Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/b0ab23-7455-4ea0-a1e3-132761beaa10/1/MnBggp7MaE-ln4VaoKSEAbwX8tE.mft
File:                     MnBggp7MaE-ln4VaoKSEAbwX8tE.mft (raw, json)
Hash identifier:          ACD4REuNctYzR0+tWyagNE6Q86QqzjbbkP2jNLcsdbw=
Subject key identifier:   1F:F9:09:AA:9D:56:A8:6F:B0:F6:E4:44:BB:6D:3A:B0:A7:D6:EC:9C
Authority key identifier: 32:70:60:82:9E:CC:68:4F:A5:9F:85:5A:A0:A4:84:01:BC:17:F2:D1
Certificate issuer:       /CN=327060829ecc684fa59f855aa0a48401bc17f2d1
Certificate serial:       01A189094F25B632BEC943C9099C1E2AEE06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MnBggp7MaE-ln4VaoKSEAbwX8tE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/b0ab23-7455-4ea0-a1e3-132761beaa10/1/MnBggp7MaE-ln4VaoKSEAbwX8tE.mft
Manifest number:          0A35
Signing time:             Thu 29 Oct 2026 19:00:50 +0000
Manifest this update:     Thu 29 Oct 2026 19:00:50 +0000
Manifest next update:     Fri 30 Oct 2026 19:00:50 +0000
Files and hashes:         1: MnBggp7MaE-ln4VaoKSEAbwX8tE.crl (hash: GHDr4vjEhXLrbzNfWKAqd+PeL2gL8QM3r752FzKAoaE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/b0ab23-7455-4ea0-a1e3-132761beaa10/1/MnBggp7MaE-ln4VaoKSEAbwX8tE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/b0ab23-7455-4ea0-a1e3-132761beaa10/1/MnBggp7MaE-ln4VaoKSEAbwX8tE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MnBggp7MaE-ln4VaoKSEAbwX8tE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 30 Oct 2026 19:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:89:09:4f:25:b6:32:be:c9:43:c9:09:9c:1e:2a:ee:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=327060829ecc684fa59f855aa0a48401bc17f2d1
        Validity
            Not Before: Oct 29 19:00:50 2026 GMT
            Not After : Oct 30 19:00:50 2026 GMT
        Subject: CN=1ff909aa9d56a86fb0f6e444bb6d3ab0a7d6ec9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:42:14:8e:76:33:c6:2b:9b:28:13:72:a7:da:
                    3b:64:82:c1:9c:01:64:c0:78:c8:35:bd:f0:c6:97:
                    a0:3d:4e:d5:ef:8b:02:7e:63:12:1c:0f:d3:b6:d7:
                    6b:cd:17:ba:65:4c:37:44:71:06:29:43:9e:19:21:
                    8e:14:a1:e8:74:f6:f9:d5:b0:6b:dd:c0:54:46:c6:
                    81:96:d8:32:f1:a2:2b:f9:70:3f:b2:d6:7d:32:67:
                    96:00:bf:dc:8e:14:7f:6f:eb:e1:d6:bf:77:d6:00:
                    eb:c3:b5:ce:cc:f6:2c:9c:f3:14:4d:32:70:09:23:
                    0c:65:04:60:89:e5:17:ba:0f:77:9d:e3:13:22:66:
                    e3:01:ec:84:75:4d:7f:a2:b1:85:a7:e4:a9:0d:2e:
                    1f:88:4b:6c:a3:c4:49:b0:e5:cd:7b:7a:fc:e3:31:
                    36:32:47:e9:57:83:6f:8c:03:82:53:62:8f:70:07:
                    77:38:47:43:40:32:e1:d5:0a:6c:2e:2c:1c:3b:41:
                    9e:73:1d:d3:cb:a3:de:0b:86:8f:9c:81:fc:95:46:
                    c5:72:5d:57:7f:5e:51:cc:4a:b0:63:6e:a8:f2:85:
                    a3:fa:68:d2:a5:cc:a9:d1:b0:8a:20:b4:53:13:f4:
                    ba:f6:6a:7f:c9:10:71:ee:c3:6f:f6:a5:99:c0:45:
                    c1:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:F9:09:AA:9D:56:A8:6F:B0:F6:E4:44:BB:6D:3A:B0:A7:D6:EC:9C
            X509v3 Authority Key Identifier:
                keyid:32:70:60:82:9E:CC:68:4F:A5:9F:85:5A:A0:A4:84:01:BC:17:F2:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MnBggp7MaE-ln4VaoKSEAbwX8tE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b0ab23-7455-4ea0-a1e3-132761beaa10/1/MnBggp7MaE-ln4VaoKSEAbwX8tE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b0ab23-7455-4ea0-a1e3-132761beaa10/1/MnBggp7MaE-ln4VaoKSEAbwX8tE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:96:74:ed:19:f4:6f:9b:b9:24:73:43:ff:26:d1:36:0e:98:
         40:71:ae:30:e4:0a:2e:88:6b:52:03:6e:06:d9:17:0e:94:ca:
         e3:35:19:ac:19:60:8c:c2:ac:e8:d1:e8:ee:ae:f0:6b:57:30:
         35:ca:b3:78:2d:fb:1e:01:9d:ff:5e:70:81:c6:3a:17:84:20:
         13:28:55:8f:57:45:31:08:37:34:02:bf:5b:be:be:3a:e2:41:
         5f:44:4d:f4:37:c4:6b:73:32:42:39:86:29:6f:86:78:aa:a5:
         5d:e6:07:62:d9:28:25:ae:90:ed:ee:c6:94:cf:f8:85:9b:a8:
         c4:2a:8a:31:5d:3f:21:45:08:48:d1:16:2e:ac:f7:f3:bb:a9:
         5f:db:e5:d8:2a:86:fc:c8:3a:a8:d3:e8:01:1b:4f:5a:c0:ce:
         35:01:cd:f4:aa:ee:98:d1:a7:d3:5f:3d:ae:51:62:81:57:32:
         1a:1d:80:dd:71:3e:7e:c0:43:fa:9c:00:be:dc:87:f6:19:a0:
         7c:18:a8:af:60:8d:ba:a6:21:39:ec:c9:fe:b0:7f:b9:6f:3a:
         e9:54:50:f6:f9:bd:39:7e:42:65:ac:c5:96:87:28:66:a8:ca:
         d2:df:f7:74:c0:ac:13:4a:5e:ef:40:92:39:99:2f:63:a4:72:
         98:78:85:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 05:13:52 2026 by rpki-client