Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/_MziomuQk8lrKlzN3XA0u1zgEvw.mft
File:                     _MziomuQk8lrKlzN3XA0u1zgEvw.mft (raw, json)
Hash identifier:          GgTymWRgopnrrRbyWWIDf/rw3KBuB76SezOqnm+7gAk=
Subject key identifier:   40:E8:E4:13:32:78:89:D3:14:8C:77:3A:F1:ED:6C:6E:4A:22:24:AE
Authority key identifier: FC:CC:E2:A2:6B:90:93:C9:6B:2A:5C:CD:DD:70:34:BB:5C:E0:12:FC
Certificate issuer:       /CN=fccce2a26b9093c96b2a5ccddd7034bb5ce012fc
Certificate serial:       01A181BECC0BFD0C70786702EC4751A9BB2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_MziomuQk8lrKlzN3XA0u1zgEvw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/_MziomuQk8lrKlzN3XA0u1zgEvw.mft
Manifest number:          0141
Signing time:             Wed 28 Oct 2026 09:02:07 +0000
Manifest this update:     Wed 28 Oct 2026 09:02:07 +0000
Manifest next update:     Thu 29 Oct 2026 09:02:07 +0000
Files and hashes:         1: SFuwL9n2ykHG8Q1bG2zh3J3rMY8.roa (hash: MQYGYdS73ZtBvhBLN7sM94ounBVaM1F31AdoiiH3acc=)
                          2: _MziomuQk8lrKlzN3XA0u1zgEvw.crl (hash: eqf3Z89NTwK1ogWZCAlM60OIgGsixWKGr7EtWN2cCb8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/_MziomuQk8lrKlzN3XA0u1zgEvw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/_MziomuQk8lrKlzN3XA0u1zgEvw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_MziomuQk8lrKlzN3XA0u1zgEvw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 07:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:81:be:cc:0b:fd:0c:70:78:67:02:ec:47:51:a9:bb:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fccce2a26b9093c96b2a5ccddd7034bb5ce012fc
        Validity
            Not Before: Oct 28 09:02:07 2026 GMT
            Not After : Oct 29 09:02:07 2026 GMT
        Subject: CN=40e8e413327889d3148c773af1ed6c6e4a2224ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:54:aa:3b:b6:84:e4:39:79:f3:c5:8a:42:7a:
                    8f:7c:4a:a2:01:5e:56:b4:a8:00:4e:e6:6e:4c:fd:
                    b3:02:e9:7e:1b:c6:2d:c5:5c:00:db:69:64:f7:b8:
                    e8:2f:f6:4c:e7:5b:78:1e:79:c2:8d:dc:3e:e5:05:
                    61:96:4e:f5:33:24:f4:e3:22:49:7b:b7:64:eb:ba:
                    6a:76:32:45:21:39:34:eb:e3:77:0a:25:8f:17:75:
                    fc:27:07:25:7a:66:69:59:10:46:d4:d2:82:7f:64:
                    ef:6f:48:b8:71:1d:e3:7b:65:e2:f9:6f:e9:4e:c5:
                    62:f4:fd:9c:ad:cc:c6:79:f4:4a:8f:8a:ae:3e:94:
                    55:48:49:1b:81:22:a4:39:bb:a3:9d:f1:de:af:e5:
                    20:33:59:e5:03:f0:61:33:80:67:f3:9e:04:72:8a:
                    26:45:49:04:a6:38:d3:c8:b6:cb:17:57:65:a1:b0:
                    3d:26:03:ae:a5:de:b0:9d:c7:e1:7f:ce:9c:f3:70:
                    2b:79:f5:0c:c5:8b:dd:c4:3c:42:d1:23:95:48:1f:
                    a1:e8:07:39:48:7e:0e:b6:78:28:06:b5:4c:34:c3:
                    5d:ed:5f:f4:f0:13:b9:f7:98:21:29:c6:38:bc:b2:
                    3c:b6:3e:b9:1a:53:dc:d3:e8:24:06:a2:4c:c5:34:
                    63:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:E8:E4:13:32:78:89:D3:14:8C:77:3A:F1:ED:6C:6E:4A:22:24:AE
            X509v3 Authority Key Identifier:
                keyid:FC:CC:E2:A2:6B:90:93:C9:6B:2A:5C:CD:DD:70:34:BB:5C:E0:12:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_MziomuQk8lrKlzN3XA0u1zgEvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/_MziomuQk8lrKlzN3XA0u1zgEvw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/_MziomuQk8lrKlzN3XA0u1zgEvw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:d5:ae:78:82:4f:fc:e0:07:3f:5a:e0:12:58:8c:a4:41:db:
         61:95:17:03:3c:13:7e:6a:c4:93:be:72:74:9a:8d:d2:d8:af:
         fb:56:fc:2a:a2:4a:0c:c7:fe:43:2b:42:07:84:a1:fa:02:ee:
         94:ab:6e:72:09:c7:22:92:e9:0d:2f:3c:41:3e:4c:56:6a:8c:
         97:30:b8:4c:f9:2e:d3:aa:3f:45:a8:17:ed:16:4e:75:70:ca:
         db:5b:64:a2:ae:a2:33:a1:b7:4a:6d:24:5a:99:53:b0:ee:f2:
         55:47:a8:8d:2f:00:95:12:e9:1c:e4:4b:58:89:bd:f7:cb:c7:
         73:9f:7b:be:a2:3d:12:a0:06:c4:9c:e2:80:41:02:bc:bd:3d:
         e3:78:d5:72:4a:0a:0f:61:81:e2:a0:29:29:26:71:92:68:93:
         98:70:9c:17:d0:ad:d8:d3:5c:d0:25:dd:74:51:fd:c1:54:f0:
         36:14:9c:8c:a3:7c:99:08:98:ed:85:85:9a:74:74:fb:4a:78:
         72:16:a2:8e:81:0c:e9:e1:6c:00:c4:2d:7b:13:0a:e8:bf:25:
         1e:13:82:30:68:ec:23:75:18:41:f7:bf:6d:78:0c:fe:ff:aa:
         32:36:1e:a8:ef:ce:d0:f4:c9:3d:82:cd:fa:76:af:bd:6d:60:
         d0:4e:39:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 16:32:59 2026 by rpki-client