Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft
File:                     4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft (raw, json)
Hash identifier:          9b9GYPJH63ms7mlTm4TGo3WT9QYM5JDdNPSqjP7VmOs=
Subject key identifier:   B5:1C:5C:F7:A7:90:F8:A2:1F:73:50:1F:A0:2B:90:BD:38:8E:68:42
Authority key identifier: E0:0C:7A:C5:6B:11:E1:04:AB:B1:67:BB:1A:B3:79:2B:3F:A7:C3:D3
Certificate issuer:       /CN=e00c7ac56b11e104abb167bb1ab3792b3fa7c3d3
Certificate serial:       01A0C77C721D98A609445FB36F03673714E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft
Manifest number:          1775
Signing time:             Tue 22 Sep 2026 05:00:16 +0000
Manifest this update:     Tue 22 Sep 2026 05:00:16 +0000
Manifest next update:     Wed 23 Sep 2026 05:00:16 +0000
Files and hashes:         1: 4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.crl (hash: ajCfcYn5WvmN54hU35u8USqMy4zCGOfKrANOqF29aac=)
                          2: BdqGs3R6xCnjEwShLrflyZwaVp0.roa (hash: RR88JIqbu0K/mTZcvwGkA42FVlGztgnaWCqdDikFkjg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 05:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c7:7c:72:1d:98:a6:09:44:5f:b3:6f:03:67:37:14:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e00c7ac56b11e104abb167bb1ab3792b3fa7c3d3
        Validity
            Not Before: Sep 22 05:00:16 2026 GMT
            Not After : Sep 23 05:00:16 2026 GMT
        Subject: CN=b51c5cf7a790f8a21f73501fa02b90bd388e6842
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:45:a7:9c:1b:2f:b0:48:26:09:62:d0:d8:e6:
                    15:22:ab:06:b7:d8:af:fd:4b:2b:90:30:b0:f3:ce:
                    80:05:06:b8:b9:57:89:bd:a1:87:00:07:df:4a:f7:
                    3b:6a:2a:4e:6f:41:72:3d:8f:e9:23:57:47:a0:9b:
                    ec:2f:81:e9:84:7e:a8:68:4a:67:d9:d7:35:53:35:
                    5b:9c:1c:ab:4f:06:0c:34:a8:dc:b0:a5:f8:13:6c:
                    30:96:a3:f1:14:96:b9:7a:ad:15:4a:c3:38:9f:86:
                    39:a3:ed:c2:b0:55:ee:c8:47:dc:0f:2b:1f:0f:4b:
                    41:d3:cf:1f:73:99:b8:c1:9e:d8:6c:05:f5:82:d9:
                    ac:7b:da:48:39:df:1c:e0:37:3a:ea:f4:e7:ff:13:
                    47:b4:1a:9c:d5:67:0a:56:f4:18:99:69:49:5f:1d:
                    03:03:7e:22:3b:99:08:ef:30:70:cb:3b:5c:83:7c:
                    45:a6:39:39:89:86:82:07:46:a2:ae:af:48:7b:31:
                    89:cd:18:b7:04:6a:c0:11:c9:9b:98:c8:76:24:5c:
                    95:9a:b5:3e:ee:67:e9:18:4f:cd:e4:db:74:83:a5:
                    e7:88:bd:a9:39:72:8e:5c:07:9a:3c:d6:cf:c5:a0:
                    99:36:83:5f:dd:ae:83:22:a1:b0:03:39:b7:c8:41:
                    ad:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:1C:5C:F7:A7:90:F8:A2:1F:73:50:1F:A0:2B:90:BD:38:8E:68:42
            X509v3 Authority Key Identifier:
                keyid:E0:0C:7A:C5:6B:11:E1:04:AB:B1:67:BB:1A:B3:79:2B:3F:A7:C3:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:10:87:b7:3e:db:00:f9:2a:bc:f0:e2:35:d3:7e:a2:59:1d:
         95:5f:82:ac:c2:4a:fa:44:d2:33:aa:de:a8:b2:57:98:90:24:
         2a:38:43:e7:52:9c:90:72:8c:7c:c9:54:db:cc:e2:63:5a:6b:
         4c:d4:1c:7d:c5:3c:98:84:91:c5:8d:8d:fc:32:7c:3e:98:86:
         d9:4b:d5:d1:c8:67:76:23:fd:83:ed:3e:45:a1:b2:eb:20:9f:
         64:01:fa:ad:57:1f:b2:98:df:e8:e9:a3:ea:f8:31:da:df:3b:
         35:8f:83:a5:83:8a:15:31:87:cc:63:a0:4b:f1:a0:41:d7:78:
         80:5e:3a:a0:b4:f6:a4:68:53:9e:e1:e1:4a:e1:80:1a:15:84:
         c3:75:3a:b4:bf:63:38:ac:25:b3:bd:51:4f:3b:44:84:1d:ad:
         ff:62:e7:bb:e2:c3:7a:25:89:c1:e8:ca:c1:60:85:07:f7:04:
         d4:72:a6:bf:11:cf:96:c2:4f:3b:de:c1:f3:91:dd:19:9d:17:
         62:a7:38:01:f2:82:3a:53:a6:4a:26:45:a3:1a:7f:70:89:1e:
         3d:26:b6:0f:f9:14:2e:95:c0:17:92:20:03:35:bf:0d:83:2b:
         4d:df:92:99:22:dd:2b:65:0c:ff:b2:c8:74:0b:29:a4:45:1b:
         77:07:7a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:32:51 2026 by rpki-client