Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/MVlVxK8-sajTQAqGYl42XCYpjWo.mft
File:                     MVlVxK8-sajTQAqGYl42XCYpjWo.mft (raw, json)
Hash identifier:          fae7fSBWFe+e8vnqn1oVMIsLy6OjdlA8lX6SOli5WXs=
Subject key identifier:   29:74:0A:9D:ED:9E:DE:4E:80:13:68:1E:DD:13:7B:CD:AB:F6:F4:AC
Authority key identifier: 31:59:55:C4:AF:3E:B1:A8:D3:40:0A:86:62:5E:36:5C:26:29:8D:6A
Certificate issuer:       /CN=315955c4af3eb1a8d3400a86625e365c26298d6a
Certificate serial:       01A10881894E54DF8F6BCFB9CF5094833BF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MVlVxK8-sajTQAqGYl42XCYpjWo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/MVlVxK8-sajTQAqGYl42XCYpjWo.mft
Manifest number:          1834
Signing time:             Sun 04 Oct 2026 20:01:09 +0000
Manifest this update:     Sun 04 Oct 2026 20:01:09 +0000
Manifest next update:     Mon 05 Oct 2026 20:01:09 +0000
Files and hashes:         1: 1-QUW9w6-dsMc8rYK0RgKcw42gQ4.roa (hash: aMY2zgtMuEdRrJYkfcaWiXSQDQZTWen1TDtInrZfVY0=)
                          2: 34oLJ4Lov7Wf-cgurfEB4ApxQL8.roa (hash: UMa/+Z7jBzitDcBQN0nLNmhVtoKXLtpXamxn8QiiIS4=)
                          3: DcuH_MT_kXadme70JeltxiUEXuo.roa (hash: uGCB58lT2WLC8+sG4enENWnXNBv9tltbp9ES6BhHSmc=)
                          4: Dh7MbHj4Le1FjddsAP7NsesKNak.roa (hash: En4LsGvH+Sy2ELMEMkDEr05rIEcg9J09dULw/wYD9jQ=)
                          5: MVlVxK8-sajTQAqGYl42XCYpjWo.crl (hash: iPHRNtTYDP/pyRxQQVMzKNpd5sdEjP2piOsydS2H+UQ=)
                          6: _vA_4IgHYmJvs5d5FwYed13XPO8.roa (hash: DM2Nb8aEZSMQFHhLIwMpeuKnBXqz05Nz1b7/nuo2ED0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/MVlVxK8-sajTQAqGYl42XCYpjWo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/MVlVxK8-sajTQAqGYl42XCYpjWo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MVlVxK8-sajTQAqGYl42XCYpjWo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 20:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:08:81:89:4e:54:df:8f:6b:cf:b9:cf:50:94:83:3b:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=315955c4af3eb1a8d3400a86625e365c26298d6a
        Validity
            Not Before: Oct  4 20:01:09 2026 GMT
            Not After : Oct  5 20:01:09 2026 GMT
        Subject: CN=29740a9ded9ede4e8013681edd137bcdabf6f4ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e8:43:e5:f3:a1:23:17:c7:38:56:00:e6:68:
                    18:90:e5:0a:bb:73:af:c9:12:6c:f6:75:cc:01:60:
                    8d:27:fa:88:e5:23:8a:28:75:59:18:0f:df:27:dc:
                    95:a6:ca:2e:44:b3:f7:fe:1a:cd:e7:69:b3:b4:d8:
                    3a:06:b7:ce:e7:42:42:d5:3a:6e:0f:02:12:50:98:
                    30:53:aa:d7:59:59:97:7d:44:ab:49:29:9b:ee:0c:
                    5e:e1:e4:72:2a:ca:61:32:0b:7d:50:78:61:95:05:
                    27:f4:33:23:42:c4:68:5e:81:33:e0:9f:41:4b:01:
                    5c:9e:b7:9a:ac:c1:35:77:3f:0c:ed:8c:aa:c5:3f:
                    20:1a:b0:19:1e:75:04:47:ff:45:38:61:cb:e5:ea:
                    be:ec:fd:e6:a9:4b:c4:c8:ed:3c:70:c7:dc:80:61:
                    a3:18:ef:48:31:ad:94:9c:98:5f:14:2d:87:bb:c8:
                    ca:10:ce:93:46:45:16:91:2c:0b:f7:a5:e6:d6:fc:
                    48:e5:7c:71:0e:60:78:a4:3d:06:7a:98:69:a8:47:
                    d6:c5:c0:8c:28:16:d4:46:89:e6:66:5f:62:38:77:
                    9b:ad:4e:a7:4e:4b:9b:38:32:8a:de:be:c6:71:e2:
                    ae:c2:54:df:fc:7a:b8:1e:e5:79:e5:82:28:90:92:
                    dc:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:74:0A:9D:ED:9E:DE:4E:80:13:68:1E:DD:13:7B:CD:AB:F6:F4:AC
            X509v3 Authority Key Identifier:
                keyid:31:59:55:C4:AF:3E:B1:A8:D3:40:0A:86:62:5E:36:5C:26:29:8D:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MVlVxK8-sajTQAqGYl42XCYpjWo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/MVlVxK8-sajTQAqGYl42XCYpjWo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/MVlVxK8-sajTQAqGYl42XCYpjWo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:0d:20:e7:2a:6d:3b:7e:df:6a:35:ad:68:8c:28:a6:ad:b4:
         eb:10:bc:9c:c6:b9:f4:e9:4a:a3:4b:55:62:de:a7:ee:92:e2:
         c3:31:7e:c9:2b:c1:3d:c0:88:dc:9c:12:bd:cf:bf:10:0a:42:
         8b:af:8d:0b:e7:c0:95:5d:cf:c8:dd:6f:48:fa:3a:ac:81:ec:
         0b:2a:0c:1e:a8:66:f9:9e:bf:b7:07:80:40:f1:f6:50:c8:1f:
         6d:2a:d6:b3:77:d5:0c:90:61:08:ab:33:dc:9a:12:b1:70:22:
         6b:06:fe:d2:82:61:a6:cd:4d:da:66:4b:bb:bd:31:e6:a2:45:
         eb:2b:b0:e2:7c:d0:a1:f0:3d:25:39:f0:9d:9f:6d:73:f6:af:
         4e:d0:4e:83:1d:e6:46:77:b4:64:92:07:7a:e7:cc:d7:99:ec:
         a6:e5:3d:f4:fd:83:a1:0b:87:d3:f8:c0:fb:09:dc:d9:a1:0f:
         b9:63:3d:5b:ca:e2:6b:b5:55:75:6a:70:85:f3:73:55:2c:0f:
         06:9b:5a:91:f4:32:de:6c:a9:ef:b2:29:86:c3:a1:48:bd:c4:
         a1:bf:66:34:4c:c5:44:1a:b0:6d:03:0c:f7:47:91:51:1b:05:
         eb:90:a1:1d:72:1d:dc:3e:1b:dc:96:20:8d:0a:fb:1b:56:cd:
         06:6d:18:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 06:46:44 2026 by rpki-client