Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.mft
File:                     1MOxLI1jUZDskoQ3u9bLDow4-ak.mft (raw, json)
Hash identifier:          rvyP8OxbwBvQDBGvb/8JS15lblY3yyTmxQIoZr9LU2I=
Subject key identifier:   37:7D:9C:31:BC:DB:03:81:55:AF:07:4A:3C:69:73:99:90:7B:40:69
Authority key identifier: D4:C3:B1:2C:8D:63:51:90:EC:92:84:37:BB:D6:CB:0E:8C:38:F9:A9
Certificate issuer:       /CN=d4c3b12c8d635190ec928437bbd6cb0e8c38f9a9
Certificate serial:       01A114861E9A9D9E7805EDD40E84CDFC6498
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1MOxLI1jUZDskoQ3u9bLDow4-ak.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.mft
Manifest number:          1AA0
Signing time:             Wed 07 Oct 2026 04:01:36 +0000
Manifest this update:     Wed 07 Oct 2026 04:01:36 +0000
Manifest next update:     Thu 08 Oct 2026 04:01:36 +0000
Files and hashes:         1: 1MOxLI1jUZDskoQ3u9bLDow4-ak.crl (hash: DQmLlXTDd5+c0lqaDZZYBOTv4pLgGqt3bhIWHZR+jpc=)
                          2: 2_chmdN9KFFBZIvF9VY89f23PGs.roa (hash: oIVNlGlquIUtlwcT49BOjBM2tIxXAOLbTnaR8cakqIw=)
                          3: Ug1lNBbHE4fz2xePiUgPbuh6ssw.roa (hash: 960uVffx6LNQo9hft7/QQIBeVB+0tegCAre0P6iLSjE=)
                          4: oSGKhwEc_oyA4GgI1H0hJOveCVI.roa (hash: 1SINNHx3FHxT/JXf8IpEHqdou86CS2g7FnWo+nB+dSQ=)
                          5: qEApYQXrozO8TedY0ln4t3PXuCI.roa (hash: 4N1q6nyQ+nUKoj/dIgBE6NkXI8xumOkGZiajy+j/RG8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1MOxLI1jUZDskoQ3u9bLDow4-ak.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Oct 2026 04:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:14:86:1e:9a:9d:9e:78:05:ed:d4:0e:84:cd:fc:64:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4c3b12c8d635190ec928437bbd6cb0e8c38f9a9
        Validity
            Not Before: Oct  7 04:01:36 2026 GMT
            Not After : Oct  8 04:01:36 2026 GMT
        Subject: CN=377d9c31bcdb038155af074a3c697399907b4069
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:0c:80:d7:d2:1b:eb:f1:9e:c2:92:bb:50:84:
                    11:7c:d8:99:ee:3b:d3:5b:a9:cf:9f:1c:7d:a9:ac:
                    89:b0:64:16:40:5d:f2:6b:ce:2c:88:ce:e1:d9:57:
                    6e:52:fd:ba:ec:c5:7b:52:d6:13:7b:08:77:d6:06:
                    c4:de:9a:77:1f:e2:31:c3:24:20:c9:5d:9b:04:bd:
                    09:9b:84:a0:77:05:51:fc:19:5f:62:d2:08:94:99:
                    d5:bc:e8:5f:36:42:27:52:db:3d:0b:3c:c5:d3:d9:
                    ba:37:ca:d7:6a:2f:5f:0d:a4:ea:9b:0a:82:fd:c2:
                    38:38:af:88:cd:ff:e6:26:68:17:7a:e7:a8:31:a4:
                    c6:7d:82:5c:ce:03:9e:00:11:ea:eb:49:5e:11:00:
                    71:8b:6d:c8:53:dd:15:ff:0a:25:fb:7c:ff:4d:3c:
                    dc:a5:b9:39:36:e3:48:cb:b6:66:e2:f7:27:ca:cd:
                    b6:eb:23:4c:0a:c4:18:79:28:fa:e0:d9:ca:2b:27:
                    08:d4:af:15:a9:c7:83:c9:a7:20:52:5b:76:34:ec:
                    d7:f7:34:ad:a6:ee:19:33:3b:41:59:9e:16:a6:d6:
                    1c:84:68:d3:eb:3a:99:bf:44:05:c0:9f:05:e8:74:
                    ad:2b:2d:0c:5c:41:50:05:5a:3c:96:9a:ba:d5:0a:
                    61:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:7D:9C:31:BC:DB:03:81:55:AF:07:4A:3C:69:73:99:90:7B:40:69
            X509v3 Authority Key Identifier:
                keyid:D4:C3:B1:2C:8D:63:51:90:EC:92:84:37:BB:D6:CB:0E:8C:38:F9:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1MOxLI1jUZDskoQ3u9bLDow4-ak.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:d4:1f:4c:26:3f:dd:7c:c2:ce:b1:1c:ac:0a:ca:aa:45:2a:
         96:16:74:ef:cf:12:83:73:0b:c5:2a:44:88:4f:a5:09:30:72:
         fd:ec:15:b3:f6:20:3c:e3:e1:6d:98:1b:36:69:72:90:2b:d3:
         32:5f:93:92:77:87:43:d1:c2:e3:72:ea:3f:41:1b:f1:c8:32:
         ff:63:aa:b6:de:c0:68:39:22:95:75:3e:39:da:f2:b5:20:44:
         4c:16:a1:c1:43:5f:69:00:76:b0:f0:95:4a:98:9d:9b:e8:dc:
         02:e8:ee:4e:3d:46:0f:ac:3d:0f:11:c9:4b:4e:57:b9:e7:ca:
         ce:d5:63:a0:2c:1b:56:9c:ea:51:60:92:f6:99:f6:b6:61:aa:
         c9:1e:d8:db:f5:05:44:97:30:79:69:8c:ab:a9:84:51:52:d1:
         70:be:ee:36:37:eb:48:29:b4:54:30:6a:d0:9e:9a:d5:39:42:
         0f:d0:0d:24:99:b1:d4:b9:dc:19:71:b5:88:06:ca:1f:f5:2a:
         30:dd:24:12:c7:18:6e:5a:ef:dd:e3:53:0f:11:77:86:23:75:
         9c:4b:80:d6:fd:c8:24:7a:c2:da:01:f1:fe:10:df:b2:e3:e4:
         b8:4a:e0:54:44:ed:3f:dc:5b:42:17:01:d4:e6:85:72:5a:8c:
         3a:3d:0d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 13:09:13 2026 by rpki-client