Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.mft
File:                     B47RoBU3Yqki5V4PlIzRpUEceok.mft (raw, json)
Hash identifier:          Dl2MFCrb71MWUFNofy7lTn0agwuRaDBjV+xCSfBji0c=
Subject key identifier:   54:5B:A2:B9:C3:0D:F3:98:73:C3:3B:FF:E2:57:DD:B9:EF:2A:EC:D0
Authority key identifier: 07:8E:D1:A0:15:37:62:A9:22:E5:5E:0F:94:8C:D1:A5:41:1C:7A:89
Certificate issuer:       /CN=078ed1a0153762a922e55e0f948cd1a5411c7a89
Certificate serial:       01A0C7461282C3213FF588ECED3060DD1B6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B47RoBU3Yqki5V4PlIzRpUEceok.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.mft
Manifest number:          15D7
Signing time:             Tue 22 Sep 2026 04:00:53 +0000
Manifest this update:     Tue 22 Sep 2026 04:00:53 +0000
Manifest next update:     Wed 23 Sep 2026 04:00:53 +0000
Files and hashes:         1: B47RoBU3Yqki5V4PlIzRpUEceok.crl (hash: GRWKIv31zE4QsP3KxrtXUjkobYI/vlyc+RUwlFJ1WVc=)
                          2: aj-7Q6-jz1X5ml3Zo_ezji9nyp0.roa (hash: ctiS31QHzRCLWu4eXUhOOHg5pxlmeJ2+c2/2FvVGuLc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B47RoBU3Yqki5V4PlIzRpUEceok.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 04:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c7:46:12:82:c3:21:3f:f5:88:ec:ed:30:60:dd:1b:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=078ed1a0153762a922e55e0f948cd1a5411c7a89
        Validity
            Not Before: Sep 22 04:00:53 2026 GMT
            Not After : Sep 23 04:00:53 2026 GMT
        Subject: CN=545ba2b9c30df39873c33bffe257ddb9ef2aecd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:fe:e6:ff:d3:c1:e6:45:7b:c2:8c:8f:96:01:
                    3d:62:2a:2d:1d:e2:8e:c4:a7:b6:38:49:7c:88:90:
                    ed:1b:99:40:bc:38:53:45:56:5c:28:22:ce:96:b1:
                    22:d9:ef:25:98:d2:2e:a0:f2:94:c1:86:8b:e2:dc:
                    d1:31:21:5d:ab:d8:c3:88:62:07:dd:04:fb:b9:59:
                    da:00:ca:72:ce:8e:55:fd:dc:ea:bb:53:c3:34:24:
                    a9:7e:ce:6f:79:74:c2:16:3a:6d:87:d7:24:e8:9c:
                    12:5b:cd:e8:ad:84:f8:68:d0:d6:06:7a:85:68:7b:
                    57:5b:86:99:44:8b:8e:cc:12:49:68:e3:cc:a3:52:
                    54:a9:0b:01:42:9b:96:f2:ba:6a:1d:1f:c1:5a:ea:
                    e2:57:01:92:82:61:c0:51:7a:2f:bc:4a:7c:91:c7:
                    88:61:a3:e2:6c:3c:19:63:6e:2e:03:cc:46:ce:4b:
                    b5:13:da:fb:85:34:1a:cc:00:16:a6:a0:08:12:cf:
                    ac:15:e5:ea:69:0f:ab:c7:2b:42:88:34:d1:47:4e:
                    11:c1:0e:48:71:4a:93:d2:70:b6:eb:b6:90:6e:01:
                    ab:10:ff:98:97:7d:72:4b:19:15:1a:3b:bb:4c:e2:
                    49:62:f5:1d:cc:5a:33:36:7d:e9:76:ae:ed:29:b6:
                    a7:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:5B:A2:B9:C3:0D:F3:98:73:C3:3B:FF:E2:57:DD:B9:EF:2A:EC:D0
            X509v3 Authority Key Identifier:
                keyid:07:8E:D1:A0:15:37:62:A9:22:E5:5E:0F:94:8C:D1:A5:41:1C:7A:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B47RoBU3Yqki5V4PlIzRpUEceok.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:01:b2:66:df:9f:37:bb:30:b7:03:78:1c:0f:5b:67:e3:c0:
         d0:6a:f0:91:85:1d:fe:ad:e2:f6:e2:63:4d:33:da:d6:ab:b2:
         b9:03:7f:ee:5e:c7:28:4e:f7:31:58:4d:28:69:0d:6f:c8:46:
         ab:a7:b5:50:e9:88:1e:13:b2:c1:c4:5f:99:3d:e7:21:30:da:
         95:bf:f8:ac:0d:fa:5f:d2:1b:da:97:95:8d:90:8e:a0:7e:e7:
         17:85:4f:23:24:bd:b1:60:0c:63:6c:8a:3e:dc:2e:97:b7:a7:
         1f:8a:7b:8e:e8:8f:6c:a6:fb:ae:8e:28:0e:28:3a:5b:17:88:
         20:26:ad:b7:7e:3e:d9:37:f0:36:49:ff:94:6c:9a:15:91:76:
         ae:33:05:70:2e:db:90:9e:f9:a3:01:07:ae:44:a4:d5:cf:66:
         4e:36:1e:49:fb:af:33:3c:5a:86:9a:60:ff:1d:74:dd:d6:ea:
         ba:85:38:e4:f3:aa:18:f3:51:5a:de:09:0b:f1:8c:2b:f2:69:
         11:ec:a4:8c:ed:b8:c0:d6:9e:a9:a6:52:3f:d7:ae:e3:92:63:
         a5:a0:9e:c5:de:79:7c:c2:54:c9:83:8f:14:8a:fe:2a:e3:93:
         95:b8:3c:6b:28:84:c4:17:5d:e3:02:24:6f:63:3d:64:7a:19:
         f4:8c:3c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 15:57:39 2026 by rpki-client