Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.mft
File:                     mu2VdsknICkWjE0aQXXRp8ocUe4.mft (raw, json)
Hash identifier:          +jx49+Wu1kYgmADD2f1GwVxHtqfU5uaYw4MEJV8y6lk=
Subject key identifier:   F7:62:BA:13:75:3D:F5:39:CD:7F:44:07:70:82:81:85:AF:0D:B8:DE
Authority key identifier: 9A:ED:95:76:C9:27:20:29:16:8C:4D:1A:41:75:D1:A7:CA:1C:51:EE
Certificate issuer:       /CN=9aed9576c9272029168c4d1a4175d1a7ca1c51ee
Certificate serial:       01A191317FB93E78F05B84369506EBFD2C77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mu2VdsknICkWjE0aQXXRp8ocUe4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.mft
Manifest number:          13F1
Signing time:             Sat 31 Oct 2026 09:01:42 +0000
Manifest this update:     Sat 31 Oct 2026 09:01:42 +0000
Manifest next update:     Sun 01 Nov 2026 09:01:42 +0000
Files and hashes:         1: mu2VdsknICkWjE0aQXXRp8ocUe4.crl (hash: ReYCOWXr2EkM2AjTs6kn82t5SkaLQEiCABcmSAuAFbU=)
                          2: oGhU7IJoDElhSJr9URGhXOwAaLk.roa (hash: RlkIPIJZ2vJYpwqoiUxVktYoRH+UnOVJBwSR2Sn3Qb0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mu2VdsknICkWjE0aQXXRp8ocUe4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 02:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:91:31:7f:b9:3e:78:f0:5b:84:36:95:06:eb:fd:2c:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9aed9576c9272029168c4d1a4175d1a7ca1c51ee
        Validity
            Not Before: Oct 31 09:01:42 2026 GMT
            Not After : Nov  1 09:01:42 2026 GMT
        Subject: CN=f762ba13753df539cd7f440770828185af0db8de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:aa:78:d9:ce:c5:92:b8:ba:cd:7c:b4:51:cb:
                    30:61:f6:28:0a:32:07:de:ea:5e:0f:e0:71:a1:e5:
                    fb:a9:05:8c:c6:60:ad:cd:0d:1a:97:2d:94:8f:f7:
                    22:07:4d:77:14:96:79:b0:f6:52:df:57:00:76:6a:
                    5f:0a:b5:8d:41:d1:0c:6a:e0:7a:04:aa:84:82:80:
                    28:22:45:2c:1f:8b:39:2f:9a:c8:63:9d:29:d3:2f:
                    0d:cc:62:12:50:a7:2e:17:ed:83:5f:ac:32:28:f8:
                    10:cd:49:97:02:80:fb:8b:bd:4e:47:d3:0f:0e:bb:
                    c2:fc:88:aa:a7:3e:fd:cd:e7:0b:46:3b:7e:28:bb:
                    28:3f:86:06:39:d5:97:b2:02:37:a0:43:26:f7:03:
                    e1:1b:7f:eb:c4:0f:a9:54:5c:4c:f9:6c:31:41:f7:
                    6f:63:d9:85:47:26:67:fe:2d:e6:95:1b:d6:46:9a:
                    b5:53:68:a0:02:5d:97:f1:f7:f3:a1:78:96:44:ac:
                    b4:df:92:0d:d5:0c:cf:c1:20:43:79:4a:9a:2c:a6:
                    da:e3:12:73:55:1a:19:f3:ca:6f:47:f2:26:8c:7e:
                    e0:da:97:3a:9c:2f:80:0c:f0:c0:0e:9a:a1:93:73:
                    ba:9c:80:1f:c6:a2:e2:44:c5:b0:b7:ea:eb:3a:24:
                    6a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:62:BA:13:75:3D:F5:39:CD:7F:44:07:70:82:81:85:AF:0D:B8:DE
            X509v3 Authority Key Identifier:
                keyid:9A:ED:95:76:C9:27:20:29:16:8C:4D:1A:41:75:D1:A7:CA:1C:51:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu2VdsknICkWjE0aQXXRp8ocUe4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:c8:b2:b6:3f:7f:c2:80:7c:81:59:e5:80:79:1c:db:77:67:
         36:60:a6:f4:20:d8:17:c5:0f:56:df:8b:ee:ca:24:65:47:56:
         c3:89:17:54:e0:a6:8e:b5:1b:e9:46:ab:24:ef:71:d7:ea:c2:
         cd:e3:d9:e2:99:be:ed:46:80:97:34:26:28:07:5b:49:65:65:
         20:f3:ff:79:b9:db:c4:76:75:2a:34:45:29:c7:d5:5a:41:96:
         d3:18:58:3b:e4:44:f5:7a:65:47:86:61:3f:ce:c5:bb:77:20:
         82:0b:d0:3b:49:7b:78:a4:d9:7f:c0:67:26:61:3b:ed:81:cc:
         0d:bf:68:16:76:d5:bc:86:23:ec:73:5c:44:18:e3:8d:5c:c2:
         77:b6:1c:e6:4f:0f:28:65:10:3b:79:05:6c:56:4c:77:51:b9:
         af:37:32:a3:61:4c:ee:1a:29:cb:ba:5d:1a:14:b2:99:86:cb:
         2b:88:95:e2:8d:a5:76:21:95:db:1f:65:4a:09:a4:fb:eb:c5:
         6d:ae:03:0d:bc:31:5c:1c:7d:bc:7f:db:57:7b:15:c6:3b:c2:
         0e:f3:20:cd:5f:f1:c6:b1:b2:bb:20:42:f6:0d:84:79:1b:9a:
         70:01:cb:f0:8c:21:5f:6f:a1:f9:7d:f3:c5:e8:79:b6:48:ce:
         cd:90:e7:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 12:29:21 2026 by rpki-client