Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft
File:                     MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft (raw, json)
Hash identifier:          LMaQuDQiwaf+GqYTY4vMu6u1seA5GefDWbG6HWG/P1E=
Subject key identifier:   E3:7A:46:A9:DA:00:B9:62:FA:36:84:47:11:5C:93:37:CC:D1:83:5D
Authority key identifier: 30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2
Certificate issuer:       /CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2
Certificate serial:       01A10F95EBCCF6EF91EA11E158FA34CB1186
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft
Manifest number:          1A96
Signing time:             Tue 06 Oct 2026 05:00:45 +0000
Manifest this update:     Tue 06 Oct 2026 05:00:45 +0000
Manifest next update:     Wed 07 Oct 2026 05:00:45 +0000
Files and hashes:         1: Ab10LIDLRTF0PMThWTZR2XKCPUo.roa (hash: gOUOA7HUeObMo1sz87FojtFMHZKh1H5YBLGoqzYYHas=)
                          2: BI1-zWHSCZaUeDLJP8MJRlySvtM.roa (hash: 5+ElqZkJcNh+4wO4k1JaUkv3Q1jNu6LVLW1YBzgcAlc=)
                          3: MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl (hash: 6ZZ1crmmH3WAB4/LO9rNzq2eQqukn4BW00qnW/yn+n0=)
                          4: WKvQQ0vKtpL43A08LcaBXTbj1kM.roa (hash: PRKu/DhDcwlsm5Jxqp2u00fHvQbqCeG7Bd2bm+dr5Ag=)
                          5: WYkkzBha-wTT67Gvhww1_FOg7QM.roa (hash: S1GPXGttTr/+ACoT1bs3TKRF2XPsfPAL0AORzGoCF9M=)
                          6: fvQ2Upwlm_BTPZuG-yhDHTrdS3A.roa (hash: W2tlzy8p7bFGP6in7P36ocCzYFzrqqDwRCFH7LaoTu4=)
                          7: hatB16DXDw0_Vm1ySuNMj5Y6auw.roa (hash: hVNkkdPmq+q7XousYHRGOebUzbj6zgU5nS/86C8jF9A=)
                          8: jbAWSXDnSzSUbGDEXT56Cj_H7fU.roa (hash: vtEwLtfqW4qkmELJWjSf6WMsJC95aJI8yky7ZJEN78k=)
                          9: lWZWuIJZ3q5_hVt6znDikSoBR3M.roa (hash: y85mPvpTXgrTdx2E8ZlH0eaEQJTPz5/4CbPHnZc0y/0=)
                          10: lg-xaQ_5kMXRgUe1cfTquL-sxEk.roa (hash: DrSW8pSYEFjTMNFurufTgFjckkn7K2mmqSF0WbWEz10=)
                          11: vJQ8eWA9gitpdTEogU6FKIxSf4M.roa (hash: c/auuaX6uZTawydsm3NxKIP9OAI41TsWcjh2cXjpviE=)
                          12: vuBbsDJkWmoNnQMaSnTKljEK9f4.roa (hash: v05fmL1UJXoi2B7sFB3rnj4EDXcUe8R7u6fgG/Bd6XI=)
                          13: zVexCvkSNXzSQ_4jRtVV_rcjPGE.roa (hash: how96F3OMhXkq8E95kXfSQSmzCi80yeTXVsw9qWAjXo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Oct 2026 05:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:0f:95:eb:cc:f6:ef:91:ea:11:e1:58:fa:34:cb:11:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2
        Validity
            Not Before: Oct  6 05:00:45 2026 GMT
            Not After : Oct  7 05:00:45 2026 GMT
        Subject: CN=e37a46a9da00b962fa368447115c9337ccd1835d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:1e:fb:7f:ea:7e:a6:7d:3c:1d:fb:de:d7:e2:
                    b5:6c:f5:fb:e1:38:64:a9:91:74:91:19:b4:b0:ba:
                    a4:46:4d:24:63:d9:bc:5c:db:0b:70:40:cc:5d:bd:
                    3c:29:ba:68:89:53:b4:a1:2a:89:06:09:ad:52:4a:
                    74:07:d2:42:7f:0b:b9:c1:9c:ad:42:b6:a9:68:a5:
                    9c:62:d4:3d:2f:5b:70:55:86:e6:37:95:1f:78:76:
                    3c:3c:a0:29:0f:30:41:b2:53:9a:0d:65:d9:9e:d3:
                    d0:4b:d0:f0:21:f7:ea:14:fc:fe:f0:91:60:66:48:
                    d3:45:a4:3a:55:c1:43:b5:3e:8e:dd:d6:f9:6d:d6:
                    0d:34:31:bb:b1:34:5d:bb:0e:b1:83:62:ec:5b:54:
                    c3:29:2a:2e:db:55:ec:dc:78:34:35:54:07:26:49:
                    3c:4a:39:ad:d3:68:c0:aa:a7:bf:21:c6:eb:94:2c:
                    52:d2:2d:0c:53:83:7f:d0:2c:df:23:84:ff:b0:ee:
                    74:49:79:bf:94:66:9a:7e:cf:4f:57:59:e1:ad:44:
                    1f:69:db:1f:12:38:3a:c2:9e:f4:cf:ce:86:28:9c:
                    e1:76:c9:e9:5a:4b:4b:a0:71:42:35:21:57:9a:61:
                    5b:56:3a:5d:55:c9:f8:61:f6:e0:02:66:8c:14:f0:
                    c9:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:7A:46:A9:DA:00:B9:62:FA:36:84:47:11:5C:93:37:CC:D1:83:5D
            X509v3 Authority Key Identifier:
                keyid:30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:b7:95:95:e2:75:33:71:d3:f7:ff:a5:e4:13:30:75:e7:a5:
         dd:b8:31:d5:29:0f:dd:b2:28:c4:76:8d:ba:4c:c7:2e:c9:08:
         ca:3d:31:54:d5:a1:89:76:77:d2:da:f3:ff:a7:92:1d:f9:09:
         fe:74:7e:00:d4:1b:b5:80:15:83:02:af:f8:80:58:7a:c3:20:
         3a:29:49:88:df:98:53:b3:bc:29:f1:8c:67:91:49:dc:a1:af:
         23:43:15:4e:6f:a1:e6:34:9a:0e:e3:f6:bb:81:0e:70:cc:b0:
         75:16:b6:6b:60:37:5b:cd:ea:3f:d5:40:d0:b0:32:c1:35:7d:
         70:b8:75:dc:9c:cb:b1:60:7c:39:b6:5a:89:db:f4:25:9c:34:
         ac:62:16:4d:02:9e:c6:da:70:35:14:12:57:97:82:5e:a2:1e:
         05:bd:04:b4:b9:34:a8:7a:ca:98:74:29:28:d2:5a:a5:e7:9c:
         80:f0:e7:fb:1b:90:f3:86:cd:36:3e:7d:93:fc:d6:71:96:ed:
         05:8d:c8:c5:b2:c6:ef:d0:4c:d7:ac:05:a0:c0:10:10:83:4b:
         b1:7b:1b:ad:99:e6:d3:2c:05:49:84:0c:bc:f3:62:ac:05:69:
         2f:2e:00:49:21:3d:5b:b9:0d:48:19:92:99:d3:4d:32:fd:30:
         b3:f6:60:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 14:37:20 2026 by rpki-client