Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.mft
File:                     MvBHo0IShysLH_gE7gIrAq91_-0.mft (raw, json)
Hash identifier:          TkY38qE0SImLWDSBM3a8mIzQSABfoeMv7XUCcDO9A8k=
Subject key identifier:   1F:A1:89:0F:99:58:7B:CE:11:51:2D:F6:55:E7:07:B3:64:7E:41:08
Authority key identifier: 32:F0:47:A3:42:12:87:2B:0B:1F:F8:04:EE:02:2B:02:AF:75:FF:ED
Certificate issuer:       /CN=32f047a34212872b0b1ff804ee022b02af75ffed
Certificate serial:       01A1618E343F918EA1CC3467C24711472387
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MvBHo0IShysLH_gE7gIrAq91_-0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.mft
Manifest number:          0A62
Signing time:             Thu 22 Oct 2026 03:01:11 +0000
Manifest this update:     Thu 22 Oct 2026 03:01:11 +0000
Manifest next update:     Fri 23 Oct 2026 03:01:11 +0000
Files and hashes:         1: MvBHo0IShysLH_gE7gIrAq91_-0.crl (hash: 48/Lk4Fn8AVaPPYFwP/jcqPnl+OCjcW9smWWyBWwguM=)
                          2: bdi1rZ-Hv8XYlMzG6p4dSyqynkQ.roa (hash: 87KIQ9XId5k9Ww9xMmtV6OZLD6Wry24vd0PmuggxAkY=)
                          3: d6m94tH0anOa-FWzt96zJw4rWqM.roa (hash: VXa480FkV+R92FQTcYLaqarEcGnxznUTZLh1NwOBPhA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MvBHo0IShysLH_gE7gIrAq91_-0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Oct 2026 23:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:61:8e:34:3f:91:8e:a1:cc:34:67:c2:47:11:47:23:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32f047a34212872b0b1ff804ee022b02af75ffed
        Validity
            Not Before: Oct 22 03:01:11 2026 GMT
            Not After : Oct 23 03:01:11 2026 GMT
        Subject: CN=1fa1890f99587bce11512df655e707b3647e4108
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:8f:43:42:0b:9a:d5:5f:ab:90:ca:18:17:fe:
                    13:c0:38:9b:2b:e8:db:66:e0:c9:43:a0:f5:60:12:
                    cd:0b:90:f5:0e:ca:f7:d1:f3:a4:91:57:ba:5e:57:
                    09:c3:66:c7:cc:c2:b3:a3:99:22:f9:b2:4c:50:4e:
                    24:c7:39:e3:76:1b:63:61:8a:d8:ce:18:00:42:c1:
                    a6:b7:20:e0:37:e6:3d:e7:1f:c2:7c:12:e2:94:cc:
                    00:f0:ce:66:73:95:42:c9:9b:ba:33:f0:b9:3c:d3:
                    29:df:8e:c1:03:b6:61:69:19:53:59:cb:dd:ab:15:
                    1a:17:fc:1f:64:7c:85:d9:35:b1:1b:db:b0:50:f9:
                    30:b8:13:39:22:03:f5:f6:d7:12:b2:41:8d:e5:83:
                    e5:d2:3f:d9:6e:8c:bc:ae:0a:e4:ea:0d:b9:ae:9e:
                    a0:a3:fd:18:4f:06:69:a5:7d:f4:2a:2a:05:e2:43:
                    1f:ba:76:a1:15:5f:50:26:fb:df:e2:fa:b4:e1:4d:
                    66:07:52:dd:52:95:19:e8:91:61:96:82:7b:ec:a4:
                    ee:ea:32:a1:f9:ee:df:35:9d:42:c4:e4:3a:fd:cd:
                    82:d3:96:ff:a4:de:52:de:d0:04:37:f6:af:92:41:
                    25:96:06:64:41:5c:2e:cb:ee:5d:8b:d1:5e:43:c7:
                    ea:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:A1:89:0F:99:58:7B:CE:11:51:2D:F6:55:E7:07:B3:64:7E:41:08
            X509v3 Authority Key Identifier:
                keyid:32:F0:47:A3:42:12:87:2B:0B:1F:F8:04:EE:02:2B:02:AF:75:FF:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MvBHo0IShysLH_gE7gIrAq91_-0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:08:7d:b2:3f:2c:94:82:65:52:fa:6c:15:40:4b:a4:89:d0:
         11:60:69:b7:c4:c0:5c:ac:61:c4:f8:ba:e0:50:11:2e:04:4c:
         f6:be:e1:c1:4d:e7:5c:95:c9:4c:88:78:b0:b5:01:95:73:de:
         30:97:30:e9:ff:76:b6:7d:7b:c2:5f:cd:35:a8:4b:c2:0f:84:
         45:8c:63:8f:2d:7c:a0:fc:f7:4e:9a:51:49:c1:54:9b:00:31:
         95:17:8b:43:3e:fe:a4:49:2b:a0:9c:39:d6:ad:2a:bc:94:c9:
         42:c8:48:d2:63:73:b7:7c:86:79:44:27:0f:ec:a4:b7:69:aa:
         35:58:a4:2d:7b:b5:90:81:81:05:b2:7b:b1:d5:81:aa:15:54:
         8c:66:86:6e:22:34:cc:13:71:3f:94:5b:a5:e5:ed:57:57:0c:
         84:a7:01:d8:32:f4:07:98:e4:bb:46:9f:bd:01:71:d2:de:3a:
         10:74:b3:df:41:10:ea:51:a4:ab:37:e0:68:7a:9f:54:81:48:
         27:20:5b:f7:17:02:a4:ed:72:b4:92:41:24:d4:d4:da:de:51:
         b1:46:6b:dc:d2:fd:d8:f5:c4:fd:58:b5:57:49:05:e3:57:3a:
         fa:4f:92:39:80:53:5f:2b:e0:33:63:d1:a4:38:e0:93:27:f8:
         67:cd:75:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 10:45:40 2026 by rpki-client