Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/0Bn0FfwpzBL6AmrIPTEA9uIJIUg.mft
File:                     0Bn0FfwpzBL6AmrIPTEA9uIJIUg.mft (raw, json)
Hash identifier:          LqQNJ0RJ+LV8CcYpmdgkgz32Tm2nfH8j3L2tE7OF/6I=
Subject key identifier:   02:A5:04:DD:73:06:14:F6:39:8F:D2:61:58:73:EB:79:2C:D7:DC:5E
Authority key identifier: D0:19:F4:15:FC:29:CC:12:FA:02:6A:C8:3D:31:00:F6:E2:09:21:48
Certificate issuer:       /CN=d019f415fc29cc12fa026ac83d3100f6e2092148
Certificate serial:       01A0EB8A2CFB5F2A78A531455A1CFEEB0E6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Bn0FfwpzBL6AmrIPTEA9uIJIUg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/0Bn0FfwpzBL6AmrIPTEA9uIJIUg.mft
Manifest number:          F4
Signing time:             Tue 29 Sep 2026 05:01:36 +0000
Manifest this update:     Tue 29 Sep 2026 05:01:36 +0000
Manifest next update:     Wed 30 Sep 2026 05:01:36 +0000
Files and hashes:         1: 0Bn0FfwpzBL6AmrIPTEA9uIJIUg.crl (hash: OkxID3CC5WCM0b7QRkqXtnGPZBacPCUfBU4ZhqEluhM=)
                          2: AzhaPPvPxNiGq157vVJ0SmVSylU.roa (hash: vBr8RZJ/KmDM3/LGeI+13Tr4woX1yQS7FNlR960bnRs=)
                          3: k2lMS0v-8ZOf1E11BS_9RMujfm8.roa (hash: JibFIlzou9UGAFwxOZbWBeEjMFoRGWPGctFSJs0fRL0=)
                          4: tBJ6g2XuB0MmvtUrV3mMYaonUfs.roa (hash: jt5pW5SGqOIlEHsV/lDRSmGfV+5btvSi3I+Lq6T23f0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/0Bn0FfwpzBL6AmrIPTEA9uIJIUg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/0Bn0FfwpzBL6AmrIPTEA9uIJIUg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Bn0FfwpzBL6AmrIPTEA9uIJIUg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 05:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:eb:8a:2c:fb:5f:2a:78:a5:31:45:5a:1c:fe:eb:0e:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d019f415fc29cc12fa026ac83d3100f6e2092148
        Validity
            Not Before: Sep 29 05:01:36 2026 GMT
            Not After : Sep 30 05:01:36 2026 GMT
        Subject: CN=02a504dd730614f6398fd2615873eb792cd7dc5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:cf:f8:82:8a:35:3e:8f:5f:7e:60:b9:30:9e:
                    7c:cd:23:30:8d:69:17:48:64:e8:79:18:74:40:80:
                    db:64:04:82:ec:44:51:4c:b2:d5:25:03:0d:55:98:
                    de:55:b9:ae:6a:18:aa:18:bf:3f:8a:a5:1e:4e:d6:
                    6a:75:7a:68:aa:4f:7f:1c:08:9c:70:2a:ad:16:ed:
                    54:1f:61:09:2d:79:96:a5:86:15:2a:cb:ec:04:2b:
                    01:fc:ee:63:f1:87:7e:76:42:7f:8c:7b:88:85:4b:
                    3a:c9:36:c8:41:72:89:c5:67:6c:25:15:29:bb:3c:
                    98:5e:ba:24:34:84:53:d4:cc:a6:ec:be:39:b6:37:
                    4e:83:e2:44:8d:93:31:36:75:e7:7e:74:a3:a4:89:
                    f6:a2:24:08:a6:32:80:cd:f9:1c:bc:2d:a6:2b:ee:
                    ce:fa:3c:c7:25:32:06:9c:1e:4b:1a:80:7c:d0:c6:
                    66:8f:1e:20:59:61:51:8b:0b:bf:31:c0:33:74:f6:
                    e8:40:e9:46:b7:96:db:6f:7a:28:4b:1e:99:f7:bc:
                    8e:fe:89:6c:61:61:e3:c5:13:0a:26:8e:7d:b3:b1:
                    c3:fc:cc:b3:df:c7:ae:6a:ab:17:20:dc:ff:5a:34:
                    c3:ee:75:57:8b:60:13:a7:22:95:8a:fb:ab:be:22:
                    19:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:A5:04:DD:73:06:14:F6:39:8F:D2:61:58:73:EB:79:2C:D7:DC:5E
            X509v3 Authority Key Identifier:
                keyid:D0:19:F4:15:FC:29:CC:12:FA:02:6A:C8:3D:31:00:F6:E2:09:21:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Bn0FfwpzBL6AmrIPTEA9uIJIUg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/0Bn0FfwpzBL6AmrIPTEA9uIJIUg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/0Bn0FfwpzBL6AmrIPTEA9uIJIUg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:3b:1f:9e:dc:37:db:d8:2d:1c:d9:86:1d:02:89:95:36:78:
         de:65:35:e6:d3:01:ce:aa:b0:92:68:7c:bb:7e:5c:fd:bd:13:
         fe:29:21:75:80:bd:00:4f:a4:1b:b4:86:64:f1:c5:48:bd:4e:
         f6:8c:74:71:d1:1c:60:e4:f0:87:38:c9:1d:9b:78:9f:a6:05:
         1b:bb:c1:c5:a1:20:31:05:b6:ad:a1:26:a8:db:39:66:ba:65:
         55:1f:13:52:32:34:53:29:06:00:f6:39:d2:42:db:44:f6:56:
         bc:1b:58:ca:94:ab:65:48:ee:cf:bf:d4:3e:59:af:cb:4e:a3:
         94:97:7f:85:7b:da:66:de:83:22:e0:57:0a:d8:da:0f:61:51:
         db:a2:f0:8c:34:80:81:31:b9:70:8e:ef:93:08:fe:9a:3a:4e:
         40:0b:5c:72:97:4c:f8:4c:6e:0c:15:8b:d9:c4:31:31:51:33:
         af:72:44:dc:52:db:61:9f:6e:a2:3f:1b:0e:56:23:92:a2:4f:
         ca:a5:50:a5:07:44:78:2d:c9:af:85:1e:58:48:44:bb:d6:ae:
         6f:28:1a:a9:25:e1:19:b4:8b:c1:ba:7e:e6:80:6f:c3:28:c4:
         54:3d:3f:da:1a:aa:7f:ab:2c:9d:79:7a:25:32:43:0f:3a:52:
         d4:7e:13:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 13:10:33 2026 by rpki-client