Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
File:                     MCemMbtnOOtou26mxCTvSn0Uw8s.mft (raw, json)
Hash identifier:          GTnoCKn1lWr6Sp5N8TG30PP3xUm4y6Pg6ZIoCSL10f4=
Subject key identifier:   24:78:87:3C:C7:E7:50:03:57:14:F9:38:D0:C2:41:B1:1C:B5:54:2F
Authority key identifier: 30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB
Certificate issuer:       /CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb
Certificate serial:       01A06DCB925234F1C0A59F0E1E52FAE81A57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
Manifest number:          1A57
Signing time:             Fri 04 Sep 2026 19:00:52 +0000
Manifest this update:     Fri 04 Sep 2026 19:00:52 +0000
Manifest next update:     Sat 05 Sep 2026 19:00:52 +0000
Files and hashes:         1: 2VV3UfnItu_52uvF-k4DMpk1zjA.roa (hash: yurroUcvCQ0iRkkkr4yuxcK5LcAIk00+8chFnaavckE=)
                          2: CEkYTmNqh4ud0nioNMk1K4djUfo.roa (hash: bhH9nZDHYzzeKrmVjURmPT3vNUIoH+wcuXxEhHTEVU8=)
                          3: J8xAVkqYLMb47ptuZk5Ix4lfjWU.roa (hash: pHPtPx9vsv712QiSLZLL9G31WWmDzgqCzXERnuz9zRg=)
                          4: MCemMbtnOOtou26mxCTvSn0Uw8s.crl (hash: /L1FGuRangcwvzrwi4lQB6t1AEBdMdi5I0i8xTDcDXY=)
                          5: NX6QjZN-pwUZGrxeBh6ZeWXUtZM.roa (hash: YPxNBQxqKzSRH7VqT/pnoJq/j2DPg0mDeSU7F/W/bvs=)
                          6: PWPcidSaQ_vJd_1GO_4YsiiMemU.roa (hash: WJQnuJgsOZgxmIpIk6Yg1ApUP7uwqsYV99jwQ6GpscU=)
                          7: YaZXtt4CBX_dPogFy216OZ32jZ8.roa (hash: MMlcUYaXZ5PcPwOs7IfmUuTH4RAjSxkjD0El5fES9Mc=)
                          8: mz1Jb3T4ZolM6uN1zf4sUfohQww.roa (hash: RoeR+WJClo/hYUuNplSTfmQx/xOVZakfbpqBs2hXjFs=)
                          9: zUxaIxOwjiIBb-aRvMvT9f0REEs.roa (hash: KSQvWhLXAEUdj+ycS2WjVgaRxkNXB3vrlVqd7DVfko8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 16:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6d:cb:92:52:34:f1:c0:a5:9f:0e:1e:52:fa:e8:1a:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb
        Validity
            Not Before: Sep  4 19:00:52 2026 GMT
            Not After : Sep  5 19:00:52 2026 GMT
        Subject: CN=2478873cc7e750035714f938d0c241b11cb5542f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:94:8f:ec:9d:51:06:d2:39:a6:ae:8c:12:f1:
                    43:20:27:3a:46:a3:93:2d:42:4a:db:7b:31:3e:e9:
                    3f:1a:1c:0d:37:d5:e6:f6:14:cf:76:9d:ae:0e:79:
                    96:e0:bb:5b:23:19:c2:bc:e6:c3:27:3b:72:26:33:
                    11:4d:e8:2f:aa:2f:bb:e8:31:39:b3:27:24:f8:fa:
                    d1:4d:fe:bf:a5:95:ec:e6:c4:4c:56:6c:48:7a:29:
                    23:67:7d:bb:48:52:21:84:dd:66:5b:d9:ba:fb:02:
                    be:f7:ef:ac:23:6a:0f:88:e9:c3:e7:a5:2d:15:34:
                    19:28:56:cd:d3:92:57:ab:2b:29:e0:16:07:5b:de:
                    87:0b:6c:49:3b:0c:7a:22:e1:6f:cf:5e:bd:c9:4e:
                    bf:2e:86:9b:cc:7f:09:b0:98:68:cd:31:f6:fc:82:
                    b3:4e:39:19:54:c3:b1:51:3c:6f:01:c2:ed:b1:46:
                    7b:f5:c7:e8:e4:ac:6f:21:6b:f5:14:15:fb:33:9f:
                    a2:3d:88:bd:35:0f:36:38:60:a7:96:b7:88:f5:6f:
                    c1:96:6b:f8:32:f2:aa:cc:38:12:67:c1:3a:3c:f3:
                    f7:a5:0e:19:18:90:7c:9e:22:6e:4e:cd:b0:59:3f:
                    22:c2:d4:14:72:aa:cf:f9:8e:30:5f:fe:ce:de:29:
                    1f:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:78:87:3C:C7:E7:50:03:57:14:F9:38:D0:C2:41:B1:1C:B5:54:2F
            X509v3 Authority Key Identifier:
                keyid:30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:ed:a6:b2:12:68:8d:a8:d9:fd:00:af:e8:44:13:6a:90:e8:
         7e:c0:71:db:f7:93:2c:fe:b2:fb:8b:6b:85:e8:25:f7:9b:01:
         20:c6:5b:64:be:dc:9b:8b:9b:50:eb:55:92:a5:32:d7:a0:09:
         7b:dd:21:86:c3:c2:d0:ed:25:6c:fd:8c:1b:12:ff:2c:c7:c6:
         f9:5d:6c:51:15:4f:d2:38:7e:4a:53:29:ab:83:96:f7:e6:18:
         1d:ff:e4:66:4a:29:37:76:ec:0e:40:98:00:33:9c:59:e7:0d:
         ca:94:7a:18:b9:6b:8f:0c:1f:7b:0c:66:8a:65:27:b3:76:cd:
         fe:ed:37:35:7d:0c:db:bf:1b:b1:f5:9c:89:dd:7b:a5:77:e1:
         09:f5:37:e9:1d:ca:5a:e6:53:39:c0:28:7c:2b:05:2b:f7:66:
         c6:7f:46:53:11:08:60:0e:af:cb:2b:e1:96:12:df:44:02:4e:
         44:9b:ba:83:93:96:1d:16:f0:2c:4c:38:fc:99:20:65:53:1a:
         53:f1:4f:77:ae:4c:54:2b:09:24:a4:53:0d:41:5b:b0:a4:38:
         93:e3:75:5e:1f:4e:83:42:38:73:3d:98:95:52:40:cb:ff:38:
         6b:e6:d1:20:f3:e8:9d:e5:76:28:14:e1:0e:e7:ac:12:af:d9:
         77:0a:92:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:39:49 2026 by rpki-client