Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.mft
File:                     Se4RlL2B0ZRsOfEPf9_fItGgMRI.mft (raw, json)
Hash identifier:          Ih5Z/EtSxXpzyKJ7icihAjGLAJbL6bk2utEsJQwqlyY=
Subject key identifier:   39:F5:52:FD:1D:4B:0A:EB:24:FF:E1:3F:8A:78:9B:FA:E3:FE:14:8E
Authority key identifier: 49:EE:11:94:BD:81:D1:94:6C:39:F1:0F:7F:DF:DF:22:D1:A0:31:12
Certificate issuer:       /CN=49ee1194bd81d1946c39f10f7fdfdf22d1a03112
Certificate serial:       01A0C2FBACB013A8326FC48FF69A04D7AD7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Se4RlL2B0ZRsOfEPf9_fItGgMRI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.mft
Manifest number:          19D4
Signing time:             Mon 21 Sep 2026 08:01:08 +0000
Manifest this update:     Mon 21 Sep 2026 08:01:08 +0000
Manifest next update:     Tue 22 Sep 2026 08:01:08 +0000
Files and hashes:         1: 4MLoPrvWwEvlvkXdgMCtTF8VC3E.roa (hash: s0ibJrg3ZFVdVfAiEwCQ+OIFm/y57l65fC2BAHH9VCc=)
                          2: Se4RlL2B0ZRsOfEPf9_fItGgMRI.crl (hash: Lidg/bywlIP8muzdmw4oD99KTzhnRPkXoiBZMpNmTNU=)
                          3: TlmEOt0-y-w49AgNxJOZ0wNCvZ8.roa (hash: 9QB2O9CF6AxN2XHx+5Fgp4F7JBjPl+H/+qk8ZUWd/Og=)
                          4: gJauMi46QPPzyKWqDiA5ddI3Cho.roa (hash: 8cj4UlqGZgB6E6848rUjL+1fRW7cZLYn+yIARbioPjA=)
                          5: hs-AzdnIKl__cAx33Gis1dnFwQw.roa (hash: HkOzeRN5x0MI5F+tRIRhpZumHAlvuvmNzxwstCGaN70=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Se4RlL2B0ZRsOfEPf9_fItGgMRI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 08:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c2:fb:ac:b0:13:a8:32:6f:c4:8f:f6:9a:04:d7:ad:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49ee1194bd81d1946c39f10f7fdfdf22d1a03112
        Validity
            Not Before: Sep 21 08:01:08 2026 GMT
            Not After : Sep 22 08:01:08 2026 GMT
        Subject: CN=39f552fd1d4b0aeb24ffe13f8a789bfae3fe148e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:04:4f:00:cf:b7:cb:f2:fb:c6:f0:f0:b3:9a:
                    8e:eb:86:ec:a3:3e:73:b6:d5:ca:32:4f:58:c5:db:
                    a8:b2:5b:0c:bb:75:a3:df:41:4f:7b:9e:5b:77:49:
                    0e:40:16:20:3e:e2:90:aa:97:21:02:53:6a:8e:c5:
                    c7:6d:5d:c8:ef:6e:db:83:47:1b:7d:20:00:c9:88:
                    50:8e:a8:83:c8:a8:45:de:8a:c7:4e:5b:6a:d9:b7:
                    3b:dd:c2:e5:ac:8e:59:f7:97:cd:9f:62:b4:51:bb:
                    e8:3e:16:09:9f:d1:50:a4:e3:5e:19:5a:fb:84:2d:
                    b1:82:b1:f7:e4:47:ce:a7:93:06:1f:59:ef:82:c5:
                    fb:dd:c9:ac:77:fe:1d:59:f2:33:97:2c:43:a9:ab:
                    bb:3b:12:52:2e:4f:06:11:77:70:e5:d8:93:77:70:
                    d7:0f:28:3d:9e:8f:04:b3:c2:fa:15:7a:0e:35:07:
                    d0:c1:48:bf:4f:ac:9c:e5:ff:22:07:fd:53:7c:67:
                    bd:8b:4d:41:98:12:c3:9d:75:47:32:7a:b5:1c:8f:
                    79:5d:45:68:46:47:0e:2b:2a:8f:24:73:3d:a5:55:
                    29:f8:aa:bd:65:0e:cd:42:c6:90:2a:96:41:c5:44:
                    58:f9:a0:e8:45:e3:bd:2d:98:b1:6e:db:07:4a:5f:
                    fa:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:F5:52:FD:1D:4B:0A:EB:24:FF:E1:3F:8A:78:9B:FA:E3:FE:14:8E
            X509v3 Authority Key Identifier:
                keyid:49:EE:11:94:BD:81:D1:94:6C:39:F1:0F:7F:DF:DF:22:D1:A0:31:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Se4RlL2B0ZRsOfEPf9_fItGgMRI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:08:75:68:f0:46:44:88:dc:ca:28:98:c6:b4:f7:10:ab:36:
         ba:8a:b3:38:96:00:0b:9a:41:4c:c5:52:c9:4a:8c:3d:ce:72:
         12:73:0e:e2:2b:cf:e2:24:3d:5f:72:d3:65:e4:97:7a:cf:7e:
         c7:14:5a:dd:69:e3:7b:37:3b:c9:55:ff:70:51:d4:5e:37:38:
         ea:c0:ad:19:21:cb:d2:ff:ea:6a:89:3e:9e:52:98:18:8e:10:
         e0:98:75:e7:27:88:7d:bc:c7:61:b6:7a:d1:a9:6f:cd:54:b4:
         c5:a3:07:f9:34:96:db:ad:1c:50:12:57:47:41:f1:dd:85:c1:
         98:19:64:54:03:84:4e:6b:0f:09:73:81:b0:f9:d8:95:da:45:
         2e:52:1e:86:5e:5d:45:13:57:76:c8:c8:0c:55:8e:dc:82:95:
         76:ff:24:8a:80:f5:2b:00:65:74:4e:27:d7:ed:36:96:1f:7d:
         f1:fb:09:0e:f8:5a:3d:8e:74:a3:06:80:30:24:68:d6:21:a0:
         64:73:bb:d3:0b:56:d8:8f:7a:25:06:b2:e5:ca:c5:fd:1d:e7:
         fb:22:d2:c2:30:57:b5:ac:8e:79:31:05:21:be:8c:9d:ec:13:
         34:ed:40:b3:72:4e:0f:6c:d9:33:9c:82:94:89:82:84:72:f4:
         7e:3f:54:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:36:10 2026 by rpki-client