Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.mft
File:                     9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.mft (raw, json)
Hash identifier:          73yu4AN87tbGLWRLNOMwcSEhg9zzWmwKLqBZuQmfuLg=
Subject key identifier:   46:87:85:12:55:2D:E9:D2:2C:9D:E2:48:F2:CF:D5:01:55:0D:CA:C8
Authority key identifier: F5:45:0C:63:76:65:5E:EC:1D:D2:DA:4B:D2:1D:5F:10:4A:96:D9:04
Certificate issuer:       /CN=f5450c6376655eec1dd2da4bd21d5f104a96d904
Certificate serial:       01A0BDD4EFB61186F749863EA6FF5188D1C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.mft
Manifest number:          1A23
Signing time:             Sun 20 Sep 2026 08:00:43 +0000
Manifest this update:     Sun 20 Sep 2026 08:00:43 +0000
Manifest next update:     Mon 21 Sep 2026 08:00:43 +0000
Files and hashes:         1: 0QRGc0EXI-lQBeT0bU4OZ48DYZ0.asa (hash: JfJAwIenapSQ+KQhJvpTcNM3dpe6s+7wOt/RIJ+/2/A=)
                          2: 9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.crl (hash: sMiqb0sJfAK04R9NmWqhpMk6AEhaSwzpgNKFSryRvUY=)
                          3: Jtnnu0fDCjNezLwZil_S7l9L48g.roa (hash: DILIlWzW8Mnq/43c0llI+/57QYnncukYSWm1Exl94Z8=)
                          4: M2d3XxtPV8U4RGwdl2KGyoS3tuE.roa (hash: DkLgJR/YV/FTpPRA6z+9XA1zLGuoZB5rGHsCK++smJM=)
                          5: N4sgXJIENkdo_RLGnLrF-Fcp59U.asa (hash: AT1nBYM63y0ZOH6dk3bgxYq+3ptn4jz4ltXZP+PsEv8=)
                          6: nPChezrtLOBmgprgP_Au3oUubuA.asa (hash: NV/9jSIYz9t1/I0H/XairY0//xeZIwsbSFxauIof1kA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 08:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:bd:d4:ef:b6:11:86:f7:49:86:3e:a6:ff:51:88:d1:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5450c6376655eec1dd2da4bd21d5f104a96d904
        Validity
            Not Before: Sep 20 08:00:43 2026 GMT
            Not After : Sep 21 08:00:43 2026 GMT
        Subject: CN=46878512552de9d22c9de248f2cfd501550dcac8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:3e:6e:84:37:94:83:14:f7:aa:03:f8:f5:cc:
                    bf:a0:7e:12:0f:87:28:4f:c8:0f:63:0d:3c:d0:8e:
                    cb:28:49:dc:77:5e:17:f1:f7:fb:31:ed:af:ee:bf:
                    c8:56:83:2c:f6:83:77:11:0b:60:31:94:e0:1b:f6:
                    7b:83:43:f4:0f:17:35:3b:ae:6b:82:a2:fd:50:21:
                    92:e0:30:f5:46:4a:2f:6f:49:90:46:85:06:dd:6b:
                    59:3d:5c:07:2b:84:73:66:01:fe:9c:bc:99:dd:92:
                    7f:9f:70:2f:ee:6c:d5:cf:5f:ed:7c:20:39:fd:03:
                    b6:c8:f8:ec:58:5e:e6:83:98:9e:84:1d:f7:d6:33:
                    bb:cc:90:76:e2:a7:cb:b5:f3:15:93:de:3e:f6:6d:
                    1f:bb:1b:36:2e:bd:3f:b8:0e:47:ad:01:e3:6d:d8:
                    48:54:03:38:4b:da:83:a8:27:a5:61:07:62:c2:ad:
                    6b:6a:08:80:79:7d:85:8b:a1:f0:21:e8:74:cd:80:
                    74:e3:db:d0:56:70:38:b6:4b:b9:65:a1:e5:fb:05:
                    63:10:c2:54:36:96:b2:fa:77:d3:58:fc:c4:4a:a4:
                    4f:7f:c6:31:64:d0:db:c1:26:b2:4a:fc:47:38:98:
                    cf:0a:53:d6:b0:0c:8f:f7:10:d2:3f:30:0a:f0:c9:
                    44:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:87:85:12:55:2D:E9:D2:2C:9D:E2:48:F2:CF:D5:01:55:0D:CA:C8
            X509v3 Authority Key Identifier:
                keyid:F5:45:0C:63:76:65:5E:EC:1D:D2:DA:4B:D2:1D:5F:10:4A:96:D9:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:c3:3a:1e:3d:d6:b6:36:06:19:82:ff:56:f5:18:73:f0:df:
         bc:49:eb:fe:6d:c7:ab:84:2e:8c:6d:1c:2e:74:9c:44:22:94:
         be:dd:f5:22:d7:e0:6f:a0:8a:fb:15:e0:0c:17:63:5c:03:33:
         e0:3d:08:c9:c4:c1:14:f3:81:01:71:d0:af:c1:c0:dd:f5:78:
         b8:f8:1b:28:46:67:f2:2c:01:b7:58:99:11:87:ba:c7:a5:f8:
         07:6d:d4:c7:17:28:85:c8:d0:0c:5e:92:c0:6b:09:dd:b2:59:
         04:5e:ef:49:b8:b4:51:22:4d:cd:97:de:1d:eb:fd:fc:f7:b8:
         a2:23:c1:5b:d0:00:0a:e1:83:c2:85:e0:07:11:2e:06:1b:cf:
         73:e9:d7:c9:bd:5e:9e:ab:22:7b:c8:0c:46:7a:d8:79:e5:b0:
         78:7e:e1:ca:2e:dd:54:62:34:46:98:20:7b:0b:d4:d7:15:dd:
         63:6c:83:d2:9a:73:36:f4:f6:11:4f:17:5b:64:68:38:a5:7d:
         12:2c:c7:3c:cd:7e:78:34:d6:e8:09:02:d7:8d:21:4a:e0:b2:
         9e:d0:55:9d:af:9c:e8:7e:84:c2:59:f9:bb:e2:3d:df:0e:ef:
         45:46:6a:52:4b:ba:92:99:43:76:c0:39:0b:5d:06:e7:90:38:
         e0:d2:3e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 17:22:16 2026 by rpki-client