Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.mft
File:                     mxl1igh4doFtwZNh6vHpQS3nP4Y.mft (raw, json)
Hash identifier:          QyJ2b2b9PFysQ1Z6+8R1wywKDIwXfzdd5S4yCNz7BWA=
Subject key identifier:   CF:9D:DF:04:BD:BC:30:B1:C4:4F:9A:15:57:28:E1:81:3E:EB:06:E6
Authority key identifier: 9B:19:75:8A:08:78:76:81:6D:C1:93:61:EA:F1:E9:41:2D:E7:3F:86
Certificate issuer:       /CN=9b19758a087876816dc19361eaf1e9412de73f86
Certificate serial:       01A177034156FA743B630BD4A192D20E14DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mxl1igh4doFtwZNh6vHpQS3nP4Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.mft
Manifest number:          0B78
Signing time:             Mon 26 Oct 2026 07:01:04 +0000
Manifest this update:     Mon 26 Oct 2026 07:01:04 +0000
Manifest next update:     Tue 27 Oct 2026 07:01:04 +0000
Files and hashes:         1: 6mL3LTAHEnWX958mvj_U__80Q9Y.roa (hash: ywx5JPQaT2XjkakDGh0HH3nPH7e5YehxWzpsRhHkQaI=)
                          2: _RoC_RNXE3s_SWdnfBHgPoNrU2M.roa (hash: wPRRqYY5EWMxD0w+AF1woDBkV71SkgmmKkudFef6WP0=)
                          3: _no2T5wGNnY26JGUD4kdd2oqfik.roa (hash: cAZL1uQQoGuptZEdg5D0yO2UPDl/TjYUL4Qg8BJ2wIg=)
                          4: mxl1igh4doFtwZNh6vHpQS3nP4Y.crl (hash: PzAxyKCK/7oA9N3e5PbkQijmxG5s4limMKVuJM5q4qg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mxl1igh4doFtwZNh6vHpQS3nP4Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 02:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:77:03:41:56:fa:74:3b:63:0b:d4:a1:92:d2:0e:14:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b19758a087876816dc19361eaf1e9412de73f86
        Validity
            Not Before: Oct 26 07:01:04 2026 GMT
            Not After : Oct 27 07:01:04 2026 GMT
        Subject: CN=cf9ddf04bdbc30b1c44f9a155728e1813eeb06e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:9b:a3:6c:a8:a7:dc:59:55:1a:e7:2c:ce:14:
                    74:7a:81:44:06:4c:61:17:4c:59:5a:e4:c8:83:af:
                    b5:86:98:3f:1e:10:d2:86:0a:37:11:91:29:de:9e:
                    f4:01:24:1b:ec:f7:53:4f:9d:15:c6:92:5f:af:69:
                    47:74:3d:52:d0:24:d5:17:ce:e9:ca:13:20:58:94:
                    45:9d:2a:dc:0e:54:fe:ed:64:1f:4e:97:2f:2e:47:
                    54:fa:6d:81:0c:c6:b0:1a:52:f4:a2:a1:f4:f5:1c:
                    31:12:8f:9e:c1:ad:eb:08:e7:47:6f:4a:08:83:4e:
                    83:33:b3:33:3f:5c:9d:70:46:bc:1b:c3:0d:c2:e9:
                    b1:58:7f:1b:e9:ca:58:0c:f8:46:8f:d3:a6:3d:9b:
                    8e:65:14:7f:d7:c4:81:e2:0b:5a:b8:3f:04:03:00:
                    33:17:b1:4c:70:9c:6d:e4:cd:0a:a5:13:f8:a9:68:
                    cf:fb:1f:59:03:01:16:37:e3:b7:27:52:34:3b:e9:
                    a8:1e:e3:6f:61:57:07:33:3d:cb:44:54:83:10:93:
                    8c:07:b4:70:6e:3a:9a:cb:36:14:13:13:fd:24:97:
                    39:78:70:a6:80:b9:de:e6:fc:c0:a6:29:c7:e6:9b:
                    3a:df:19:7e:25:89:71:a0:c1:80:5c:4b:2c:d2:a3:
                    a5:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:9D:DF:04:BD:BC:30:B1:C4:4F:9A:15:57:28:E1:81:3E:EB:06:E6
            X509v3 Authority Key Identifier:
                keyid:9B:19:75:8A:08:78:76:81:6D:C1:93:61:EA:F1:E9:41:2D:E7:3F:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mxl1igh4doFtwZNh6vHpQS3nP4Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d7:60:10:93:a3:1b:d0:96:d9:67:ee:06:e0:be:0f:31:88:f0:
         fc:ec:ae:42:0f:ce:0b:52:f5:12:cd:e9:73:23:1d:ed:7d:94:
         ec:3d:5c:b1:c3:58:0b:70:00:b8:a2:ba:12:50:fb:43:74:d5:
         74:e9:79:f8:25:bf:7c:6f:79:b2:57:6d:ee:b2:e0:45:17:fd:
         8d:fa:b2:13:4d:c2:1b:fd:7f:f7:78:ce:f2:1b:f0:36:70:f3:
         28:6c:6a:81:e9:3f:aa:e8:72:c5:cb:58:48:e3:c7:1d:32:fa:
         f5:73:d1:91:e5:40:3d:34:61:8b:0b:85:83:55:0a:d4:6c:04:
         29:03:d9:7c:0e:9e:60:eb:d5:2b:4a:b5:21:d4:20:5f:35:a0:
         7f:d2:95:7c:20:c8:7b:98:28:27:d9:58:68:42:cf:a2:01:3a:
         24:3e:71:64:db:77:f2:88:bc:94:a8:f1:b1:d8:b8:f2:bf:8f:
         43:b8:3c:2d:b2:df:a3:d1:a5:81:37:81:d5:a6:d4:51:72:2e:
         66:9b:0c:db:d1:b2:cc:2c:0f:71:2a:1e:b5:a4:62:68:02:b0:
         dd:a2:ab:be:e8:40:d1:29:a1:0e:00:00:19:33:8c:ec:c4:bc:
         54:0c:e2:a2:d5:c6:8b:78:2e:55:8c:0c:3d:a6:3c:32:02:69:
         f3:82:00:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 14:01:51 2026 by rpki-client