Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/fca6c4-e2db-4b9b-ac31-73d8db4ed7db/1/mjSNg6pjwPgc5xlfhmnjt4bGAqE.mft
File:                     mjSNg6pjwPgc5xlfhmnjt4bGAqE.mft (raw, json)
Hash identifier:          Ge5QYKySxYoJdCA8ZAn/8vraQzHKjeOyAddJZivk/Kc=
Subject key identifier:   A7:BF:A6:0D:F0:AB:C9:EB:5B:90:FD:ED:4A:56:6A:5A:EE:52:37:91
Authority key identifier: 9A:34:8D:83:AA:63:C0:F8:1C:E7:19:5F:86:69:E3:B7:86:C6:02:A1
Certificate issuer:       /CN=9a348d83aa63c0f81ce7195f8669e3b786c602a1
Certificate serial:       01A17514C8331849AE8793B165A0546C626A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mjSNg6pjwPgc5xlfhmnjt4bGAqE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/fca6c4-e2db-4b9b-ac31-73d8db4ed7db/1/mjSNg6pjwPgc5xlfhmnjt4bGAqE.mft
Manifest number:          02C8
Signing time:             Sun 25 Oct 2026 22:00:58 +0000
Manifest this update:     Sun 25 Oct 2026 22:00:58 +0000
Manifest next update:     Mon 26 Oct 2026 22:00:58 +0000
Files and hashes:         1: 1-OsNQ-5vJPgOeI_eWcWRJz9U2HU.roa (hash: w6u2qov7OdVcpuJ2RAOrKnYaPXgeHeSBBHrfoYU/V+I=)
                          2: mjSNg6pjwPgc5xlfhmnjt4bGAqE.crl (hash: xC/klzVq8eVnM6ke9076PixBv1pVOJcN9BRHsMCJiOY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/fca6c4-e2db-4b9b-ac31-73d8db4ed7db/1/mjSNg6pjwPgc5xlfhmnjt4bGAqE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/fca6c4-e2db-4b9b-ac31-73d8db4ed7db/1/mjSNg6pjwPgc5xlfhmnjt4bGAqE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mjSNg6pjwPgc5xlfhmnjt4bGAqE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Oct 2026 17:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:75:14:c8:33:18:49:ae:87:93:b1:65:a0:54:6c:62:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a348d83aa63c0f81ce7195f8669e3b786c602a1
        Validity
            Not Before: Oct 25 22:00:58 2026 GMT
            Not After : Oct 26 22:00:58 2026 GMT
        Subject: CN=a7bfa60df0abc9eb5b90fded4a566a5aee523791
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b9:76:e2:d6:95:30:ab:29:38:12:96:a8:9d:
                    08:e5:a7:07:65:b1:17:13:80:5e:2e:81:c8:cc:c4:
                    87:76:6b:48:db:89:b0:70:3d:ef:8b:55:1d:6e:9b:
                    b3:c0:d3:1a:cb:de:43:e1:80:c5:45:3e:55:15:75:
                    ff:d1:58:99:0e:ed:0d:b8:17:f4:a6:29:2f:1b:85:
                    df:a9:21:e0:b5:5c:5b:64:e3:29:3b:c1:fd:40:9c:
                    b3:1f:08:a4:9c:e4:3b:48:81:94:1f:02:2d:f5:01:
                    4e:88:f0:9f:fe:79:3a:c6:00:9d:02:c4:49:e7:89:
                    97:f2:0b:0e:26:bd:d4:dd:0e:80:53:9f:08:93:e7:
                    d3:66:0f:23:b7:b7:2d:db:4e:77:3b:b8:e6:1a:69:
                    33:3e:3b:73:cd:e7:40:4f:9d:b2:4b:53:42:39:3e:
                    56:f9:b5:b0:66:46:e9:95:0b:6e:0d:6a:f8:16:cf:
                    46:3f:d1:42:55:08:35:41:fd:66:be:a2:e6:7d:37:
                    cb:75:9e:1a:fe:52:2b:21:64:8a:0e:b1:52:43:a2:
                    f5:10:b0:d4:78:db:73:e9:32:10:89:52:9a:7c:a3:
                    f0:20:e4:60:5e:cf:bf:da:e4:32:06:8a:b1:d7:5f:
                    6d:68:4f:c2:a0:50:e9:bc:3b:69:57:19:3e:e5:59:
                    6f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:BF:A6:0D:F0:AB:C9:EB:5B:90:FD:ED:4A:56:6A:5A:EE:52:37:91
            X509v3 Authority Key Identifier:
                keyid:9A:34:8D:83:AA:63:C0:F8:1C:E7:19:5F:86:69:E3:B7:86:C6:02:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mjSNg6pjwPgc5xlfhmnjt4bGAqE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/fca6c4-e2db-4b9b-ac31-73d8db4ed7db/1/mjSNg6pjwPgc5xlfhmnjt4bGAqE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/fca6c4-e2db-4b9b-ac31-73d8db4ed7db/1/mjSNg6pjwPgc5xlfhmnjt4bGAqE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:f5:1b:2e:a4:46:10:ed:7b:36:5d:20:5e:48:68:a1:83:98:
         ba:36:ec:e0:7f:e2:c4:85:29:99:0e:80:33:e6:e5:42:41:54:
         9e:c1:7a:65:49:ca:ac:34:be:a7:16:68:25:88:25:13:7f:2e:
         dc:43:71:0f:ed:11:3c:32:2b:4b:9f:33:76:e6:fb:83:ad:f9:
         58:95:d6:93:e8:9a:34:2a:94:3c:b2:c5:92:a2:61:65:13:d8:
         83:b5:42:d6:ba:38:0d:9d:52:3f:d5:fe:7b:ce:1f:b6:5c:b6:
         5d:36:6e:5b:e7:0b:81:f6:49:78:69:8c:f0:74:62:5d:64:52:
         54:98:f9:19:36:ec:08:eb:9f:bf:17:90:e8:02:37:90:95:71:
         2c:ce:47:b7:02:23:3a:e7:05:fe:4a:68:29:e2:9c:c5:d6:3d:
         59:82:78:5d:01:28:5c:d7:91:42:4b:3f:aa:3a:02:8e:ff:a0:
         b2:b1:e5:6b:4a:50:03:f1:1c:aa:2e:d4:e6:ae:a0:82:9f:58:
         59:3d:db:e0:27:be:3d:f8:8b:57:bb:19:c2:b7:8e:28:3e:a5:
         c4:3a:7f:95:85:b8:29:70:56:af:41:4c:ab:ac:ba:21:d5:6c:
         d4:40:be:3d:50:aa:3c:ab:50:1f:07:bf:5e:bb:69:d1:8e:82:
         7e:02:20:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 04:01:05 2026 by rpki-client