Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/4d05cf-63b0-46af-9e2c-206e82336cde/1/mSPRBAwF8Jn7T-20mLtKFIMnmPo.mft
File:                     mSPRBAwF8Jn7T-20mLtKFIMnmPo.mft (raw, json)
Hash identifier:          tGwserCpPjNB7ftKI9OHgKUHLEab0SMFuYngB4hyutA=
Subject key identifier:   0F:08:82:F8:3F:1D:D1:46:B6:7D:0B:0F:03:EF:D6:80:F9:63:A8:51
Authority key identifier: 99:23:D1:04:0C:05:F0:99:FB:4F:ED:B4:98:BB:4A:14:83:27:98:FA
Certificate issuer:       /CN=9923d1040c05f099fb4fedb498bb4a14832798fa
Certificate serial:       01A0295835CF724E9E03465637C4DACEE3F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mSPRBAwF8Jn7T-20mLtKFIMnmPo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/4d05cf-63b0-46af-9e2c-206e82336cde/1/mSPRBAwF8Jn7T-20mLtKFIMnmPo.mft
Manifest number:          0911
Signing time:             Sat 22 Aug 2026 12:00:41 +0000
Manifest this update:     Sat 22 Aug 2026 12:00:41 +0000
Manifest next update:     Sun 23 Aug 2026 12:00:41 +0000
Files and hashes:         1: 1-in7LMhFpQ3SRGa-Iv12w-L9osE.roa (hash: p5UNy6JSWBgEDxhzbnTAtJTc0CoC4BoiXS2WVhGNjLY=)
                          2: mSPRBAwF8Jn7T-20mLtKFIMnmPo.crl (hash: gJGZL+DAdeYnyDmZhd5n0rg5LP3NQ7Avx+5LpJ964DQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/4d05cf-63b0-46af-9e2c-206e82336cde/1/mSPRBAwF8Jn7T-20mLtKFIMnmPo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/4d05cf-63b0-46af-9e2c-206e82336cde/1/mSPRBAwF8Jn7T-20mLtKFIMnmPo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mSPRBAwF8Jn7T-20mLtKFIMnmPo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Aug 2026 12:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:29:58:35:cf:72:4e:9e:03:46:56:37:c4:da:ce:e3:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9923d1040c05f099fb4fedb498bb4a14832798fa
        Validity
            Not Before: Aug 22 12:00:41 2026 GMT
            Not After : Aug 23 12:00:41 2026 GMT
        Subject: CN=0f0882f83f1dd146b67d0b0f03efd680f963a851
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:98:69:85:c5:c0:fe:7c:9d:a8:78:78:59:57:
                    08:bc:a7:19:13:3b:8a:ab:c4:01:c2:29:d2:18:ca:
                    46:f0:ac:3e:88:d5:66:06:6a:be:b8:a0:64:3e:3c:
                    1d:bf:ec:4e:2e:e4:8c:67:88:6e:77:25:6c:bc:c1:
                    37:54:78:f5:ce:15:db:63:2b:7b:df:13:c5:a8:a6:
                    a1:d4:51:2e:ef:af:d5:ee:17:2b:e2:d4:36:09:d5:
                    66:62:36:79:f2:39:2b:25:d9:68:c4:ce:0c:ac:a1:
                    f6:64:af:f5:7c:8e:e3:d3:49:57:fe:27:05:1e:0d:
                    d5:7c:cd:ed:19:34:44:03:3b:f4:d3:dc:2a:66:0b:
                    fc:ee:0f:d6:16:9e:41:20:18:1b:ed:f4:5d:38:da:
                    a9:bb:54:4b:a0:cb:ef:4c:92:17:a9:d6:cd:0d:e8:
                    04:26:68:10:26:30:c0:36:24:59:1f:63:fc:08:f3:
                    11:f1:a4:2e:5a:5b:b7:b9:77:9b:19:34:e5:30:89:
                    e0:1b:b5:1c:15:3c:1f:ab:48:42:dc:75:2e:27:2a:
                    ea:9e:67:5b:b3:40:be:54:34:75:5a:6d:45:60:d8:
                    dd:f8:ec:cb:69:c3:11:dd:2a:ed:16:93:ce:0c:90:
                    25:60:cd:22:58:e7:87:cb:01:ad:50:45:ab:9d:d0:
                    f1:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:08:82:F8:3F:1D:D1:46:B6:7D:0B:0F:03:EF:D6:80:F9:63:A8:51
            X509v3 Authority Key Identifier:
                keyid:99:23:D1:04:0C:05:F0:99:FB:4F:ED:B4:98:BB:4A:14:83:27:98:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSPRBAwF8Jn7T-20mLtKFIMnmPo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/4d05cf-63b0-46af-9e2c-206e82336cde/1/mSPRBAwF8Jn7T-20mLtKFIMnmPo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/4d05cf-63b0-46af-9e2c-206e82336cde/1/mSPRBAwF8Jn7T-20mLtKFIMnmPo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:13:24:2e:1a:39:a3:00:66:3b:d0:ae:1d:00:76:10:fc:c5:
         0c:ae:10:0c:e2:1d:e4:73:fa:0f:cb:86:93:39:79:0c:5f:6e:
         96:f0:91:ec:28:fb:8f:d7:23:64:28:c5:2f:75:7c:aa:a4:0d:
         c5:8b:af:e3:a2:c1:fd:db:09:b1:62:47:94:52:03:e7:8d:20:
         57:03:49:e7:60:84:2d:5d:cb:a3:aa:40:17:c2:6a:03:d0:e3:
         d1:26:ab:3b:90:78:8e:9b:1b:3e:11:05:15:fa:aa:0a:74:21:
         84:c2:c7:e1:27:6d:16:64:23:15:fa:b1:60:9e:11:42:8d:be:
         88:13:3f:ae:61:b7:e1:70:ef:74:32:d9:e0:10:08:d4:8f:75:
         8a:6e:8d:5d:28:b8:c7:2c:50:41:6a:f0:cf:9d:08:59:01:df:
         a8:b6:eb:02:4b:7e:f1:5a:2c:d8:01:e8:ba:33:47:f0:0a:85:
         a9:b9:94:31:bd:61:c8:7d:62:ef:89:2b:21:b8:7c:26:12:59:
         9e:8a:e9:23:33:b0:90:da:cc:30:4b:24:f1:75:57:a6:fd:95:
         96:e5:ac:0c:c3:23:7c:a8:8c:36:a8:ca:3e:9d:5c:8a:da:36:
         da:8c:20:68:6d:a0:d5:f9:34:07:05:b6:44:d8:40:00:07:92:
         43:5e:49:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 21:08:30 2026 by rpki-client