Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.mft
File:                     4hEKzOM6yFARyowi0gAWZuRbk3c.mft (raw, json)
Hash identifier:          Yo7N8tcRBrbTBe42kW97N1ucr3z0xBcgkDBt81/mLQ0=
Subject key identifier:   EB:46:0C:2C:46:F0:F7:B6:12:37:10:08:4C:94:F5:02:8B:A1:6D:11
Authority key identifier: E2:11:0A:CC:E3:3A:C8:50:11:CA:8C:22:D2:00:16:66:E4:5B:93:77
Certificate issuer:       /CN=e2110acce33ac85011ca8c22d2001666e45b9377
Certificate serial:       01A0C2200C65C40E6EE1EFA29C5B5169AA9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4hEKzOM6yFARyowi0gAWZuRbk3c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.mft
Manifest number:          1A75
Signing time:             Mon 21 Sep 2026 04:01:15 +0000
Manifest this update:     Mon 21 Sep 2026 04:01:15 +0000
Manifest next update:     Tue 22 Sep 2026 04:01:15 +0000
Files and hashes:         1: 05pxQUZ3O5g7XwtchpzgXkYXLrM.roa (hash: pSBaxXr7aIa0AV76Ml4OFVZIYb8NNW03JRmIFNcA92E=)
                          2: 4hEKzOM6yFARyowi0gAWZuRbk3c.crl (hash: NyKpOAPjxequOHsE5RxIkAHa/RHzObCht6sYVQLyH9k=)
                          3: 4zc0TbZEkLFIHswzFPhuNpSxjI4.roa (hash: YDxBwpVQ5ct0e9UMy7Eo6tKf/5X6TUwON0SibETkWO4=)
                          4: 8sE9vfnxVkhmpv_cPv6lSgophbw.roa (hash: pgSz+be35K3IsVHSxBC7rLqa8AF08GPc30TZx1/DC/o=)
                          5: O6IDrDsGhF1eTbwU9x6NJxs2RFI.roa (hash: pVOrFHAX/Lnb3FuStEB2bMj1QRU4ZVatYcxzuU5OSMo=)
                          6: QHPyg5iWbWbbW5gr34naY63NDvo.roa (hash: yEtOkw8pnNFWUem/+gYHXLql4MYn18HzTEqZKWbEw9U=)
                          7: bH0F2mV_dRL1r12H9Kv5329qGfI.roa (hash: zDXdXDEtcJePiYih7GNQU0Vm0lUa6Wpo3l7juYolzJE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4hEKzOM6yFARyowi0gAWZuRbk3c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 04:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c2:20:0c:65:c4:0e:6e:e1:ef:a2:9c:5b:51:69:aa:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2110acce33ac85011ca8c22d2001666e45b9377
        Validity
            Not Before: Sep 21 04:01:15 2026 GMT
            Not After : Sep 22 04:01:15 2026 GMT
        Subject: CN=eb460c2c46f0f7b6123710084c94f5028ba16d11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:77:97:5d:d6:9c:7c:e4:01:df:1e:d5:93:0c:
                    d4:05:c1:b7:15:4a:a1:90:10:ea:4e:65:4d:3b:9b:
                    7c:6f:32:8b:e1:6d:74:e1:39:9a:da:ec:3a:b9:e3:
                    28:40:86:f0:66:f1:9a:da:f0:b0:14:47:ec:8f:85:
                    f8:40:0f:52:30:75:b3:0a:cd:0d:45:5f:d6:9a:7e:
                    92:da:f5:b5:18:34:7d:ab:4b:4c:85:66:f4:6e:fa:
                    a3:f4:05:11:ea:64:44:9b:04:fa:10:3e:20:78:26:
                    2d:18:3f:a1:59:6a:0c:60:ef:3d:46:47:e7:fb:98:
                    58:a7:16:47:4b:75:38:07:e1:f6:4f:89:34:62:dd:
                    1c:73:24:45:dc:f1:5e:68:b4:56:f5:fd:ac:35:c3:
                    69:ce:9a:13:cf:0c:db:0a:f0:0e:2f:13:e6:1e:4d:
                    b1:56:97:2f:9e:1d:ca:2f:3a:15:0a:e1:aa:c0:d4:
                    3f:1f:47:d7:22:bf:fd:f7:0d:07:2b:e4:09:2c:dd:
                    38:64:4a:92:32:b7:b7:ad:fb:20:15:2c:fd:93:c5:
                    0d:08:3b:85:60:c5:af:a0:65:b3:4f:82:3a:d5:62:
                    75:79:63:ed:1f:dd:68:c7:60:0a:92:9d:62:1e:34:
                    ad:0c:1b:52:4c:36:c2:05:4a:6e:c0:de:82:50:e6:
                    5a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:46:0C:2C:46:F0:F7:B6:12:37:10:08:4C:94:F5:02:8B:A1:6D:11
            X509v3 Authority Key Identifier:
                keyid:E2:11:0A:CC:E3:3A:C8:50:11:CA:8C:22:D2:00:16:66:E4:5B:93:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4hEKzOM6yFARyowi0gAWZuRbk3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:70:d3:dc:48:52:21:9e:59:e2:f3:31:2e:1e:0e:f3:cd:2f:
         6d:9c:95:91:3a:64:39:83:bd:85:3c:bd:90:6b:c5:8b:a1:a4:
         97:f8:4a:a1:5f:39:e3:4b:4e:03:74:dc:1a:60:62:a1:d1:32:
         8a:b9:91:ad:b5:b4:0b:81:59:5a:c7:58:b1:61:56:20:5e:7e:
         d3:8b:80:84:e7:5e:c7:c1:8d:70:50:83:4c:6a:b0:15:5f:dd:
         91:a7:d7:38:71:32:b9:03:e1:cd:58:25:0e:75:0a:bf:27:60:
         83:cd:d6:26:e3:b4:e6:5b:3a:e3:4e:8f:fd:e6:5b:66:7d:f8:
         25:98:76:5f:65:f4:2a:0c:67:f2:7a:e7:a0:84:58:30:14:69:
         6d:9f:7c:d6:29:27:ce:e8:b4:8d:70:c1:b5:47:c9:4b:fc:d9:
         4d:5f:eb:45:40:bd:b6:5c:5b:34:20:50:bc:bb:38:71:f7:e6:
         85:19:ac:01:0a:2f:86:7f:eb:e9:62:c8:8e:11:5c:ed:92:a6:
         bd:41:ec:81:d7:65:81:56:67:5a:7d:45:f0:be:94:8e:53:33:
         b4:71:e0:42:ec:18:37:29:07:f6:a5:a8:4b:e1:e8:86:36:25:
         f8:c0:cc:5e:af:8f:fd:c1:42:8c:e4:eb:11:24:97:3a:5a:c5:
         53:20:d1:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:15:12 2026 by rpki-client