Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.mft
File:                     M41C-7P0P1bduHguZUkKI9hbcuE.mft (raw, json)
Hash identifier:          D7BanZ0G06er7P35ZY5Ll0vKWNBtE74fRWmG7uZ9Sds=
Subject key identifier:   28:03:8F:9A:B1:01:BF:87:25:64:76:4F:E9:E8:D5:36:4A:31:63:76
Authority key identifier: 33:8D:42:FB:B3:F4:3F:56:DD:B8:78:2E:65:49:0A:23:D8:5B:72:E1
Certificate issuer:       /CN=338d42fbb3f43f56ddb8782e65490a23d85b72e1
Certificate serial:       01A128E8AAC47EAF2E05619CE7E365696B00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M41C-7P0P1bduHguZUkKI9hbcuE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.mft
Manifest number:          0F16
Signing time:             Sun 11 Oct 2026 03:01:39 +0000
Manifest this update:     Sun 11 Oct 2026 03:01:39 +0000
Manifest next update:     Mon 12 Oct 2026 03:01:39 +0000
Files and hashes:         1: 1EuhVKsVw5uoAe1_WgbtKc856tQ.roa (hash: 91jJhXvalSRHITuPYha5bt1vLrQQuYCZQo48j45dFVg=)
                          2: M41C-7P0P1bduHguZUkKI9hbcuE.crl (hash: UyJMXyYw8WxrKzS3ZkTTRlm0AEsfQmyxyKZdgndoBK0=)
                          3: Rg6PbbInPrmmUh3N22EeHzxOYn0.roa (hash: LEJHR9iD1d51yema4X3NSGFZJp50Z/6oaRBU+4pvUIg=)
                          4: Vb5LUMN_f-rlqzMX4GkNymfjZAc.roa (hash: xNINsOBY8pk7iexk7ULkbW+iYBp08xHS+Bw7bc6Aavk=)
                          5: uiTCPMJO6WqLGnhBcOzk3vGNCRI.roa (hash: /uSluzarRD7hzKeftDLlUNqVrK3dUPCuVWYOJEdnTrg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M41C-7P0P1bduHguZUkKI9hbcuE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 03:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:28:e8:aa:c4:7e:af:2e:05:61:9c:e7:e3:65:69:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=338d42fbb3f43f56ddb8782e65490a23d85b72e1
        Validity
            Not Before: Oct 11 03:01:39 2026 GMT
            Not After : Oct 12 03:01:39 2026 GMT
        Subject: CN=28038f9ab101bf872564764fe9e8d5364a316376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ad:1b:84:83:d6:d5:d4:4b:d5:80:ad:51:96:
                    03:07:94:6e:72:55:4f:bf:ea:60:bc:7a:d3:59:cb:
                    54:a0:c6:65:a9:22:8e:60:b6:d6:71:da:9d:ae:f0:
                    cd:d7:99:e0:6f:8d:ad:74:df:77:a0:41:6c:59:31:
                    b5:75:27:ed:aa:51:d1:81:8a:68:fb:66:1c:e3:18:
                    b6:6a:2e:fb:3e:d8:c5:6f:d7:8c:a8:d0:b2:4c:2e:
                    ab:8e:d4:99:51:38:5a:bd:1d:23:7a:c8:a2:2d:4c:
                    55:7d:6f:d4:1c:ae:26:44:78:a6:83:5c:de:fd:58:
                    c9:8f:38:ca:f0:d6:bc:80:6a:e4:6d:61:4e:58:d9:
                    1e:e5:c5:0c:b6:c4:99:fc:e0:68:9b:9e:1b:41:81:
                    52:0e:5c:2e:0a:92:85:18:8a:0d:23:1a:c8:25:ac:
                    96:9b:88:62:15:6c:26:ee:f3:e2:f1:67:d0:1f:01:
                    ab:38:4c:14:30:f3:f7:85:56:d7:7b:3e:34:db:e0:
                    e3:1e:4c:82:10:d9:3f:d1:79:13:9f:1b:fb:bf:93:
                    de:27:0a:59:36:8c:5d:6b:62:65:6c:9e:29:00:cc:
                    28:f0:0a:af:65:ff:73:1b:a2:a9:31:a9:08:3e:27:
                    75:33:a5:b0:22:9f:4c:25:a7:e7:0e:5e:88:d9:98:
                    f1:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:03:8F:9A:B1:01:BF:87:25:64:76:4F:E9:E8:D5:36:4A:31:63:76
            X509v3 Authority Key Identifier:
                keyid:33:8D:42:FB:B3:F4:3F:56:DD:B8:78:2E:65:49:0A:23:D8:5B:72:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M41C-7P0P1bduHguZUkKI9hbcuE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:74:09:d0:0c:fd:d1:c0:8d:f0:ee:66:84:74:7c:ba:75:a3:
         0a:88:73:29:cc:3c:ab:dc:6a:54:10:c6:57:50:ab:dd:e3:53:
         b3:87:74:c6:c9:98:62:98:68:58:21:6d:14:a7:62:38:e2:97:
         95:a1:e4:b6:3f:e2:a1:c5:d3:96:64:66:83:5d:36:bf:37:ae:
         1b:e7:98:7d:27:95:29:23:16:a7:d6:fd:2d:4d:8b:76:83:3c:
         43:56:cf:88:ab:90:f0:4c:85:81:aa:5b:d2:01:09:ff:61:11:
         16:a0:37:6d:05:5c:ff:6b:08:d7:64:b3:25:2e:6d:cc:01:2c:
         aa:be:ee:14:b3:d9:91:7a:7c:0c:3d:57:69:00:75:2a:36:8b:
         f6:0b:e4:95:f3:cf:60:bd:ea:c9:26:b0:f7:9a:ca:21:30:0e:
         81:d3:50:ed:30:de:c1:fa:8c:64:5a:c3:bc:ff:d2:17:26:f5:
         e4:39:dd:6c:bf:4f:4a:f9:d2:9e:7f:2e:b9:ad:17:12:fc:3c:
         b4:60:35:fa:a1:6f:58:f7:6b:a8:67:3b:56:56:36:14:ee:83:
         3d:fb:8d:0e:b8:f3:55:af:bd:e7:6a:71:ab:60:62:bb:0f:a4:
         4b:01:5c:a5:63:6e:21:08:1f:54:15:dc:55:c3:8b:a1:8b:b7:
         4c:c0:97:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 13:42:51 2026 by rpki-client