Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/82/c937be-f5b1-43c6-9587-4e06621bd98a/1/mpLTBwi51OjHwoyX-AN8gCcUTEc.mft
File:                     mpLTBwi51OjHwoyX-AN8gCcUTEc.mft (raw, json)
Hash identifier:          kyNxAyCuJKf1tudmAZVOtzlsR5g4wZeIXUaYtfTh9yg=
Subject key identifier:   E4:A9:79:AD:F6:FB:A4:C7:72:42:0F:EF:A5:75:E1:13:5E:FC:5A:15
Authority key identifier: 9A:92:D3:07:08:B9:D4:E8:C7:C2:8C:97:F8:03:7C:80:27:14:4C:47
Certificate issuer:       /CN=9a92d30708b9d4e8c7c28c97f8037c8027144c47
Certificate serial:       01A18374EB5D029A07D799A4746501BF035B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mpLTBwi51OjHwoyX-AN8gCcUTEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/c937be-f5b1-43c6-9587-4e06621bd98a/1/mpLTBwi51OjHwoyX-AN8gCcUTEc.mft
Manifest number:          1ACF
Signing time:             Wed 28 Oct 2026 17:00:39 +0000
Manifest this update:     Wed 28 Oct 2026 17:00:39 +0000
Manifest next update:     Thu 29 Oct 2026 17:00:39 +0000
Files and hashes:         1: _2TkYZ6m9S4gzCbJ7FSAH-2Y0_4.roa (hash: 29lPquUVvEOM2I/tYNxFjViie9vfaQqvcMnqW/106ho=)
                          2: mpLTBwi51OjHwoyX-AN8gCcUTEc.crl (hash: PUq1YUERzX5PCzWdVAieiocDrRXLqDQ3B4b4/F6gzCM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/c937be-f5b1-43c6-9587-4e06621bd98a/1/mpLTBwi51OjHwoyX-AN8gCcUTEc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/c937be-f5b1-43c6-9587-4e06621bd98a/1/mpLTBwi51OjHwoyX-AN8gCcUTEc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mpLTBwi51OjHwoyX-AN8gCcUTEc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 17:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:83:74:eb:5d:02:9a:07:d7:99:a4:74:65:01:bf:03:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a92d30708b9d4e8c7c28c97f8037c8027144c47
        Validity
            Not Before: Oct 28 17:00:39 2026 GMT
            Not After : Oct 29 17:00:39 2026 GMT
        Subject: CN=e4a979adf6fba4c772420fefa575e1135efc5a15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d4:36:0c:1b:b3:1c:af:75:5a:18:56:e6:53:
                    ba:b1:0f:a1:36:67:73:f8:ae:1d:41:4d:93:84:f4:
                    5e:e1:3a:26:95:77:8c:d5:40:05:59:ea:1a:6d:21:
                    2f:41:ef:96:88:e3:a7:d3:7b:4f:1c:6d:bd:92:3c:
                    cb:d7:a5:6c:37:a4:ac:a1:e8:fb:64:a7:26:c2:01:
                    f0:ae:7b:17:26:f8:5b:a6:54:d9:77:52:91:e4:d0:
                    c2:b5:3f:be:51:08:c7:51:af:24:73:24:1e:db:78:
                    72:7d:3b:f0:56:33:13:73:6d:76:47:46:e2:c2:ea:
                    8f:d0:47:df:9f:57:08:c8:a4:4b:a5:7e:d7:25:15:
                    36:7c:5a:06:20:16:e8:0d:33:07:be:fa:7a:19:61:
                    8e:87:9d:23:8d:28:0e:90:55:9b:55:3b:3b:01:be:
                    1b:b0:95:4e:b5:a7:37:7d:da:51:6a:b9:fb:2e:e2:
                    31:19:f3:4a:1f:91:60:e7:1d:f3:7d:97:4d:2e:5b:
                    e1:eb:0e:b5:78:ac:5a:b1:2e:d8:a3:bf:45:bf:84:
                    31:c8:20:cc:cc:96:8a:b7:58:79:53:17:c7:8b:03:
                    70:0b:48:c2:c4:5d:c6:6d:63:44:a3:8a:06:df:bb:
                    7d:1f:77:63:eb:8a:8f:69:61:18:2d:03:40:62:1b:
                    78:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:A9:79:AD:F6:FB:A4:C7:72:42:0F:EF:A5:75:E1:13:5E:FC:5A:15
            X509v3 Authority Key Identifier:
                keyid:9A:92:D3:07:08:B9:D4:E8:C7:C2:8C:97:F8:03:7C:80:27:14:4C:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpLTBwi51OjHwoyX-AN8gCcUTEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c937be-f5b1-43c6-9587-4e06621bd98a/1/mpLTBwi51OjHwoyX-AN8gCcUTEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c937be-f5b1-43c6-9587-4e06621bd98a/1/mpLTBwi51OjHwoyX-AN8gCcUTEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:57:fe:a9:ea:49:ef:56:e3:b9:00:c7:ed:70:07:88:63:9e:
         48:97:67:d6:dd:9d:ad:3a:78:91:15:d4:26:9d:b0:f7:35:9d:
         a4:6a:9f:75:9b:d6:7d:00:6c:e4:1f:a4:fe:60:d1:23:93:8e:
         33:e1:96:4b:0e:0e:c9:16:b9:5c:bd:8e:79:b8:48:ff:95:dc:
         e5:55:84:c8:29:76:58:6e:ba:ea:18:54:e7:dc:ad:5a:d6:f3:
         20:1f:86:58:31:b0:c0:45:ce:10:21:c2:a6:c0:33:16:c8:cb:
         4e:e4:04:1a:73:a5:65:ee:cc:5a:58:91:5f:35:71:b9:7f:e2:
         5f:6a:c5:09:38:09:81:3a:fe:36:86:50:ca:97:fb:47:d1:b2:
         38:b3:67:2c:a7:aa:8e:66:42:7b:0c:2b:d1:d6:7a:4b:d9:a4:
         7b:89:0a:3d:35:8d:aa:f6:e2:26:8d:36:68:67:d6:ad:29:b0:
         ec:1f:ed:23:26:94:fa:32:cd:38:be:5e:29:8f:d8:37:8e:9e:
         f9:46:97:3b:66:21:b7:ee:4b:be:fc:e0:6e:df:2b:af:2e:c5:
         d0:fa:f6:fb:c2:90:b8:0b:1b:9f:07:0a:b3:66:f0:49:c0:55:
         e1:91:19:5e:08:61:45:0c:fc:f4:f6:f8:92:23:7a:91:c8:cd:
         d7:97:c4:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 01:21:10 2026 by rpki-client