ed:
         21:39:d4:0c:81:1a:e7:73:28:30:bd:7d:33:db:cf:f0:0c:4a:
         0e:04:aa:34:76:dd:db:ca:cd:33:18:92:6b:1d:08:47:4d:ca:
         94:b3:7a:9b:9a:d2:eb:30:e7:87:e0:42:d4:1d:7e:43:99:42:
         db:32:f7:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 10:57:39 2026 by rpki-client