Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/mRLZRawqSfO02iIhwnuCmq_MsvI.mft
File:                     mRLZRawqSfO02iIhwnuCmq_MsvI.mft (raw, json)
Hash identifier:          mi1p6+0sbaz9dvzGKTl8ZLeVYPfRhJAw5yRBIsY7qRw=
Subject key identifier:   22:68:97:22:8C:84:18:96:79:74:AF:44:64:1F:F6:15:21:AF:8B:2B
Authority key identifier: 99:12:D9:45:AC:2A:49:F3:B4:DA:22:21:C2:7B:82:9A:AF:CC:B2:F2
Certificate issuer:       /CN=9912d945ac2a49f3b4da2221c27b829aafccb2f2
Certificate serial:       01A14B05D213F195E314D2ABCC58E3BE0C2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mRLZRawqSfO02iIhwnuCmq_MsvI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/mRLZRawqSfO02iIhwnuCmq_MsvI.mft
Manifest number:          18C7
Signing time:             Sat 17 Oct 2026 18:00:34 +0000
Manifest this update:     Sat 17 Oct 2026 18:00:34 +0000
Manifest next update:     Sun 18 Oct 2026 18:00:34 +0000
Files and hashes:         1: K3IkaDvOsxRDnW5ivwAMwt2TUdw.roa (hash: 4pub90rA78k1OuNqh4u/EQwhdsIyW78nZyVBnumMV8E=)
                          2: mRLZRawqSfO02iIhwnuCmq_MsvI.crl (hash: utat5ZPw1/Z0UqYQHcf5scWHsXBA1U/NROkGypseunE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/mRLZRawqSfO02iIhwnuCmq_MsvI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/mRLZRawqSfO02iIhwnuCmq_MsvI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mRLZRawqSfO02iIhwnuCmq_MsvI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Oct 2026 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:4b:05:d2:13:f1:95:e3:14:d2:ab:cc:58:e3:be:0c:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9912d945ac2a49f3b4da2221c27b829aafccb2f2
        Validity
            Not Before: Oct 17 18:00:34 2026 GMT
            Not After : Oct 18 18:00:34 2026 GMT
        Subject: CN=226897228c8418967974af44641ff61521af8b2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:05:30:94:b0:33:42:46:7e:d9:73:be:1c:ff:
                    32:b0:df:25:75:2c:4a:3a:7a:ca:67:da:f3:ff:0a:
                    c3:61:5c:7a:73:98:4c:03:e4:d9:84:21:75:f0:71:
                    d4:4c:b0:6c:f4:f5:00:e2:0a:b8:7d:ff:d8:c1:1a:
                    98:e5:2b:5c:b1:57:9f:b1:ca:04:5b:9c:a9:eb:ba:
                    8c:8e:43:5a:f6:df:a8:bf:e2:7d:94:bc:5e:a2:c7:
                    9b:a5:49:c5:20:c0:65:f2:df:dc:ba:ed:60:5c:4a:
                    2e:ff:4e:74:67:e4:08:d3:9d:ba:79:0a:8a:58:49:
                    ea:e6:09:4e:0f:81:31:17:a2:b3:c9:20:d7:b6:d3:
                    35:92:46:e4:35:14:92:0b:f4:8d:96:c1:7e:66:33:
                    06:ea:52:6e:7e:80:2b:c2:bc:bd:03:a2:7e:05:36:
                    75:8c:36:23:6f:f7:8c:f7:9c:77:38:66:aa:9d:33:
                    d5:c7:b3:da:63:20:17:28:58:e0:13:49:6d:1b:eb:
                    ab:9c:06:be:47:81:90:42:d2:15:af:f6:74:e5:9b:
                    c1:66:b3:97:3d:e7:f5:1a:ef:84:9c:77:ff:45:9a:
                    c3:17:0d:0f:8a:b5:7d:fc:a4:4c:0f:28:3b:25:9f:
                    75:22:14:fb:35:1f:13:a9:14:1f:84:fa:0d:3d:45:
                    b3:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:68:97:22:8C:84:18:96:79:74:AF:44:64:1F:F6:15:21:AF:8B:2B
            X509v3 Authority Key Identifier:
                keyid:99:12:D9:45:AC:2A:49:F3:B4:DA:22:21:C2:7B:82:9A:AF:CC:B2:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRLZRawqSfO02iIhwnuCmq_MsvI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/mRLZRawqSfO02iIhwnuCmq_MsvI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/mRLZRawqSfO02iIhwnuCmq_MsvI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:e8:c6:7b:31:06:75:70:26:fc:9b:0f:b9:73:53:c6:ed:4b:
         ec:26:e3:50:39:a3:71:a1:55:b7:cc:da:b3:04:f6:54:ba:cd:
         dd:69:9e:26:c5:ca:6d:57:6c:96:54:4d:40:70:3e:3f:7c:15:
         c3:91:75:67:7c:13:be:80:fb:c3:c5:ff:45:7d:ea:d1:88:61:
         f8:c8:0a:1a:87:da:67:05:6f:26:97:21:30:82:1e:40:36:46:
         41:2d:b0:6b:7b:f3:e5:d3:b5:82:c5:26:60:22:66:39:6f:0c:
         d2:f1:03:34:a1:ff:8f:37:1c:53:ca:99:1b:af:be:21:c3:24:
         67:4a:de:1e:ac:f7:d9:fb:b6:87:83:c7:e1:09:35:55:81:af:
         72:68:53:6f:85:fe:5c:e6:4c:32:42:c9:82:c9:1b:b5:23:cd:
         aa:f9:63:99:e8:1f:e4:bb:c9:35:d0:13:2f:67:23:86:65:5d:
         62:24:e3:ed:62:0e:39:68:1b:20:66:9f:a0:67:ea:c4:cb:3f:
         de:77:3a:a6:6d:c2:1e:a0:2f:40:36:b0:b9:2d:ff:03:06:c8:
         f1:33:c3:91:35:76:e3:f1:24:13:9f:2c:f4:1c:0a:e0:2d:a5:
         4d:ee:e5:3b:e3:95:9a:cf:38:1e:17:e4:9d:63:3c:45:59:80:
         65:d4:75:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 22:31:33 2026 by rpki-client