Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/ccdc8f-285d-43b6-8def-4b39fcabc371/1/MBYKH8YoL1eCp6in6g7SBrlEQSM.mft
File:                     MBYKH8YoL1eCp6in6g7SBrlEQSM.mft (raw, json)
Hash identifier:          rw0PMZWQW4Fk5K0XqZrGmw88oPF1fEIIRsx1EygN1Dw=
Subject key identifier:   22:ED:C6:2D:41:DC:96:9A:DB:AA:92:CA:D9:08:EB:19:84:F8:A4:0A
Authority key identifier: 30:16:0A:1F:C6:28:2F:57:82:A7:A8:A7:EA:0E:D2:06:B9:44:41:23
Certificate issuer:       /CN=30160a1fc6282f5782a7a8a7ea0ed206b9444123
Certificate serial:       01A113056324C53ACC37057FD2F89F12DCCE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MBYKH8YoL1eCp6in6g7SBrlEQSM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/ccdc8f-285d-43b6-8def-4b39fcabc371/1/MBYKH8YoL1eCp6in6g7SBrlEQSM.mft
Manifest number:          09DE
Signing time:             Tue 06 Oct 2026 21:01:22 +0000
Manifest this update:     Tue 06 Oct 2026 21:01:22 +0000
Manifest next update:     Wed 07 Oct 2026 21:01:22 +0000
Files and hashes:         1: 1SJhyocRudC4i3a4wpxvnXhK1TE.roa (hash: Q8DohD/O4S8CVYT18myTFMGAt4L6+jeYMfQ4zRODCWc=)
                          2: MBYKH8YoL1eCp6in6g7SBrlEQSM.crl (hash: uwGTWCng+jz9oqnd8+z3IFD191S0pf8grSkMbKMVpyI=)
                          3: XpKKyExlunDnIgewiAZPtg86MrQ.roa (hash: wS0s5Zz3UFUtCAGlt2SFNPs++jwDVKFp6MczP/XrPT8=)
                          4: yYnjMSBD0N1GdUhW8b3gkCvcBTY.roa (hash: UXD6Z2ZYC62V3GCh/SczjWuD8By0eruoWG1wzac/bwU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/ccdc8f-285d-43b6-8def-4b39fcabc371/1/MBYKH8YoL1eCp6in6g7SBrlEQSM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/ccdc8f-285d-43b6-8def-4b39fcabc371/1/MBYKH8YoL1eCp6in6g7SBrlEQSM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MBYKH8YoL1eCp6in6g7SBrlEQSM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Oct 2026 21:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:13:05:63:24:c5:3a:cc:37:05:7f:d2:f8:9f:12:dc:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30160a1fc6282f5782a7a8a7ea0ed206b9444123
        Validity
            Not Before: Oct  6 21:01:22 2026 GMT
            Not After : Oct  7 21:01:22 2026 GMT
        Subject: CN=22edc62d41dc969adbaa92cad908eb1984f8a40a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fd:cd:7b:77:71:35:e4:51:a8:42:1d:2a:f2:
                    20:de:c8:e4:2a:50:99:e1:41:73:2b:66:25:34:fa:
                    bb:bf:fc:12:09:24:fc:f0:c3:25:36:b2:0f:fa:99:
                    cd:74:0b:c0:bf:82:06:fe:a8:0b:42:90:40:e5:3b:
                    b6:8d:b9:9a:1f:d7:57:d0:eb:bf:b3:a5:ec:f0:0b:
                    aa:bf:b6:ab:24:74:fd:8f:22:c1:65:31:5f:13:f0:
                    b7:eb:49:1f:a0:c2:4f:15:1f:68:ab:f4:d2:96:6f:
                    72:c1:21:d0:1d:8f:36:9d:0e:4e:7b:c8:37:73:e7:
                    bb:29:59:79:d4:eb:ff:34:3b:b8:e3:f7:85:a4:bb:
                    6f:c3:24:8e:00:c7:a2:72:f0:3a:87:47:03:12:c0:
                    7a:b1:d8:f6:d0:6e:16:0b:de:2a:ef:1d:3a:47:ab:
                    83:e7:5a:f4:f4:43:dc:fc:72:64:e2:97:e0:a7:84:
                    22:d3:43:a8:43:6c:52:06:db:fa:c9:a4:68:a7:2f:
                    96:a8:87:9e:d1:3a:e2:88:d2:47:63:cb:5f:9e:3b:
                    ab:89:27:99:48:e5:42:ed:1c:96:f9:e0:e9:44:b4:
                    fe:97:e7:46:61:df:6b:1c:40:6c:0c:39:96:44:43:
                    09:62:e3:7f:d0:41:bb:26:a6:c8:e1:50:1c:72:85:
                    27:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:ED:C6:2D:41:DC:96:9A:DB:AA:92:CA:D9:08:EB:19:84:F8:A4:0A
            X509v3 Authority Key Identifier:
                keyid:30:16:0A:1F:C6:28:2F:57:82:A7:A8:A7:EA:0E:D2:06:B9:44:41:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBYKH8YoL1eCp6in6g7SBrlEQSM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/ccdc8f-285d-43b6-8def-4b39fcabc371/1/MBYKH8YoL1eCp6in6g7SBrlEQSM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/ccdc8f-285d-43b6-8def-4b39fcabc371/1/MBYKH8YoL1eCp6in6g7SBrlEQSM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:b9:b7:dc:0d:06:cc:ae:31:0a:65:fe:98:0d:e3:e3:72:e3:
         3d:fc:09:ea:c1:d5:2a:39:c3:22:8a:0e:5d:81:a0:2b:5d:20:
         1b:69:5a:c0:27:e4:90:63:e2:dc:b7:a4:fc:a3:a3:cb:be:b7:
         21:88:71:d5:4a:18:60:dd:6d:67:a9:df:dc:15:42:44:f3:23:
         22:4b:4d:9c:e4:54:47:27:19:25:e9:a6:0e:22:6d:0a:02:58:
         4c:5a:ea:38:1d:9e:00:ac:a8:de:28:b2:8e:a0:40:c6:03:3d:
         eb:c9:aa:09:73:36:71:a0:29:69:f2:0f:fa:a9:15:43:6a:4d:
         a3:8a:0d:f7:a6:8f:44:13:61:24:83:13:cc:21:e2:8b:40:57:
         fb:9f:73:ba:85:b2:ed:dc:c1:21:6c:0a:76:3e:b2:16:75:8e:
         3d:9e:f7:af:9f:06:bd:8f:da:00:41:34:6b:03:7f:d2:f0:f1:
         d4:b0:9c:fd:53:79:8b:89:da:25:6a:d0:3f:6a:77:30:c5:5b:
         2e:05:15:a3:70:8f:4a:8b:5a:4a:da:bd:dd:07:31:0f:43:cb:
         59:1d:21:b7:a2:a8:39:3a:be:e3:21:ff:10:88:04:1e:10:77:
         3a:9e:2b:56:c2:03:11:d7:7e:0a:14:6d:7b:4d:ba:40:5f:db:
         a2:83:00:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 08:02:36 2026 by rpki-client