Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.mft
File:                     mgheBvLiouMEJW-IE1_xPectBzY.mft (raw, json)
Hash identifier:          kVYwxJEQzih/I3aNyc2nb18IrVgR4zGLlXYWYNb7wTM=
Subject key identifier:   8E:93:45:21:68:74:68:E4:A2:0A:C6:D0:AE:B3:58:23:BC:37:49:74
Authority key identifier: 9A:08:5E:06:F2:E2:A2:E3:04:25:6F:88:13:5F:F1:3D:E7:2D:07:36
Certificate issuer:       /CN=9a085e06f2e2a2e304256f88135ff13de72d0736
Certificate serial:       01A0024AD1462079BCFB83160FE4420078BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mgheBvLiouMEJW-IE1_xPectBzY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.mft
Manifest number:          10DF
Signing time:             Fri 14 Aug 2026 22:00:52 +0000
Manifest this update:     Fri 14 Aug 2026 22:00:52 +0000
Manifest next update:     Sat 15 Aug 2026 22:00:52 +0000
Files and hashes:         1: mgheBvLiouMEJW-IE1_xPectBzY.crl (hash: va9ccl+/9BASZTUe/LftahHfT+Jyefy+TXQ9oxdpVCs=)
                          2: pgk6nsI3cK4BMyAq4yo3QkbL4pU.roa (hash: FD9gDw7QMQ6LHr1l8voFmg+wOG9WJ0q/3TSPnokXHZs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mgheBvLiouMEJW-IE1_xPectBzY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:4a:d1:46:20:79:bc:fb:83:16:0f:e4:42:00:78:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a085e06f2e2a2e304256f88135ff13de72d0736
        Validity
            Not Before: Aug 14 22:00:52 2026 GMT
            Not After : Aug 15 22:00:52 2026 GMT
        Subject: CN=8e934521687468e4a20ac6d0aeb35823bc374974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:7b:eb:73:ea:1f:b7:69:8c:2c:46:3c:10:32:
                    4d:2d:60:ca:43:38:ee:01:26:1b:42:45:97:7f:9d:
                    28:13:36:fd:cc:a2:9e:e1:34:84:b1:6d:b5:81:7e:
                    a6:6d:9a:b3:7a:fc:da:30:84:14:76:87:58:7c:1d:
                    e3:50:a3:9c:af:04:8b:07:93:4c:73:4e:c2:22:8c:
                    7f:82:86:60:fe:5c:a1:b0:c1:f1:aa:80:1f:6b:a0:
                    2a:12:c9:ab:12:cd:73:91:3b:36:32:74:fd:1c:f7:
                    b1:e3:9b:ad:48:31:a4:0b:13:a8:cc:0a:7e:7a:73:
                    7c:16:a1:d7:2d:4a:13:06:05:9a:27:34:4f:0a:09:
                    47:52:80:4f:00:8b:93:32:23:3f:f1:09:59:56:a2:
                    a0:47:2a:af:ea:47:49:69:69:2c:9c:75:0c:58:1b:
                    ad:8a:5b:26:97:68:87:01:c9:48:19:ca:99:2a:68:
                    c9:52:54:be:1c:63:8e:be:0b:80:dc:14:61:aa:93:
                    b1:1b:49:61:2a:46:2a:37:d5:72:72:5a:50:7c:3f:
                    35:1f:05:f5:fb:63:b2:5f:0f:78:3e:aa:27:41:72:
                    76:2b:0e:d7:1c:d9:eb:5e:5e:60:9a:ba:0a:0c:c6:
                    cc:c0:24:e0:0f:b2:4c:f7:1c:5c:66:36:35:77:d3:
                    ca:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:93:45:21:68:74:68:E4:A2:0A:C6:D0:AE:B3:58:23:BC:37:49:74
            X509v3 Authority Key Identifier:
                keyid:9A:08:5E:06:F2:E2:A2:E3:04:25:6F:88:13:5F:F1:3D:E7:2D:07:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mgheBvLiouMEJW-IE1_xPectBzY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:0b:ea:ca:f3:a9:d9:32:8b:a5:b4:73:55:31:02:ad:c0:5a:
         a0:25:69:8d:8b:02:19:1d:34:59:b5:74:7a:ee:d1:94:40:23:
         bd:35:32:bc:46:da:77:bf:55:93:18:1c:fb:2e:21:4d:61:9b:
         32:a5:77:10:bf:c8:3e:c6:e8:14:a2:54:e0:8f:37:32:66:d1:
         be:8b:03:c3:4b:7c:49:ef:7a:66:07:8b:a0:44:53:d4:b7:74:
         5c:b9:82:71:37:82:c8:6f:f9:67:df:ac:9b:c4:a3:d5:6f:81:
         81:fa:62:0d:de:b1:70:cd:0a:e4:d7:46:d0:53:fd:15:a8:ae:
         a1:b3:95:db:4e:c2:6d:df:f0:48:36:04:7f:d7:3a:83:cc:4b:
         48:8a:c5:cc:ec:75:c5:b1:71:a6:5a:26:6d:a2:a0:87:d7:95:
         62:70:77:0b:ff:d9:8a:2d:75:50:e2:55:46:94:de:63:54:8c:
         f9:40:78:38:f7:65:1c:7e:a6:da:05:92:4b:9f:d2:d7:50:21:
         07:16:66:b8:6a:47:19:e5:d9:b6:f8:46:ef:a7:a8:98:e9:91:
         84:6d:4a:c0:ec:7d:06:69:67:4a:f9:ae:70:1d:d0:37:47:6e:
         9b:e4:8c:8b:ed:23:42:58:85:ef:03:a3:67:78:59:75:e1:d7:
         b6:48:0d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:28:44 2026 by rpki-client