Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.mft
File:                     MvBHo0IShysLH_gE7gIrAq91_-0.mft (raw, json)
Hash identifier:          yyZz/+GV3DpUA5ssnQV+gUojHb9YId67gQokqzN/3+o=
Subject key identifier:   43:2B:1A:25:A9:BD:57:62:3F:12:26:86:2B:27:60:F2:2D:F8:F8:A6
Authority key identifier: 32:F0:47:A3:42:12:87:2B:0B:1F:F8:04:EE:02:2B:02:AF:75:FF:ED
Certificate issuer:       /CN=32f047a34212872b0b1ff804ee022b02af75ffed
Certificate serial:       01A06E39795144260E22C3C011023FF718F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MvBHo0IShysLH_gE7gIrAq91_-0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.mft
Manifest number:          09E4
Signing time:             Fri 04 Sep 2026 21:00:55 +0000
Manifest this update:     Fri 04 Sep 2026 21:00:55 +0000
Manifest next update:     Sat 05 Sep 2026 21:00:55 +0000
Files and hashes:         1: MvBHo0IShysLH_gE7gIrAq91_-0.crl (hash: X67GfSd9T78JtQ9j1P/tP28IvSEbeG3uW7uCmAcYKQ4=)
                          2: bdi1rZ-Hv8XYlMzG6p4dSyqynkQ.roa (hash: 87KIQ9XId5k9Ww9xMmtV6OZLD6Wry24vd0PmuggxAkY=)
                          3: d6m94tH0anOa-FWzt96zJw4rWqM.roa (hash: VXa480FkV+R92FQTcYLaqarEcGnxznUTZLh1NwOBPhA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MvBHo0IShysLH_gE7gIrAq91_-0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 20:21:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6e:39:79:51:44:26:0e:22:c3:c0:11:02:3f:f7:18:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32f047a34212872b0b1ff804ee022b02af75ffed
        Validity
            Not Before: Sep  4 21:00:55 2026 GMT
            Not After : Sep  5 21:00:55 2026 GMT
        Subject: CN=432b1a25a9bd57623f1226862b2760f22df8f8a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:15:f8:43:6d:27:b5:07:b7:ea:38:d4:0d:9e:
                    4d:a5:50:7f:b8:80:89:59:fb:ee:aa:83:d9:d9:10:
                    42:4d:f7:c5:25:e9:ca:a8:f8:6f:35:ba:4f:82:c9:
                    c0:eb:bd:b9:ee:d8:99:ed:f0:99:8c:e2:26:68:9f:
                    da:52:d4:bf:5a:f4:25:65:c7:9c:05:08:ad:f3:3c:
                    19:2a:84:a8:45:e5:a6:60:0f:65:9f:a8:9a:de:af:
                    7c:4f:9e:92:88:07:44:79:17:5c:a6:6a:22:8b:7c:
                    8b:32:d1:a7:61:45:7a:57:ca:a7:5c:12:c5:16:06:
                    05:c0:d1:0b:67:4b:2a:a2:d4:ca:1e:d9:19:33:af:
                    85:40:bb:25:5d:2c:bc:e1:fa:52:43:27:74:7c:8b:
                    64:15:ea:92:ee:26:f6:5a:6a:56:61:5d:6b:d2:dc:
                    c0:14:43:d8:7e:25:24:f0:8c:b7:e7:95:63:d4:ad:
                    07:6b:c9:9f:a6:82:55:b4:c2:a2:51:82:3d:f6:27:
                    c1:21:fd:24:65:9b:28:9f:52:2a:d9:57:1c:7d:ff:
                    ab:8b:8f:6e:7c:68:3f:60:77:c3:e6:3c:1e:54:da:
                    47:4d:0f:fc:81:6b:f4:0d:01:38:05:01:0f:26:99:
                    97:a3:d1:4d:63:26:3e:3e:63:5b:3b:af:9a:28:d0:
                    8e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:2B:1A:25:A9:BD:57:62:3F:12:26:86:2B:27:60:F2:2D:F8:F8:A6
            X509v3 Authority Key Identifier:
                keyid:32:F0:47:A3:42:12:87:2B:0B:1F:F8:04:EE:02:2B:02:AF:75:FF:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MvBHo0IShysLH_gE7gIrAq91_-0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:eb:9d:0c:68:cb:85:59:51:24:a1:e0:03:2b:24:66:d5:f4:
         57:3f:04:9c:84:1a:17:9f:a0:ed:56:9c:45:38:77:18:49:38:
         4e:d3:ee:21:79:69:99:4e:56:0d:88:d3:0c:2e:cc:da:96:e8:
         af:aa:52:94:61:ef:53:50:d3:79:3c:7d:07:f2:13:f6:ff:29:
         63:2b:9c:4e:a8:91:43:ab:3d:e0:5e:1a:9d:5d:6e:ef:52:73:
         bb:d1:67:d6:d7:03:d3:11:6c:fa:84:53:32:23:24:2d:3c:cb:
         1f:05:b6:56:95:11:bd:42:7b:3d:ff:96:cd:df:58:fe:49:4b:
         3d:9d:cc:14:7d:ab:94:58:97:0e:e6:6c:77:dc:62:cb:31:2f:
         12:5b:60:a6:64:a8:39:9a:3c:e7:2d:b5:23:26:0e:49:a5:c5:
         09:b0:a3:0a:f7:f9:43:55:b6:9e:a5:9a:49:b8:fb:1c:db:70:
         45:ae:bf:33:21:f6:82:92:91:92:c3:24:a9:14:8a:a2:95:06:
         8d:f3:ab:0a:3a:5b:da:cf:b3:55:5b:a6:73:90:f4:4b:f7:62:
         96:e4:43:91:e2:57:4c:c9:ed:78:06:5a:99:7d:9d:11:6c:68:
         82:59:d4:21:3e:bb:d5:4c:9f:e4:30:90:08:96:31:1d:84:c1:
         9c:e2:de:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:09:56 2026 by rpki-client