Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.mft
File:                     M0-fg9LXTAwP0A2nNVePc33X2gM.mft (raw, json)
Hash identifier:          CS5Mny2saGSey85tMn2263p1l4+/hlb9Q00RXD4slUE=
Subject key identifier:   E3:FF:FE:DC:8E:7D:08:45:B6:09:27:68:B7:A0:32:47:12:2A:6D:64
Authority key identifier: 33:4F:9F:83:D2:D7:4C:0C:0F:D0:0D:A7:35:57:8F:73:7D:D7:DA:03
Certificate issuer:       /CN=334f9f83d2d74c0c0fd00da735578f737dd7da03
Certificate serial:       01A1287A7A00D2ABB1CA0F1C6F3B2642117B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M0-fg9LXTAwP0A2nNVePc33X2gM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.mft
Manifest number:          07C7
Signing time:             Sun 11 Oct 2026 01:01:17 +0000
Manifest this update:     Sun 11 Oct 2026 01:01:17 +0000
Manifest next update:     Mon 12 Oct 2026 01:01:17 +0000
Files and hashes:         1: 7nAXiiWwMrKC__gT-hUF2XA-Iso.roa (hash: vcK2N0Exej7cew/p43KdNyk4JPLcOKiM3s2+QDUjk38=)
                          2: F6lbxX3aQsTs2CgIaSrcru61Nkg.roa (hash: xDbeN/l1tsv2dlE9muWhGH3qIwH6FbQpQRsMOywBxk0=)
                          3: M0-fg9LXTAwP0A2nNVePc33X2gM.crl (hash: fJppU1FmpoN4OPl4LpIFiJw2gUf6uQsmrvnQQRsYVEg=)
                          4: WqDS95-He-yk3t24qKJI-_SLkPk.roa (hash: CpUmTzZjgX7L+EURvDrJ6FpyIH+66F1QJtHPFgkqtLs=)
                          5: cgOqu4SdNiUsyvVgRsWy2IiSrRk.roa (hash: iyZz+ne5RBNmhJL+kkuEkW2psKX2xrbIym9fdJ+TVi0=)
                          6: faLPN_S_WjaTJHL5obkgUoA9YU0.roa (hash: 9SARb7qgti8Rdi1ymT3uP+n1nUwS+BiJv6V79V4Y0rI=)
                          7: tkxYbwLzW57rtbTL3HAb4gik620.roa (hash: gE/XZLF/hHQla0+c26dZTm+olAmW2YqbYW49t6axXdU=)
                          8: v0CmFjYdCus3aQO-8m8_ZmwT2WU.roa (hash: gPHxfBPLjS7r3KK8sjMCL/yxvco773JImBamks13aRg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M0-fg9LXTAwP0A2nNVePc33X2gM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 20:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:28:7a:7a:00:d2:ab:b1:ca:0f:1c:6f:3b:26:42:11:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=334f9f83d2d74c0c0fd00da735578f737dd7da03
        Validity
            Not Before: Oct 11 01:01:17 2026 GMT
            Not After : Oct 12 01:01:17 2026 GMT
        Subject: CN=e3fffedc8e7d0845b6092768b7a03247122a6d64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:fe:77:ed:14:41:50:f3:48:3e:14:21:be:95:
                    f2:95:71:04:29:90:44:76:30:02:fd:a0:67:fc:ff:
                    9c:f2:03:0e:04:96:5d:9b:4f:98:dc:b0:57:2c:e8:
                    08:75:00:ff:88:24:dc:98:9b:be:d6:44:2f:2d:29:
                    fc:6f:c7:75:9a:1e:c0:bf:47:03:af:0e:33:36:5e:
                    06:77:00:ad:35:f3:e8:1b:ad:dc:6e:b3:1b:16:ad:
                    4b:a2:6b:80:e6:ca:8c:f7:ad:fe:94:b8:10:1c:38:
                    53:17:48:81:d5:5a:76:f9:ef:fb:81:94:6c:31:85:
                    c7:ec:d1:7d:82:3a:aa:04:b8:3a:15:af:a5:a1:ec:
                    59:46:fb:95:47:fc:96:c8:f6:72:a8:14:0d:12:bd:
                    ca:88:ae:cd:de:4a:cc:d4:70:6e:0b:96:5f:e9:80:
                    47:bc:62:b2:37:1c:97:77:14:6c:c0:fd:a8:3f:cd:
                    26:a0:5c:8a:73:82:18:4b:8c:b7:aa:9f:4e:bc:89:
                    f9:81:2b:0f:3e:c9:01:3e:9e:03:1c:e5:66:61:fb:
                    4d:4e:4f:cc:99:20:4f:f0:f4:3f:13:04:01:2a:48:
                    be:e9:48:b3:b5:fd:0d:7a:21:db:2f:ce:73:10:cf:
                    ea:57:26:22:c7:b4:dd:14:c5:fe:bc:27:28:b8:e2:
                    82:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:FF:FE:DC:8E:7D:08:45:B6:09:27:68:B7:A0:32:47:12:2A:6D:64
            X509v3 Authority Key Identifier:
                keyid:33:4F:9F:83:D2:D7:4C:0C:0F:D0:0D:A7:35:57:8F:73:7D:D7:DA:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0-fg9LXTAwP0A2nNVePc33X2gM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:00:3c:56:3c:8e:06:26:d3:9b:db:e4:33:e5:1a:b4:00:1d:
         9b:41:5c:7d:3f:57:3a:fc:58:a3:2c:16:95:a7:09:8a:59:17:
         af:8e:47:83:32:65:c5:22:67:6e:de:82:31:ea:86:a6:2b:ab:
         2c:a9:a7:a6:d4:e5:3b:33:b8:63:78:f1:7c:7e:96:ee:f3:22:
         fa:cc:b3:d0:82:5f:e8:23:28:5c:da:9e:44:42:02:d4:8e:72:
         91:83:df:93:43:3a:a4:8a:d7:4c:d1:1b:96:e3:df:4c:82:f4:
         29:ef:0b:e5:17:8a:a1:cb:a3:40:95:01:ae:c0:41:a4:61:ac:
         ad:3e:7e:9a:3a:87:fc:c2:3f:35:2e:dd:ad:3d:fd:6a:4e:ab:
         2f:c5:f7:6c:77:9e:0a:65:00:c9:82:f7:2b:6b:91:3b:c2:62:
         a2:aa:58:9a:e0:4e:c7:19:50:c9:3a:e1:09:62:4b:1e:cb:f1:
         c6:91:10:50:a6:9b:31:d8:e8:31:7a:02:16:0c:ea:d4:51:a1:
         15:64:8e:8a:03:ac:e9:12:b3:b3:88:c9:d1:3d:e8:af:75:af:
         f7:22:31:80:03:c8:d1:f1:11:19:5e:4e:4f:c2:76:e4:32:c2:
         1c:c7:c6:98:01:30:11:fb:02:c4:a2:6d:eb:56:39:b2:41:00:
         00:97:02:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:32:16 2026 by rpki-client