Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.mft
File:                     Mgskp0Dy5hYyBQrcFGwe5qPmhsU.mft (raw, json)
Hash identifier:          vzuBYxW6d4DPFCz0K6yAPmQY0v9X2q99LjFygZTsTrA=
Subject key identifier:   48:8C:B6:EC:50:B5:BF:9E:BB:29:89:99:A3:77:F6:8B:CB:1D:26:D0
Authority key identifier: 32:0B:24:A7:40:F2:E6:16:32:05:0A:DC:14:6C:1E:E6:A3:E6:86:C5
Certificate issuer:       /CN=320b24a740f2e61632050adc146c1ee6a3e686c5
Certificate serial:       01A1016D5B9CD8EBA98BFB3622BB8F54BCB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.mft
Manifest number:          1A89
Signing time:             Sat 03 Oct 2026 11:01:46 +0000
Manifest this update:     Sat 03 Oct 2026 11:01:46 +0000
Manifest next update:     Sun 04 Oct 2026 11:01:46 +0000
Files and hashes:         1: 2UPTAgiJvUFj9KxwMHk_neJV1Ts.roa (hash: chaCLnBUf8VW3Cyy0U4Y2DmReJ/YoQuLRxfoEk9G/Zs=)
                          2: 5r35RdY0vy4lh3WOV010F9-QFXw.roa (hash: G+I8XeYNJKZwLdV9Hm/0m91ziGrBNMHkmj6EJpZj11c=)
                          3: CIsoBMnJ1HH2_kjCOniPyHt_zdo.roa (hash: rIsVKuNDzl7s31Uqv2wlQw7E8fHntXl7uQadNq2LiGk=)
                          4: LU_rRpVG0rNU5sbORgmoor-WG8E.roa (hash: v6SXttNOyzn7P8hwnB7Tofa/4Bnu7wdokfdtafR2ixc=)
                          5: Mgskp0Dy5hYyBQrcFGwe5qPmhsU.crl (hash: 4tNlSDigVuMEf/xPFZpeHFSORK1TVDwhvIwh0Xqy9sI=)
                          6: SP8ZFm--93L34rMKDZHfL8Eh_ro.roa (hash: cp6DWhPPeKxvKEzaDsnvDh3dMYI9vYEIXkFKulFhNyA=)
                          7: aZAulIKVvXbN8omq0JhX_jGTQpQ.roa (hash: a1Ep0d4JmHuZC92VG94ayoNuXL+o7ITThTyrhPBbaU4=)
                          8: exjfT9uAFU7f_gIJUid1TXJtR8A.roa (hash: 4rc5j3Of5lWDlFZbenegwws4HWNu69CTDYEmMKe9DAY=)
                          9: o6k4KBPjdil3WuB7HudYZFQVuio.roa (hash: 5XEGVtaoTy/OrakXg9NARGFxY6y76Ds7hBFFlDQicdE=)
                          10: rcsE8T3loa9paQtOZYTdGqYZZdQ.roa (hash: aTqIKXOe4lJEG0nzJ4iYV8aOwdLjU0r2z02TUxqz12s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 11:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:01:6d:5b:9c:d8:eb:a9:8b:fb:36:22:bb:8f:54:bc:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=320b24a740f2e61632050adc146c1ee6a3e686c5
        Validity
            Not Before: Oct  3 11:01:46 2026 GMT
            Not After : Oct  4 11:01:46 2026 GMT
        Subject: CN=488cb6ec50b5bf9ebb298999a377f68bcb1d26d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d2:00:0d:4b:34:fd:c4:80:62:c5:92:9f:6e:
                    31:2e:44:67:f9:24:28:b9:77:8b:6c:da:93:2c:85:
                    da:ce:de:3d:aa:7e:c0:cf:5a:33:0d:18:57:72:bf:
                    78:41:86:d3:64:0f:69:7f:d5:08:4b:8b:44:7f:ed:
                    79:1c:56:3e:78:38:55:db:45:87:72:a5:3f:ad:fb:
                    f0:65:64:18:53:74:38:bd:1c:31:a8:ff:bc:86:c7:
                    bb:62:37:80:91:ad:46:6f:3e:bc:08:2b:f9:da:a2:
                    a7:2b:2c:c8:1f:96:da:3b:17:11:0b:20:71:0a:31:
                    f4:5f:b8:9b:4f:00:44:fc:db:15:9c:4f:51:36:b2:
                    41:6b:3d:22:92:15:5c:18:0d:3c:2b:32:aa:46:01:
                    13:a2:e1:b8:92:76:c1:69:41:48:61:c6:17:f1:1a:
                    e0:5d:b9:5b:30:b9:28:96:7a:e1:6d:4d:6c:9b:5c:
                    c6:c0:59:39:85:1d:cb:57:37:eb:ec:ea:19:43:4a:
                    f0:76:eb:f9:8c:b8:4a:4a:f5:a3:75:c1:f7:d9:91:
                    62:a9:57:1c:52:b0:77:60:98:9f:4b:92:cc:a0:5a:
                    db:b0:51:8e:e8:a2:b8:b4:64:43:aa:9e:bd:50:73:
                    85:7e:a1:5d:4b:06:66:46:22:0d:de:81:23:a5:29:
                    72:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:8C:B6:EC:50:B5:BF:9E:BB:29:89:99:A3:77:F6:8B:CB:1D:26:D0
            X509v3 Authority Key Identifier:
                keyid:32:0B:24:A7:40:F2:E6:16:32:05:0A:DC:14:6C:1E:E6:A3:E6:86:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:5f:41:cf:02:e4:ae:d9:aa:f2:e3:ac:f8:e8:a6:50:43:7a:
         3e:eb:51:59:f0:a3:6a:be:cc:eb:18:f0:3c:10:65:c2:72:77:
         d5:42:d6:ca:47:07:90:c4:2a:80:31:e2:d5:80:51:e4:31:35:
         62:90:39:21:c5:8e:d4:e4:31:4c:e4:1e:e4:a5:97:2d:ad:4e:
         07:af:cb:47:db:bd:ff:84:e0:cb:0d:3b:45:51:3f:4b:8d:ea:
         ee:70:42:2f:1d:c2:d7:69:86:69:87:c8:df:c4:ae:0e:de:5b:
         24:bf:a3:ed:f0:62:f1:29:ff:52:5a:6b:85:95:ef:07:a8:12:
         cc:bc:cf:b7:b0:6a:8d:b8:80:b3:d4:ed:ce:6d:cc:44:1c:aa:
         71:f0:f4:2a:cb:90:d6:b9:6c:9b:0e:a0:61:61:c6:65:9a:5b:
         85:71:d8:d8:47:ac:42:f8:ff:2a:30:2c:93:f1:80:a1:47:c2:
         7d:dc:92:11:d6:be:c1:5c:0f:ae:49:db:99:82:cd:26:53:c0:
         c4:0f:c8:48:46:f7:29:75:1e:32:74:b6:6e:09:8f:9a:c9:13:
         4b:92:b9:d8:5d:6f:1c:ca:13:a6:5b:fc:5f:f6:23:af:e2:8a:
         e2:37:8f:62:1f:38:35:27:60:a3:6d:fa:19:c8:27:f1:23:f8:
         03:c5:33:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 15:43:33 2026 by rpki-client