Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/bbcf3c-67cd-403f-944c-fd5d79ec5b17/1/mEGMxlUN_bGJmWmmAn5DWhsLE0E.mft
File:                     mEGMxlUN_bGJmWmmAn5DWhsLE0E.mft (raw, json)
Hash identifier:          9N09EGF3YANwglLnAIMlGY4qeMEQ6FuVompbhVUC9JA=
Subject key identifier:   C3:56:6B:C4:C8:52:E2:BD:B8:45:22:B0:F0:DC:10:84:7F:D8:8E:62
Authority key identifier: 98:41:8C:C6:55:0D:FD:B1:89:99:69:A6:02:7E:43:5A:1B:0B:13:41
Certificate issuer:       /CN=98418cc6550dfdb1899969a6027e435a1b0b1341
Certificate serial:       01A08C7B798EA9C2ABA9743A0D1023404D14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mEGMxlUN_bGJmWmmAn5DWhsLE0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/bbcf3c-67cd-403f-944c-fd5d79ec5b17/1/mEGMxlUN_bGJmWmmAn5DWhsLE0E.mft
Manifest number:          1052
Signing time:             Thu 10 Sep 2026 18:01:37 +0000
Manifest this update:     Thu 10 Sep 2026 18:01:37 +0000
Manifest next update:     Fri 11 Sep 2026 18:01:37 +0000
Files and hashes:         1: mEGMxlUN_bGJmWmmAn5DWhsLE0E.crl (hash: Qh8JKNHBT5wEljAbCDy/DBlspdGgz3wMg+bzjMrRjJU=)
                          2: ymwnzHfZGdMRFGEeM7VXK-BgXAw.roa (hash: zIUfyqH90eqwbG4q9Ekkq/Mb1Io/2HvKy6Zq+oTaP8c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/bbcf3c-67cd-403f-944c-fd5d79ec5b17/1/mEGMxlUN_bGJmWmmAn5DWhsLE0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/bbcf3c-67cd-403f-944c-fd5d79ec5b17/1/mEGMxlUN_bGJmWmmAn5DWhsLE0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mEGMxlUN_bGJmWmmAn5DWhsLE0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8c:7b:79:8e:a9:c2:ab:a9:74:3a:0d:10:23:40:4d:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98418cc6550dfdb1899969a6027e435a1b0b1341
        Validity
            Not Before: Sep 10 18:01:37 2026 GMT
            Not After : Sep 11 18:01:37 2026 GMT
        Subject: CN=c3566bc4c852e2bdb84522b0f0dc10847fd88e62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6a:bd:79:a2:93:bf:e0:40:ba:28:f2:41:5e:
                    14:01:2c:e5:9e:55:5f:d0:f4:cc:1c:ab:f3:a2:1a:
                    b1:b7:5b:87:86:d7:96:94:be:c9:4c:83:92:30:dc:
                    86:f7:93:c2:2a:bf:51:61:09:76:b8:cd:47:22:c0:
                    00:cd:bb:ff:e3:1b:10:8c:0c:1b:9a:4c:aa:85:fb:
                    55:ba:15:bf:f9:a6:ba:68:b9:b5:d3:71:17:a8:cf:
                    05:c0:50:39:c2:54:a9:05:c9:ce:26:57:12:81:39:
                    f2:d2:87:6d:85:e6:2a:1c:e5:f4:56:0b:11:c2:78:
                    1d:f3:37:52:60:52:8d:07:9a:96:3f:62:bd:52:34:
                    9b:78:4f:1e:75:9c:c2:6f:3c:fd:d1:d4:59:7b:0e:
                    91:99:7d:ec:9f:8b:5f:c9:22:cc:72:cb:58:72:a8:
                    08:59:b9:3f:f8:0e:4c:db:e0:63:30:fd:8c:98:27:
                    a9:5d:bb:f8:ba:14:0a:8d:10:7e:64:99:ee:a9:e5:
                    e8:20:7b:e8:85:06:07:52:ce:0b:36:fc:71:12:50:
                    90:5a:37:e8:2a:51:c1:39:a2:20:ea:e3:3a:50:5d:
                    9f:23:c5:ce:7a:8e:40:68:a8:38:b2:94:cb:57:da:
                    66:44:55:64:e3:a7:7a:55:20:d6:7b:1f:64:44:e8:
                    8c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:56:6B:C4:C8:52:E2:BD:B8:45:22:B0:F0:DC:10:84:7F:D8:8E:62
            X509v3 Authority Key Identifier:
                keyid:98:41:8C:C6:55:0D:FD:B1:89:99:69:A6:02:7E:43:5A:1B:0B:13:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mEGMxlUN_bGJmWmmAn5DWhsLE0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/bbcf3c-67cd-403f-944c-fd5d79ec5b17/1/mEGMxlUN_bGJmWmmAn5DWhsLE0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/bbcf3c-67cd-403f-944c-fd5d79ec5b17/1/mEGMxlUN_bGJmWmmAn5DWhsLE0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:0c:66:57:68:9b:22:07:96:e6:bb:60:4f:8f:72:99:a6:dc:
         ad:6d:4b:ba:f8:3c:ff:48:c9:9c:8c:a5:76:0f:59:55:4e:1c:
         d9:96:e3:f5:ba:03:3a:41:2e:8a:ab:d3:83:20:19:18:6c:60:
         7e:88:2c:a5:db:64:5c:f4:e6:43:37:2c:38:5e:f8:49:89:fd:
         92:2a:73:2a:9e:dc:b5:7f:8b:14:d9:d8:3a:2a:57:9e:cd:81:
         7c:7e:b5:0d:c8:d1:5b:db:02:d6:7d:d6:88:52:91:90:56:ee:
         f3:89:02:ea:66:c7:de:ec:ba:ec:2d:ee:8f:b9:37:ce:8b:20:
         b4:a5:39:d6:a6:c3:1a:29:bc:82:42:01:af:26:9d:4a:a1:b3:
         d9:d3:1d:ac:2f:61:aa:ab:61:c7:1c:b5:45:19:51:aa:f5:db:
         ab:24:fe:ac:8c:0d:80:ce:25:8f:88:f6:e3:87:31:5c:1e:a6:
         ee:df:f7:12:57:c7:c9:a0:9e:aa:d3:76:e4:e3:b6:62:71:8a:
         8e:e3:26:6b:ad:31:22:a2:0c:7c:6e:95:ce:5e:23:99:66:74:
         a3:7b:f3:d2:65:96:47:75:54:80:a6:5c:c2:25:61:be:d5:dc:
         c2:97:bd:60:2b:39:d6:ba:bb:9c:f2:c4:59:81:b5:32:7e:af:
         bc:05:5c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 23:32:30 2026 by rpki-client