Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.mft
File:                     mhoIaS8ijaDEGzF8b6fMXDvsUeE.mft (raw, json)
Hash identifier:          takFaG+eYlEl39BgG4xR0Zyen22Eh+wfinSbb0W/U80=
Subject key identifier:   CC:93:52:F7:97:59:FD:A6:5E:99:59:30:17:22:F1:58:A1:ED:AC:96
Authority key identifier: 9A:1A:08:69:2F:22:8D:A0:C4:1B:31:7C:6F:A7:CC:5C:3B:EC:51:E1
Certificate issuer:       /CN=9a1a08692f228da0c41b317c6fa7cc5c3bec51e1
Certificate serial:       01A09923F184EE6EEE91CD6FE70EEF61B31B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mhoIaS8ijaDEGzF8b6fMXDvsUeE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.mft
Manifest number:          1877
Signing time:             Sun 13 Sep 2026 05:01:04 +0000
Manifest this update:     Sun 13 Sep 2026 05:01:04 +0000
Manifest next update:     Mon 14 Sep 2026 05:01:04 +0000
Files and hashes:         1: mhoIaS8ijaDEGzF8b6fMXDvsUeE.crl (hash: rJ5jqlMQqMYI8UOi4F6X9dKtgrgVWc9Tnt2YhooK0RU=)
                          2: nks_nylvyyAWgimwBxXdFa9G4BY.roa (hash: EfY1nN8r7wAgqL2Y5iO6rc+wziVBHna5GQmLFyhBJBU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mhoIaS8ijaDEGzF8b6fMXDvsUeE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 14 Sep 2026 03:19:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:99:23:f1:84:ee:6e:ee:91:cd:6f:e7:0e:ef:61:b3:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a1a08692f228da0c41b317c6fa7cc5c3bec51e1
        Validity
            Not Before: Sep 13 05:01:04 2026 GMT
            Not After : Sep 14 05:01:04 2026 GMT
        Subject: CN=cc9352f79759fda65e9959301722f158a1edac96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b2:79:3b:02:02:a9:af:d4:97:8d:5d:40:d0:
                    7c:71:d6:f8:d1:e3:0d:7f:29:20:fd:bf:f7:2c:c1:
                    c2:12:2a:88:a3:47:1e:3c:10:08:ff:0b:89:8c:9a:
                    41:b7:12:7f:2f:35:fd:28:85:41:f8:f3:b4:c2:f2:
                    1a:8c:28:2f:d2:f4:bb:da:fa:7d:44:30:09:4c:dd:
                    9e:aa:86:d9:8c:10:54:01:dd:f0:d0:05:dd:e0:ae:
                    9a:37:e7:35:72:49:dd:b5:c6:31:d4:b0:78:87:ad:
                    db:5c:c7:67:b8:30:2d:17:fe:3e:b0:85:d6:26:98:
                    cb:56:63:0f:1e:9c:c2:88:9d:a3:e1:81:3b:4c:5b:
                    51:e9:e0:25:a0:5e:f4:ca:62:5b:24:3a:e0:9f:72:
                    d5:d4:71:d5:73:e7:78:12:d1:23:be:5e:4e:0a:9e:
                    76:ea:41:30:01:23:f7:17:10:17:22:f7:d0:49:42:
                    37:ed:0d:63:63:fe:47:37:c5:db:8d:cd:4d:c9:43:
                    f8:2f:a8:4a:2b:d1:83:6d:f3:43:cf:81:91:89:c4:
                    1f:ba:fa:10:fc:ec:6a:5e:db:d5:56:66:1d:56:88:
                    a3:33:40:86:82:8c:2c:d4:ba:b5:93:a4:31:8e:54:
                    ff:49:14:b7:a7:f3:35:6b:02:38:85:40:40:14:16:
                    a8:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:93:52:F7:97:59:FD:A6:5E:99:59:30:17:22:F1:58:A1:ED:AC:96
            X509v3 Authority Key Identifier:
                keyid:9A:1A:08:69:2F:22:8D:A0:C4:1B:31:7C:6F:A7:CC:5C:3B:EC:51:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mhoIaS8ijaDEGzF8b6fMXDvsUeE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:48:73:8c:74:47:07:a4:bf:65:33:68:37:ca:38:96:d5:d9:
         c5:f5:9a:64:51:9a:34:8e:36:72:8a:1a:55:2b:94:e8:f2:f3:
         ef:d6:9e:a4:75:0d:13:8f:f3:c6:82:9c:b5:84:b0:f6:39:df:
         09:fe:c0:c5:d7:f3:b0:04:34:e7:b4:76:f9:1b:87:5d:48:e1:
         7f:48:86:38:e4:5c:e4:ab:fe:e5:c0:20:e3:92:fd:2b:06:37:
         e1:a1:fd:b7:88:68:39:b1:61:df:b8:ac:9a:23:19:b1:12:c0:
         9d:31:75:50:92:ad:e1:da:21:a7:4e:d4:75:ba:a2:e2:ee:c8:
         bb:ba:ed:27:26:5a:d4:50:61:db:02:65:14:9d:f3:20:5d:e9:
         81:b7:05:c2:60:98:d4:75:a6:f0:9f:84:2c:fa:1e:49:32:44:
         69:17:c7:d4:c9:53:d0:a7:77:36:16:06:fe:91:f8:88:a1:82:
         d4:d9:a3:30:d3:cf:87:6b:ee:ff:5a:23:15:e8:de:70:70:5c:
         e2:65:16:a6:c4:e4:f5:65:dd:2e:56:75:dc:5e:1e:26:f6:89:
         23:1b:b8:67:fc:17:e0:c1:de:05:2b:d3:fc:f8:2a:75:52:44:
         73:1e:b0:8d:8e:da:94:7a:dc:f2:91:02:df:e4:1d:8d:2c:b5:
         4a:2d:86:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 12:33:45 2026 by rpki-client