Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.mft
File:                     MBpkhyXuJqRgy5scvNnJyDLESa8.mft (raw, json)
Hash identifier:          xY3C9WrdCfyUPZgHz5OJvB6rMZTbhdHki+ZlahkzkQU=
Subject key identifier:   54:06:34:8A:AE:71:4B:48:DF:C8:5A:12:B9:2A:BC:04:2B:6A:10:57
Authority key identifier: 30:1A:64:87:25:EE:26:A4:60:CB:9B:1C:BC:D9:C9:C8:32:C4:49:AF
Certificate issuer:       /CN=301a648725ee26a460cb9b1cbcd9c9c832c449af
Certificate serial:       01A146BBADE7F82B6953E0AD94EB491F98B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MBpkhyXuJqRgy5scvNnJyDLESa8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.mft
Manifest number:          10CB
Signing time:             Fri 16 Oct 2026 22:01:07 +0000
Manifest this update:     Fri 16 Oct 2026 22:01:07 +0000
Manifest next update:     Sat 17 Oct 2026 22:01:07 +0000
Files and hashes:         1: LMyd5AVVPstuPC5E7pVL_2qH79c.roa (hash: tZV4ibO3L7V8SZM1mv/sUwiQCz0xJaX2spb6v95tdyA=)
                          2: MBpkhyXuJqRgy5scvNnJyDLESa8.crl (hash: sLsfdj94wOnh0XfiF2Ny7eaF5PxLhngJintBwCZ3p9g=)
                          3: N5As3_5f02c5s8zn2uyxGXeV7es.roa (hash: agj60RbD37HPgv9kIsdcj8QWRgmWH3ok7Fvf9vYBX/k=)
                          4: gOZ6TXT8sfMU5a3OW6nvJDUaFsI.roa (hash: JLYLzMod9vl4lvHhqYpTpvU8XLLSIggyRce5PEY8++k=)
                          5: mF3piSy-jnS5Px73pOdLyBwpLDc.roa (hash: DpGLpOFEpkxH6GUQ3DG6CgOD2t2rQ10aAlckjIhEa/Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MBpkhyXuJqRgy5scvNnJyDLESa8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 17 Oct 2026 20:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:46:bb:ad:e7:f8:2b:69:53:e0:ad:94:eb:49:1f:98:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=301a648725ee26a460cb9b1cbcd9c9c832c449af
        Validity
            Not Before: Oct 16 22:01:07 2026 GMT
            Not After : Oct 17 22:01:07 2026 GMT
        Subject: CN=5406348aae714b48dfc85a12b92abc042b6a1057
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:6b:d2:fe:a5:bd:48:d9:2b:69:9f:99:a1:53:
                    a0:bc:6c:b8:e1:59:98:71:40:ee:e3:f7:6e:3d:10:
                    f7:15:e1:87:52:81:cd:50:fb:62:55:8f:9b:28:ea:
                    e2:0b:56:de:c3:81:4b:2e:58:12:5b:86:f1:9b:76:
                    9d:36:15:52:a7:1a:e8:7c:66:2c:c4:8e:9b:8e:c7:
                    85:a9:cd:49:2c:aa:a9:c7:3b:eb:93:b3:6b:da:f8:
                    55:5f:1a:96:d0:29:36:ff:36:92:a2:57:4b:3b:a4:
                    d9:2e:e2:92:2a:70:71:a8:7d:d2:2f:f1:66:21:79:
                    40:61:dd:85:38:48:93:8d:0d:93:92:74:72:5d:b9:
                    46:99:de:90:d9:df:c9:34:35:2a:9a:fc:1f:38:10:
                    e0:a6:40:14:c6:44:57:d3:33:9a:c9:01:08:20:a1:
                    87:0e:eb:a9:c7:09:a0:df:1a:b1:e4:26:62:46:d2:
                    0a:c0:ff:da:e1:6d:fe:96:91:02:5a:51:f9:46:f3:
                    a6:f2:96:f7:9e:a4:68:9b:ad:44:64:2a:89:93:bb:
                    2b:61:a9:75:ec:fb:53:66:b0:fb:41:f2:cd:3f:7c:
                    9a:d4:6c:92:32:2f:0a:44:4b:da:bc:85:ee:75:03:
                    1a:ca:3c:b4:b7:f1:9f:9c:2d:4f:52:24:99:b0:53:
                    8f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:06:34:8A:AE:71:4B:48:DF:C8:5A:12:B9:2A:BC:04:2B:6A:10:57
            X509v3 Authority Key Identifier:
                keyid:30:1A:64:87:25:EE:26:A4:60:CB:9B:1C:BC:D9:C9:C8:32:C4:49:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBpkhyXuJqRgy5scvNnJyDLESa8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:68:5f:ed:c9:a4:f2:49:86:f3:aa:3e:b1:f6:3a:4f:22:98:
         fb:86:11:e1:01:97:48:ba:68:0a:70:7f:c2:5d:74:a1:f7:3f:
         7b:ff:13:cb:fb:c9:fe:fa:99:ef:1e:e5:a4:29:df:00:74:d9:
         3c:17:89:7e:c0:d4:dd:cc:ed:e2:0a:ab:b7:dd:5e:2e:d2:d6:
         b9:3c:fa:84:cb:6d:3c:10:d6:c6:97:63:3d:de:74:ad:38:d8:
         aa:6b:83:5b:23:91:42:20:35:2e:6b:b8:f2:53:88:2c:79:28:
         f7:4f:63:92:c4:05:35:41:5d:91:73:1e:b6:58:25:5d:72:a5:
         42:f1:82:72:66:94:72:09:77:db:73:8d:22:83:3c:de:3a:01:
         41:a4:40:6e:fb:dd:59:70:31:80:ff:07:09:3a:4f:9c:47:11:
         6a:6c:3c:7f:87:d2:3f:97:70:d0:ea:05:4d:12:07:bc:4c:48:
         4b:7d:3b:e4:8a:82:de:16:0d:0f:ba:10:d9:f5:26:b8:bd:aa:
         f5:9b:f3:1f:a4:9d:f9:7d:6b:da:b0:56:fe:52:73:72:ac:2b:
         36:ca:13:92:db:91:57:a7:c6:11:08:42:6f:52:39:a0:a1:fd:
         91:c1:a8:e5:f2:38:3a:8d:27:87:b8:32:93:b9:6f:05:14:aa:
         8b:d7:a3:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 06:01:00 2026 by rpki-client