Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.mft
File:                     4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.mft (raw, json)
Hash identifier:          3/UjpqDFb3OkH7LOudA2JlbJznmLu9cpfxeXTjibUTw=
Subject key identifier:   7C:BA:C3:1E:99:55:98:C7:D9:B1:A9:36:DC:F3:8E:63:65:5A:B8:D9
Authority key identifier: E2:60:B0:A5:5A:87:A6:6E:90:A7:46:3A:01:DA:64:14:FC:03:4D:3D
Certificate issuer:       /CN=e260b0a55a87a66e90a7463a01da6414fc034d3d
Certificate serial:       01A0C66A3176709224EAF68867384DBED0CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.mft
Manifest number:          076A
Signing time:             Tue 22 Sep 2026 00:00:43 +0000
Manifest this update:     Tue 22 Sep 2026 00:00:43 +0000
Manifest next update:     Wed 23 Sep 2026 00:00:43 +0000
Files and hashes:         1: 4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.crl (hash: n3IOR83a/BEAGiOBJCCIajrMPKELVkf3/nF4+mSd4GA=)
                          2: 9m6XpGENN_Zc7gu4DZLgz-bFG_8.roa (hash: /mTzPbGMqBx+64njFbuyJLyG64tSV59h469Ll6ebv7Y=)
                          3: KEIqtKdHOr2xFwyul2M4Mj3OCXg.roa (hash: 3sxiPnrD0Gc6fzs8KkM4ayt1dKyCeKq1vgI2Ien7IrU=)
                          4: a7LWLvfWgtFn-hlQ7rePCg-poYE.roa (hash: VgwZIwqUK5p5zdClmFKprg0jOARykjuW1KNUaPMDVgs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 00:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c6:6a:31:76:70:92:24:ea:f6:88:67:38:4d:be:d0:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e260b0a55a87a66e90a7463a01da6414fc034d3d
        Validity
            Not Before: Sep 22 00:00:43 2026 GMT
            Not After : Sep 23 00:00:43 2026 GMT
        Subject: CN=7cbac31e995598c7d9b1a936dcf38e63655ab8d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e3:92:86:16:b6:05:d4:5c:eb:eb:b9:4c:db:
                    30:0c:ea:bc:25:7e:f3:94:6e:50:49:76:b7:63:d6:
                    17:8a:48:79:9a:df:39:27:7a:bd:18:c0:85:0f:46:
                    82:50:de:37:aa:ec:7b:fc:8a:2a:ea:a7:4c:28:a1:
                    e7:ed:01:32:2b:0c:39:dc:72:43:17:b8:20:5d:5b:
                    63:91:8e:e2:77:44:8a:30:26:28:2e:f3:e0:b4:3a:
                    15:69:7f:2b:31:69:96:48:12:45:7e:08:b2:88:b0:
                    60:b5:8c:e0:4a:12:70:27:6d:84:03:15:31:0b:3a:
                    22:d2:81:cc:92:fa:75:b2:db:9e:7a:b0:4e:24:41:
                    d7:fe:f4:e6:b1:12:0c:c7:93:65:53:fa:33:3e:db:
                    bd:81:d9:4b:89:5a:28:f4:6a:20:aa:a9:5a:47:d0:
                    59:9b:c6:16:f7:7f:ad:2c:6a:7e:d8:82:68:ee:a7:
                    27:ea:23:04:a5:01:ee:8d:e3:43:da:0b:ed:31:62:
                    fa:62:85:17:6e:16:17:b3:50:af:ce:48:1a:b9:dc:
                    89:a6:37:36:b3:c2:90:2d:c7:70:a2:3b:1c:4a:63:
                    88:8f:32:1d:59:e2:23:65:b9:24:7f:b7:8c:0f:bd:
                    c0:05:a5:db:07:f5:d7:a2:4f:8b:03:a2:6a:e2:ea:
                    6a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:BA:C3:1E:99:55:98:C7:D9:B1:A9:36:DC:F3:8E:63:65:5A:B8:D9
            X509v3 Authority Key Identifier:
                keyid:E2:60:B0:A5:5A:87:A6:6E:90:A7:46:3A:01:DA:64:14:FC:03:4D:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:93:73:67:78:f0:e8:52:ff:b0:ac:06:61:d9:98:3f:26:ad:
         bf:2a:3d:66:4d:54:ea:6b:db:6c:c2:8d:0e:18:29:a2:d0:e9:
         98:9b:b5:2e:99:7e:0c:c7:c2:7f:b6:d3:90:a0:2a:b2:08:42:
         c4:48:ca:3a:60:76:ff:69:2e:89:6c:51:ab:83:9f:68:8f:3d:
         f6:23:af:67:d7:0c:1a:d2:8a:3e:2a:e5:25:f4:83:38:77:28:
         13:ee:d2:b3:5c:1e:01:eb:98:20:47:a2:c1:6b:3c:3a:3a:d9:
         e5:25:60:4e:08:26:55:27:31:fc:35:83:5e:6a:08:fc:fe:f7:
         06:46:48:28:1a:b2:9f:54:cd:ac:69:fb:5e:b6:fa:fb:57:45:
         02:65:79:c0:70:ce:e1:b8:8d:8b:73:f5:86:20:f8:ce:0f:13:
         bf:f3:45:69:94:e6:8c:1b:cf:7c:3b:89:84:5d:ff:20:ce:66:
         5a:bd:89:80:80:5c:fd:cf:a1:f3:30:b4:d6:69:cb:32:4a:aa:
         c6:96:28:98:54:28:bf:5c:f9:48:0f:87:71:4c:68:2b:1b:ba:
         d1:a9:23:48:44:5f:32:0c:4d:1a:aa:eb:a0:65:c6:66:30:ba:
         05:2d:db:f0:d8:4f:17:23:52:c0:6e:e2:91:c7:7a:a4:0b:25:
         32:90:84:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:29:30 2026 by rpki-client