Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.mft
File:                     _rhNn4-eMxVliaXr9yIgOomeClE.mft (raw, json)
Hash identifier:          /xSR0Y/5JWqeidwlBBGWvk/KEFk6E4tAJACJ9U5DGm8=
Subject key identifier:   B1:77:88:DD:2C:B2:1C:29:55:CA:A2:56:4F:B8:80:FE:1F:19:CE:E1
Authority key identifier: FE:B8:4D:9F:8F:9E:33:15:65:89:A5:EB:F7:22:20:3A:89:9E:0A:51
Certificate issuer:       /CN=feb84d9f8f9e33156589a5ebf722203a899e0a51
Certificate serial:       01A0C8C6B85829F0A742AC2AB7D5F235CB74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.mft
Manifest number:          142C
Signing time:             Tue 22 Sep 2026 11:01:01 +0000
Manifest this update:     Tue 22 Sep 2026 11:01:01 +0000
Manifest next update:     Wed 23 Sep 2026 11:01:01 +0000
Files and hashes:         1: 1-s2FwRU1cILMfQySWQfwcbHn_7o.roa (hash: UgSoVXkhi39b02jH0/DTm5YU1hz+Ulacw53OQOOrWw0=)
                          2: 2IHxfDPgXpqFUuW2HHMtTesRlVk.roa (hash: 6i0KTZ22dHSsBD0sAIXWyUQ8dif7FeqnVvrlTF59RFs=)
                          3: 4QIYNLjhyvhK4DwD1cHr9Pj0R58.roa (hash: XPr5OKAgKFKe1eZm26Sq5h71zoMCowi3Bq7tv1xOx7I=)
                          4: IxunR-Pdcuvk1jm6CIfNmD9FR0A.roa (hash: /ZeIN8hMhU2WBWfg67KgPG/YjL9Vb0bRB9lW2bQsIk8=)
                          5: _rhNn4-eMxVliaXr9yIgOomeClE.crl (hash: s07Rh9CbCNP6nvP68/KHDohOCyKO5Y8GUw3mzIJZ0Zg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 05:59:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c8:c6:b8:58:29:f0:a7:42:ac:2a:b7:d5:f2:35:cb:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=feb84d9f8f9e33156589a5ebf722203a899e0a51
        Validity
            Not Before: Sep 22 11:01:01 2026 GMT
            Not After : Sep 23 11:01:01 2026 GMT
        Subject: CN=b17788dd2cb21c2955caa2564fb880fe1f19cee1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:a5:dc:e5:41:9f:6a:2c:f1:93:28:ce:5e:a9:
                    a5:74:5c:f4:4b:5c:c7:75:a3:b9:8c:85:fa:d3:55:
                    10:f3:0f:e1:3b:4d:48:a0:95:93:1d:12:be:7c:11:
                    a7:29:e5:88:3e:f1:9e:a0:6a:2a:e3:42:bb:bd:15:
                    b9:57:68:4c:68:64:3c:c4:cf:5c:97:8e:3f:5a:bf:
                    5f:78:5a:a3:e7:40:0b:3b:bd:39:73:0e:02:cd:28:
                    58:89:a4:4f:c9:59:66:65:74:33:51:0c:3c:c6:4b:
                    c4:98:91:f4:7e:bf:88:c2:f8:c8:c9:c7:23:b4:85:
                    36:c3:40:b2:8e:23:9c:0c:b1:f5:ea:7a:90:ca:c9:
                    85:49:b4:a8:3c:e8:c0:32:4c:aa:ea:eb:8b:c0:cf:
                    89:97:34:aa:2e:91:6b:0e:a8:a3:64:f0:97:34:23:
                    cd:81:de:5f:f3:a4:60:07:97:a7:3b:51:cf:cc:5f:
                    f2:2c:61:d8:8e:db:a5:f0:95:e0:16:2e:83:4e:83:
                    45:bc:4f:cd:a2:4f:44:cd:46:23:c7:9f:a1:4d:46:
                    f9:9f:30:85:46:29:89:44:b1:6e:63:83:8e:93:46:
                    11:17:5b:88:2e:ed:cb:5f:fe:72:f1:65:4d:77:b2:
                    06:a9:c1:8d:81:e5:86:fd:1d:ed:c0:6f:0e:ca:00:
                    ef:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:77:88:DD:2C:B2:1C:29:55:CA:A2:56:4F:B8:80:FE:1F:19:CE:E1
            X509v3 Authority Key Identifier:
                keyid:FE:B8:4D:9F:8F:9E:33:15:65:89:A5:EB:F7:22:20:3A:89:9E:0A:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:ae:79:96:40:43:79:59:be:68:0b:5a:bc:c3:e1:9f:fb:90:
         d9:8b:e1:31:af:9b:c0:e8:f1:ce:6f:aa:e4:38:9d:08:94:cf:
         a0:99:c9:40:d3:18:6c:44:ce:ac:6f:b7:8d:be:37:05:18:54:
         be:54:c2:1f:10:60:f2:09:81:7f:80:3d:b8:50:8a:bc:8d:78:
         06:d6:63:61:58:36:b5:bd:9c:72:c3:a0:06:ac:f8:2f:8e:19:
         d0:d3:61:ca:54:e6:54:19:7a:17:50:1b:92:2c:5b:19:e6:68:
         28:ce:25:82:0b:ac:6d:80:9e:44:c4:58:b9:31:31:1e:6e:4a:
         0a:6b:ef:e5:b5:f1:97:2a:65:c2:db:1a:f0:4e:b1:ab:f7:89:
         83:f6:51:5b:65:e6:6a:56:12:10:be:03:8b:cd:8d:f9:54:8b:
         01:27:69:c4:71:9e:b5:c0:67:1c:2a:e5:a0:b0:eb:bd:d6:8b:
         38:e7:25:7b:2a:eb:07:da:94:40:42:7e:43:1b:d6:ac:e0:f6:
         26:54:a0:a5:58:11:8d:b7:65:aa:52:be:8d:56:04:8d:ed:f7:
         f0:98:7f:1d:58:5a:ef:4b:ef:b9:c1:e9:1c:00:29:13:80:5e:
         42:50:e1:14:68:ed:49:fc:f3:97:89:52:a9:2d:13:78:f5:7c:
         af:85:9b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:01:57 2026 by rpki-client