Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/pQyvnDYd70jAkzMhvgUYOoOnv8k.mft
File:                     pQyvnDYd70jAkzMhvgUYOoOnv8k.mft (raw, json)
Hash identifier:          i5K1U8LxmQexTSuUyBR1FPIkumqjH7ev6hX6RgUiRvU=
Subject key identifier:   4E:D2:75:08:FA:7C:D9:9A:4A:A6:5C:20:AE:05:C3:9C:B8:B7:93:02
Authority key identifier: A5:0C:AF:9C:36:1D:EF:48:C0:93:33:21:BE:05:18:3A:83:A7:BF:C9
Certificate issuer:       /CN=a50caf9c361def48c0933321be05183a83a7bfc9
Certificate serial:       01A0C66A806D6B7972E0F3FBA105E545201C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pQyvnDYd70jAkzMhvgUYOoOnv8k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/pQyvnDYd70jAkzMhvgUYOoOnv8k.mft
Manifest number:          E0
Signing time:             Tue 22 Sep 2026 00:01:03 +0000
Manifest this update:     Tue 22 Sep 2026 00:01:03 +0000
Manifest next update:     Wed 23 Sep 2026 00:01:03 +0000
Files and hashes:         1: 1-iqZ8I8kLhheHEAx_o50Ayvr-Dk.roa (hash: RfgagCxpiboTY2NkZbT0w4RqzTNQPKbpNiSQymddl4Y=)
                          2: 3zKqo9tzrDFHKj_Xn74CQ7Zp0Yw.roa (hash: /LFq1WNtpzmrSy4DHyV2230+6XSjlYq34txavrXU1wA=)
                          3: FjAjA5JSu9iSdMI9FTN4lABeYFw.roa (hash: kvmXzF7dgjne11SruvyJWpKtLvX+cnEpTrh80qXwd0A=)
                          4: L6k0aUmuwnQNi--cnPyE6qY9xE0.roa (hash: BzVcOMvfoDVOdx3fvQjFRnCNO4lIJ0/eNlnIvFlQ6RI=)
                          5: pQyvnDYd70jAkzMhvgUYOoOnv8k.crl (hash: eB+I/IMkrgjIiUW7AXvECd1AI7ZIIMtzMgxUvbZu5gs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/pQyvnDYd70jAkzMhvgUYOoOnv8k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/pQyvnDYd70jAkzMhvgUYOoOnv8k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pQyvnDYd70jAkzMhvgUYOoOnv8k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c6:6a:80:6d:6b:79:72:e0:f3:fb:a1:05:e5:45:20:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a50caf9c361def48c0933321be05183a83a7bfc9
        Validity
            Not Before: Sep 22 00:01:03 2026 GMT
            Not After : Sep 23 00:01:03 2026 GMT
        Subject: CN=4ed27508fa7cd99a4aa65c20ae05c39cb8b79302
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:44:a3:be:b1:0a:ef:fa:d4:55:c6:7b:e5:da:
                    67:82:3f:a4:1a:04:48:e7:83:de:e6:1a:d2:66:c9:
                    db:09:1a:5e:93:73:46:a0:9c:8e:b6:f6:6b:45:60:
                    a5:5e:b3:40:32:73:69:17:f7:1b:18:c6:09:05:15:
                    d3:56:98:a7:9b:8d:d7:97:c3:2d:24:8f:ca:02:d6:
                    ef:f4:c1:da:b8:ef:c3:df:d4:38:86:ba:38:53:44:
                    84:3d:d7:34:33:02:40:7b:8b:9d:ac:11:34:25:ad:
                    90:36:73:4c:57:f3:91:45:41:e8:8b:c4:de:81:bb:
                    b9:df:a0:99:aa:ab:21:24:0b:04:78:2c:bd:e7:67:
                    37:d9:e1:a7:13:49:fc:a9:31:d0:70:ff:01:58:cc:
                    62:74:42:a3:e4:ca:c6:9e:c2:6f:20:31:68:15:4f:
                    04:d9:2d:0a:7c:0c:9e:e4:ed:d5:26:9c:67:67:12:
                    c2:6c:b1:61:d8:b3:40:a3:cd:b2:52:96:58:99:3d:
                    7d:f7:f4:7e:09:d5:ef:f3:25:3c:3d:bc:6d:47:52:
                    c0:d4:12:8d:75:80:8e:1e:dd:94:d0:34:69:19:d8:
                    29:16:18:90:47:31:ca:24:52:3a:81:13:70:f0:73:
                    6c:de:6f:80:52:f3:28:62:8b:c2:d7:cf:94:44:d8:
                    54:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:D2:75:08:FA:7C:D9:9A:4A:A6:5C:20:AE:05:C3:9C:B8:B7:93:02
            X509v3 Authority Key Identifier:
                keyid:A5:0C:AF:9C:36:1D:EF:48:C0:93:33:21:BE:05:18:3A:83:A7:BF:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQyvnDYd70jAkzMhvgUYOoOnv8k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/pQyvnDYd70jAkzMhvgUYOoOnv8k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/pQyvnDYd70jAkzMhvgUYOoOnv8k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:07:e8:43:ee:e8:35:7b:e3:83:8a:dc:52:9d:5b:44:c1:d7:
         cf:75:88:5f:16:45:3a:9f:63:9d:e6:5e:7c:b9:23:67:6c:1a:
         18:25:38:98:17:e0:3e:e2:7a:7a:8b:e8:54:d4:b7:58:ae:b5:
         ff:1f:cd:0b:b1:a9:82:8a:e3:b3:78:60:46:8a:47:3a:31:38:
         f8:b1:f6:b7:be:6b:a3:88:cc:d2:9a:2e:da:94:13:5b:0b:a6:
         0c:a2:0a:0e:ef:eb:72:3e:de:f8:8c:4b:f0:ce:9b:2c:34:01:
         90:96:02:ff:a5:a5:f8:8c:02:35:6f:15:aa:4c:bc:55:f9:30:
         ff:91:9d:6c:7b:9e:29:d3:10:ed:86:1e:b4:fd:84:e1:7b:2d:
         76:5d:db:3b:7d:06:80:52:72:7d:92:10:a8:ee:e7:4b:39:4c:
         e7:c3:ff:a3:96:2b:2e:f4:1f:ba:a7:3a:d1:91:64:83:ff:19:
         0e:00:20:25:09:83:6a:2b:27:e1:42:f1:53:31:27:fa:ee:82:
         f3:4b:3e:dc:79:1e:17:95:56:57:1a:61:b7:88:ab:61:e4:92:
         15:7c:b2:21:fd:3e:45:a0:8a:fc:8f:72:61:7b:d6:cd:0c:aa:
         bd:14:36:e7:28:27:88:b5:4b:72:c5:f6:be:c0:18:52:81:16:
         24:2c:bf:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:48:06 2026 by rpki-client