Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/5da1a0-44f1-45d5-a473-3618e503f21f/1/r4TKySqfMTSUgaaOlRvFWvUI8uY.mft
File:                     r4TKySqfMTSUgaaOlRvFWvUI8uY.mft (raw, json)
Hash identifier:          wV0eXSdp6mpsKWyU57xus7ld6n2vv7WzNYQYvXIMdAM=
Subject key identifier:   1E:DA:AA:FB:5C:E7:FC:1A:52:3C:12:88:0B:8C:F3:5A:F1:DD:A4:43
Authority key identifier: AF:84:CA:C9:2A:9F:31:34:94:81:A6:8E:95:1B:C5:5A:F5:08:F2:E6
Certificate issuer:       /CN=af84cac92a9f31349481a68e951bc55af508f2e6
Certificate serial:       01A0C21F65EA8362D71338BB3AF31578E278
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r4TKySqfMTSUgaaOlRvFWvUI8uY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/5da1a0-44f1-45d5-a473-3618e503f21f/1/r4TKySqfMTSUgaaOlRvFWvUI8uY.mft
Manifest number:          01F0
Signing time:             Mon 21 Sep 2026 04:00:32 +0000
Manifest this update:     Mon 21 Sep 2026 04:00:32 +0000
Manifest next update:     Tue 22 Sep 2026 04:00:32 +0000
Files and hashes:         1: 6jLG6sHP0uH-VWDXC-aY6pQShTw.asa (hash: uKIGD/vjcOdgcnZqgMesnuBDT0HiBxmR+kmrbx1+f7Y=)
                          2: BDgHG1Q9czVhyC3DjxtgNrwoTPc.roa (hash: DcjWP3L9YfgxacqAtFXHQOVruS1ILQzHmmRLjmZrdMk=)
                          3: iJxSVbAFop81tRZJNuYo6wfOif0.roa (hash: SxhE89MXr5geGOtet6ynyWQY6neN9HEjRfevzW29iyM=)
                          4: r4TKySqfMTSUgaaOlRvFWvUI8uY.crl (hash: LoUi+XWSv+illb7IWhAdHVZxUV2xw4MCjNLaApWMgcY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/5da1a0-44f1-45d5-a473-3618e503f21f/1/r4TKySqfMTSUgaaOlRvFWvUI8uY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/5da1a0-44f1-45d5-a473-3618e503f21f/1/r4TKySqfMTSUgaaOlRvFWvUI8uY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r4TKySqfMTSUgaaOlRvFWvUI8uY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c2:1f:65:ea:83:62:d7:13:38:bb:3a:f3:15:78:e2:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af84cac92a9f31349481a68e951bc55af508f2e6
        Validity
            Not Before: Sep 21 04:00:32 2026 GMT
            Not After : Sep 22 04:00:32 2026 GMT
        Subject: CN=1edaaafb5ce7fc1a523c12880b8cf35af1dda443
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:85:00:62:a7:7c:ab:8c:bd:99:1a:80:69:68:
                    d7:c0:6b:21:66:59:29:83:00:07:6e:e8:9e:bb:dc:
                    0f:8a:10:a6:28:d1:5f:35:4f:bd:1b:a9:53:2d:ce:
                    a9:32:93:e3:25:91:bd:04:85:b6:20:28:11:ef:3d:
                    d3:78:a8:0b:dd:e4:0a:2c:5b:36:6d:bd:d9:85:65:
                    90:16:a4:6d:f2:af:df:e8:07:9f:8a:45:51:6a:27:
                    ab:f1:87:21:51:d9:ee:d6:fe:98:4f:d6:00:91:8c:
                    74:c9:e3:0c:1d:65:a3:86:15:6f:5f:e5:95:57:ae:
                    b9:23:92:b7:70:f3:4c:54:6b:9c:47:46:fd:ab:26:
                    45:40:1f:ce:da:8c:e5:56:36:6e:9f:81:60:df:c0:
                    99:1e:64:bc:5a:78:a1:49:a5:73:5e:2d:a9:a6:64:
                    05:fd:b6:04:cf:e2:b9:16:a3:d0:b9:86:95:23:50:
                    8c:42:b1:68:c8:86:52:7c:67:65:65:8e:ee:3f:e2:
                    1a:77:78:24:95:37:5d:67:29:c0:e5:0c:f6:e1:c8:
                    a4:87:69:62:10:18:7c:e9:cd:55:7a:ce:e8:3f:ff:
                    9a:f1:d1:7b:f1:51:b8:4e:20:51:f5:b7:6d:54:a0:
                    ab:a5:ce:dd:53:60:85:57:d8:6a:80:ad:d8:8d:99:
                    37:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:DA:AA:FB:5C:E7:FC:1A:52:3C:12:88:0B:8C:F3:5A:F1:DD:A4:43
            X509v3 Authority Key Identifier:
                keyid:AF:84:CA:C9:2A:9F:31:34:94:81:A6:8E:95:1B:C5:5A:F5:08:F2:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4TKySqfMTSUgaaOlRvFWvUI8uY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5da1a0-44f1-45d5-a473-3618e503f21f/1/r4TKySqfMTSUgaaOlRvFWvUI8uY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5da1a0-44f1-45d5-a473-3618e503f21f/1/r4TKySqfMTSUgaaOlRvFWvUI8uY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:98:79:d9:e4:8c:79:30:11:1a:32:86:2d:a5:38:5c:33:70:
         cc:56:a1:6a:f0:6c:a8:a5:c5:b8:21:60:79:c4:f7:6f:81:b0:
         98:09:0a:d0:4b:fa:31:53:1c:4d:44:8e:27:a8:1f:1b:48:9a:
         a0:22:30:fb:03:a0:06:7b:1a:3a:1d:40:54:a3:a0:38:f3:96:
         e3:fc:f8:ca:d6:ae:2b:cc:54:31:d5:a2:92:54:3c:b8:0a:f2:
         99:71:49:e7:89:65:d0:97:3c:4e:d8:e1:fb:69:b9:cc:eb:dc:
         ec:e2:d0:83:d8:1c:55:3c:9b:d6:1c:46:2b:11:98:43:4e:78:
         ff:e8:98:08:b7:cb:75:7b:8d:dd:02:2f:08:6c:fb:33:a6:02:
         75:60:4a:13:25:df:9a:0c:e3:e2:c0:d6:95:0c:d3:09:c6:1e:
         73:c5:ff:e7:ac:6d:bc:cf:1a:10:03:46:43:8d:32:bc:88:93:
         d4:07:db:7b:98:79:be:21:90:10:e6:92:08:d7:be:88:ab:9a:
         fb:b0:7b:74:f4:2b:ae:c8:c7:bc:9e:f2:e3:10:81:9e:8c:c8:
         44:fe:e2:51:f9:77:9d:4d:a8:76:a3:88:91:20:56:2b:41:f7:
         4b:c2:82:ae:14:61:b4:f4:e6:32:e8:ea:70:c4:00:fe:c7:02:
         63:54:57:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:14:38 2026 by rpki-client