Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.mft
File:                     MgrQyxyPq9KnFycj8utT6gLoSmk.mft (raw, json)
Hash identifier:          6V0FyOUbhDZystcaxy6nEu2pWLlDdghxVkU9qavSZtg=
Subject key identifier:   0A:66:3B:59:A5:59:6F:C0:5A:E3:03:B5:7B:41:0A:FA:D8:C4:F7:B6
Authority key identifier: 32:0A:D0:CB:1C:8F:AB:D2:A7:17:27:23:F2:EB:53:EA:02:E8:4A:69
Certificate issuer:       /CN=320ad0cb1c8fabd2a7172723f2eb53ea02e84a69
Certificate serial:       01A15A426C18245727798A960A4532A82101
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MgrQyxyPq9KnFycj8utT6gLoSmk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.mft
Manifest number:          0721
Signing time:             Tue 20 Oct 2026 17:01:04 +0000
Manifest this update:     Tue 20 Oct 2026 17:01:04 +0000
Manifest next update:     Wed 21 Oct 2026 17:01:04 +0000
Files and hashes:         1: MgrQyxyPq9KnFycj8utT6gLoSmk.crl (hash: TD6Ftj6NtQ2+ddid0LMtG/rm+jDo/Ms82mOHTbScFv8=)
                          2: n8zARsIOBpHO-_C7tzB3YGju7H4.roa (hash: em6ynddbBEnzvLtotX/PQZUnXz7ZD/kDDU89M7ttH+s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MgrQyxyPq9KnFycj8utT6gLoSmk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 21 Oct 2026 17:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:5a:42:6c:18:24:57:27:79:8a:96:0a:45:32:a8:21:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=320ad0cb1c8fabd2a7172723f2eb53ea02e84a69
        Validity
            Not Before: Oct 20 17:01:04 2026 GMT
            Not After : Oct 21 17:01:04 2026 GMT
        Subject: CN=0a663b59a5596fc05ae303b57b410afad8c4f7b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1e:f4:a5:80:e5:fb:6b:f4:b0:59:9e:06:29:
                    00:f5:46:93:94:c7:2f:7f:55:11:df:a1:d3:40:1f:
                    80:0a:ca:ff:ef:90:2a:19:88:26:e0:2c:53:a0:7c:
                    f5:83:98:4b:98:65:29:1c:d6:61:59:c0:b6:16:c1:
                    51:30:6c:92:e5:de:29:9f:1d:10:28:f5:f2:7f:b2:
                    77:6c:41:f0:b8:05:d0:59:fa:4b:f9:6c:0d:78:c7:
                    e3:ce:ee:8c:db:6c:b1:6b:4e:08:5c:87:7a:c5:ef:
                    0d:da:6f:34:5f:c3:f0:cc:38:74:44:c0:a8:85:5c:
                    1e:cc:53:d3:00:f6:a4:1e:c7:a1:c5:0d:d8:3b:6a:
                    83:e3:e7:f6:ce:23:68:87:87:64:6d:bd:b1:32:63:
                    fa:a6:70:45:61:db:e8:68:50:a5:41:68:72:29:f6:
                    02:17:01:e1:be:87:2a:3b:41:b0:bf:3f:1c:08:84:
                    f3:2f:85:49:ea:1c:c1:13:23:5a:59:64:00:32:9d:
                    80:ca:4f:5b:d3:0c:bc:75:57:15:e0:e4:60:71:61:
                    b4:fb:6b:92:5f:3d:a1:54:0d:68:35:76:2b:63:5d:
                    b3:9b:e6:39:b8:84:d5:b1:61:f6:78:09:8c:da:0c:
                    a4:f7:f4:b0:48:22:2e:53:5d:46:12:27:6a:0a:51:
                    f1:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:66:3B:59:A5:59:6F:C0:5A:E3:03:B5:7B:41:0A:FA:D8:C4:F7:B6
            X509v3 Authority Key Identifier:
                keyid:32:0A:D0:CB:1C:8F:AB:D2:A7:17:27:23:F2:EB:53:EA:02:E8:4A:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MgrQyxyPq9KnFycj8utT6gLoSmk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:ca:5f:ba:ca:93:36:65:90:52:c7:2e:fb:06:be:27:56:89:
         89:a9:bb:dd:6a:d5:f6:7e:dc:5d:a8:06:2b:ba:fc:99:2d:99:
         aa:4c:63:c7:b7:6d:53:44:d1:76:14:98:2b:17:50:4d:9d:96:
         64:48:11:bb:15:9e:55:f4:31:d5:9a:3e:f1:a8:a3:1b:58:35:
         3c:f3:1d:64:c2:25:9f:43:c6:e6:5a:61:7e:06:31:f9:41:9c:
         ae:93:58:5e:d2:4b:b5:c9:02:1a:29:07:3b:c5:0d:b7:5d:36:
         68:33:de:ee:4c:6c:99:ef:22:2d:c7:cb:6b:72:aa:21:28:02:
         4c:1f:f5:fe:ce:5c:55:24:99:5b:dc:b7:53:9e:f8:7b:2b:63:
         76:4f:58:41:11:01:85:d6:2b:51:75:ed:48:0e:d2:ee:d9:4f:
         ab:8b:73:f0:44:8c:e6:a7:91:c3:28:e1:53:0d:fb:c2:9d:c1:
         71:30:76:71:39:a6:e5:0f:b4:6b:a3:ac:3b:8b:50:df:ca:7c:
         28:40:07:ff:1a:70:66:80:6c:ab:ad:24:bd:7b:6c:fe:33:d7:
         29:27:bd:8e:4b:d5:77:bd:31:42:61:2e:ae:82:19:29:88:e0:
         ca:98:60:c0:1c:cd:ba:c9:bd:f9:0f:8b:53:51:0f:07:1d:f7:
         ba:32:5e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 22:25:39 2026 by rpki-client