Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/fe6f93-b2fc-49e0-be87-34bb710a3478/1/rdPuwzG3AqIGtU3-kGO4wXpCuBw.mft
File:                     rdPuwzG3AqIGtU3-kGO4wXpCuBw.mft (raw, json)
Hash identifier:          ST/gxD9/7lNPKiUvkcV70M9FK5MaUu4EiwixxIXfpJY=
Subject key identifier:   6E:DF:9D:A5:7A:61:06:62:49:FE:5E:B6:1F:97:D1:23:09:F9:B9:F9
Authority key identifier: AD:D3:EE:C3:31:B7:02:A2:06:B5:4D:FE:90:63:B8:C1:7A:42:B8:1C
Certificate issuer:       /CN=add3eec331b702a206b54dfe9063b8c17a42b81c
Certificate serial:       01A0C520A5860C8E1F152483A5072CE2DC32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rdPuwzG3AqIGtU3-kGO4wXpCuBw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/fe6f93-b2fc-49e0-be87-34bb710a3478/1/rdPuwzG3AqIGtU3-kGO4wXpCuBw.mft
Manifest number:          01AD
Signing time:             Mon 21 Sep 2026 18:00:45 +0000
Manifest this update:     Mon 21 Sep 2026 18:00:45 +0000
Manifest next update:     Tue 22 Sep 2026 18:00:45 +0000
Files and hashes:         1: WgFjeIjodHf0tIFJwgd7qL6VzDY.roa (hash: SbLcaGFtR51gDtKvy7+lV/tvtr//sjAXrktSn3Oq23Q=)
                          2: rdPuwzG3AqIGtU3-kGO4wXpCuBw.crl (hash: PunqHxyXeYyWL7YR52FPqVA5YPGoU8nXiRt7DUnWjAc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/fe6f93-b2fc-49e0-be87-34bb710a3478/1/rdPuwzG3AqIGtU3-kGO4wXpCuBw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/fe6f93-b2fc-49e0-be87-34bb710a3478/1/rdPuwzG3AqIGtU3-kGO4wXpCuBw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rdPuwzG3AqIGtU3-kGO4wXpCuBw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c5:20:a5:86:0c:8e:1f:15:24:83:a5:07:2c:e2:dc:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=add3eec331b702a206b54dfe9063b8c17a42b81c
        Validity
            Not Before: Sep 21 18:00:45 2026 GMT
            Not After : Sep 22 18:00:45 2026 GMT
        Subject: CN=6edf9da57a61066249fe5eb61f97d12309f9b9f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f2:97:b2:c5:76:ef:47:14:51:d6:2a:9d:03:
                    b7:d3:2b:c9:82:6f:b2:0a:1a:37:45:6c:ad:9f:0b:
                    81:af:e6:ae:31:cf:d5:06:1b:e6:d4:60:39:f3:74:
                    4e:48:5b:fe:56:b3:69:67:e6:26:2b:99:f4:17:67:
                    23:e9:9f:93:e8:6a:9d:10:12:0b:e1:b3:0f:22:be:
                    a7:a0:92:3b:42:59:c0:14:60:18:8b:61:97:1a:b0:
                    7e:0b:3f:5a:61:0f:3b:da:68:72:80:80:ca:15:02:
                    ff:18:d3:ce:83:63:7d:1a:17:a5:dc:cf:03:c1:cf:
                    f4:b8:09:3a:a0:28:62:bb:68:ac:1e:b8:5a:07:c2:
                    d2:f3:28:75:9e:fd:3f:9e:e2:a6:29:60:0d:ff:72:
                    c4:c7:bc:5d:e7:99:7a:3e:b6:33:a2:b6:e2:5c:26:
                    24:cc:42:3a:2f:41:bc:6c:cf:e7:1d:0d:68:a3:12:
                    61:82:a0:da:04:bb:5f:ff:93:48:14:f3:35:71:a9:
                    f4:74:d5:b7:f7:be:62:60:5a:90:f2:ad:0e:cb:43:
                    94:56:71:c7:4f:b0:43:5b:72:c6:96:41:5f:2b:58:
                    e7:d6:f6:1c:92:8d:77:57:49:94:79:44:55:c7:87:
                    dd:81:e1:a5:a2:8e:84:4d:f6:81:e9:4f:f6:fa:6e:
                    5f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:DF:9D:A5:7A:61:06:62:49:FE:5E:B6:1F:97:D1:23:09:F9:B9:F9
            X509v3 Authority Key Identifier:
                keyid:AD:D3:EE:C3:31:B7:02:A2:06:B5:4D:FE:90:63:B8:C1:7A:42:B8:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rdPuwzG3AqIGtU3-kGO4wXpCuBw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/fe6f93-b2fc-49e0-be87-34bb710a3478/1/rdPuwzG3AqIGtU3-kGO4wXpCuBw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/fe6f93-b2fc-49e0-be87-34bb710a3478/1/rdPuwzG3AqIGtU3-kGO4wXpCuBw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:af:03:8b:44:72:54:85:4d:5b:28:5e:b4:ab:26:6b:fb:29:
         c1:99:8b:b3:31:2a:cb:7a:9f:ec:d6:21:c2:93:39:f7:1e:19:
         74:a7:e5:df:46:1e:3c:61:bd:0d:e4:1c:41:cb:e4:d7:78:13:
         20:b7:f7:80:54:09:cf:7e:99:6d:e2:a3:9f:f8:50:17:03:ac:
         24:9b:c6:4f:6a:4b:d0:18:26:0b:83:e1:b0:80:5b:70:aa:c7:
         2a:2e:40:a2:47:2b:f1:4c:e2:ae:04:db:b6:de:45:b5:b7:eb:
         31:38:4f:15:0e:51:c9:d6:83:18:3b:d2:98:75:ef:f6:61:78:
         1d:c6:a2:54:21:fc:2f:7a:c0:00:e2:af:c2:f1:8e:13:3d:63:
         cb:ee:44:8d:fc:62:c0:34:8e:2c:a6:3b:32:73:03:0f:02:8c:
         09:54:21:41:4d:8d:5a:29:80:63:22:93:04:d0:06:f5:b4:4e:
         25:60:a9:65:a7:1e:8f:bb:f6:b5:68:f2:e6:00:12:94:26:ec:
         cc:e0:2d:04:db:70:50:dd:73:32:2e:ac:1f:86:c8:66:de:e1:
         e0:aa:e7:c0:30:30:e6:aa:1e:88:af:18:44:d2:b8:25:16:c1:
         ef:31:b1:76:83:d7:84:8f:2e:44:35:c0:4f:52:43:6c:00:0f:
         ab:da:32:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 00:20:59 2026 by rpki-client