Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/29a3d8-fb46-40c5-8f36-371b16e51790/1/MTie9MqM5oHWuD4L5MiGo6dFYCg.mft
File:                     MTie9MqM5oHWuD4L5MiGo6dFYCg.mft (raw, json)
Hash identifier:          P0W9uG8jvSqsv7hhEB7HmD9vy5rorvrwDJSAHy3XNbE=
Subject key identifier:   E6:BA:3C:3E:9F:84:C9:A4:1E:B8:E6:07:67:09:81:72:B5:F4:E6:CE
Authority key identifier: 31:38:9E:F4:CA:8C:E6:81:D6:B8:3E:0B:E4:C8:86:A3:A7:45:60:28
Certificate issuer:       /CN=31389ef4ca8ce681d6b83e0be4c886a3a7456028
Certificate serial:       01A11FE55596937217D416EE67892F3FDB37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MTie9MqM5oHWuD4L5MiGo6dFYCg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/29a3d8-fb46-40c5-8f36-371b16e51790/1/MTie9MqM5oHWuD4L5MiGo6dFYCg.mft
Manifest number:          03FC
Signing time:             Fri 09 Oct 2026 09:01:25 +0000
Manifest this update:     Fri 09 Oct 2026 09:01:25 +0000
Manifest next update:     Sat 10 Oct 2026 09:01:25 +0000
Files and hashes:         1: MTie9MqM5oHWuD4L5MiGo6dFYCg.crl (hash: g8uhFL4yCRzU3zs6QH/6GrQdj8yOD3wWbD2/dVtBh5k=)
                          2: dAvQklqaFgS7nuGcHDCAEFSzz7s.roa (hash: B5/JGeN0RNoqJRO7nGvJRd8pXhY+SDcSmh+pqHEkxm0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/29a3d8-fb46-40c5-8f36-371b16e51790/1/MTie9MqM5oHWuD4L5MiGo6dFYCg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/29a3d8-fb46-40c5-8f36-371b16e51790/1/MTie9MqM5oHWuD4L5MiGo6dFYCg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MTie9MqM5oHWuD4L5MiGo6dFYCg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Oct 2026 08:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:1f:e5:55:96:93:72:17:d4:16:ee:67:89:2f:3f:db:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31389ef4ca8ce681d6b83e0be4c886a3a7456028
        Validity
            Not Before: Oct  9 09:01:25 2026 GMT
            Not After : Oct 10 09:01:25 2026 GMT
        Subject: CN=e6ba3c3e9f84c9a41eb8e60767098172b5f4e6ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:7c:ed:af:7c:df:a5:b1:8d:25:e0:8e:bc:c3:
                    0b:eb:74:98:58:cf:c4:12:d9:08:e5:a1:30:fd:03:
                    70:73:c7:cd:c4:98:9b:19:20:48:7a:42:91:d8:c5:
                    1a:bc:a5:29:90:4d:08:8d:e6:a8:72:a5:1d:98:06:
                    eb:77:8a:ec:8b:f4:c9:44:f8:aa:89:a3:a9:6f:4b:
                    a3:1f:e7:87:53:02:6a:fc:8d:60:1c:bf:9c:06:0f:
                    ab:78:4a:6d:a7:26:ef:5d:9d:41:a9:0a:ae:5d:5b:
                    ca:e7:42:b5:a1:ca:28:18:02:9d:c1:8a:ba:1b:35:
                    88:70:d8:8a:65:4b:fd:f9:5a:ab:bd:9d:bb:72:b1:
                    9d:d2:27:f1:51:a1:44:a4:b3:d4:f5:a3:2c:f9:14:
                    c2:39:8e:5e:2e:21:8f:a8:b9:f3:f6:4e:7b:c8:4a:
                    ac:f1:b2:5e:7c:b5:87:de:01:3e:63:45:db:17:df:
                    61:5f:02:22:a4:cd:97:b6:b8:34:68:f9:82:ce:10:
                    9a:6d:f4:31:f9:aa:ad:dc:20:15:54:90:9c:e5:bd:
                    57:e8:72:b7:6e:50:22:eb:eb:2c:87:01:08:d1:92:
                    8a:22:9c:3c:e2:70:d4:94:73:dc:f9:b4:e9:8b:f5:
                    cb:06:dd:a8:c6:84:c1:a2:a5:80:6e:25:59:f6:48:
                    b4:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:BA:3C:3E:9F:84:C9:A4:1E:B8:E6:07:67:09:81:72:B5:F4:E6:CE
            X509v3 Authority Key Identifier:
                keyid:31:38:9E:F4:CA:8C:E6:81:D6:B8:3E:0B:E4:C8:86:A3:A7:45:60:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MTie9MqM5oHWuD4L5MiGo6dFYCg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/29a3d8-fb46-40c5-8f36-371b16e51790/1/MTie9MqM5oHWuD4L5MiGo6dFYCg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/29a3d8-fb46-40c5-8f36-371b16e51790/1/MTie9MqM5oHWuD4L5MiGo6dFYCg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:74:d3:2c:56:92:03:64:8e:38:68:29:eb:fe:87:58:5a:37:
         52:4f:05:3a:34:13:20:1d:57:11:d3:8f:03:c5:d1:9e:b8:f8:
         c4:02:12:58:3f:54:09:04:95:a1:a2:f9:38:69:26:c1:a5:bc:
         2e:f2:50:8a:56:00:a6:5a:4a:cb:3c:f1:a3:ef:e1:fb:dc:dd:
         6d:1e:25:fa:cf:08:e0:c8:b4:41:21:fa:e5:f3:43:bb:90:0d:
         25:99:5d:a1:b6:c2:ef:68:f8:21:48:8e:28:9f:9c:70:b8:d7:
         d8:37:aa:7b:a4:e6:e0:89:36:6f:28:1f:63:21:be:b4:7f:e7:
         62:58:19:2c:e5:a0:b7:51:8b:c3:3a:f6:96:9c:d4:c9:b3:55:
         3f:15:e4:d3:55:72:55:ac:7f:2f:1f:1d:1e:eb:11:d4:1f:3a:
         66:dd:5b:78:01:5e:f5:bd:d7:95:10:ba:99:04:ee:c8:67:81:
         d1:a6:48:0b:65:88:9a:fb:9b:25:44:15:4a:d3:f4:31:51:52:
         32:83:19:ab:03:38:c8:e9:4c:23:e7:2d:58:a2:9b:9a:0a:f4:
         d2:64:f7:09:5c:2c:23:78:b1:2d:e3:d8:a0:2e:65:4d:b2:71:
         86:7c:52:03:bf:b7:cb:94:d3:11:4b:f5:af:c6:94:8d:30:f9:
         53:a0:77:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 13:06:42 2026 by rpki-client