Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/3dd6c3-69c9-45b0-9ce6-b46d072f60f4/1/c4cmY_zX_q1wXIdpEa0BoyfXvus.mft
File:                     c4cmY_zX_q1wXIdpEa0BoyfXvus.mft (raw, json)
Hash identifier:          XjeyaNRL31AzJYU1fARVwvycVMOneCLatsX1zvBBrSs=
Subject key identifier:   F2:5A:56:47:81:03:FA:32:1F:56:BE:21:A2:D8:4C:2B:37:3B:D1:4C
Authority key identifier: 73:87:26:63:FC:D7:FE:AD:70:5C:87:69:11:AD:01:A3:27:D7:BE:EB
Certificate issuer:       /CN=73872663fcd7fead705c876911ad01a327d7beeb
Certificate serial:       01A0D94D69364B3C727A61ADCF8035F31356
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c4cmY_zX_q1wXIdpEa0BoyfXvus.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/3dd6c3-69c9-45b0-9ce6-b46d072f60f4/1/c4cmY_zX_q1wXIdpEa0BoyfXvus.mft
Manifest number:          0130
Signing time:             Fri 25 Sep 2026 16:02:03 +0000
Manifest this update:     Fri 25 Sep 2026 16:02:03 +0000
Manifest next update:     Sat 26 Sep 2026 16:02:03 +0000
Files and hashes:         1: AptVZmy3_ItS_TkajqAe7kmL-_g.roa (hash: RA6pgWpcf8eG2XE0T6xxg33Mvuf+5VmFUkJi/0cT6G8=)
                          2: c4cmY_zX_q1wXIdpEa0BoyfXvus.crl (hash: LYv+US8IRBaAKZrtPR5+QMuDS+y636XKUnl7lbjnl7k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/3dd6c3-69c9-45b0-9ce6-b46d072f60f4/1/c4cmY_zX_q1wXIdpEa0BoyfXvus.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/3dd6c3-69c9-45b0-9ce6-b46d072f60f4/1/c4cmY_zX_q1wXIdpEa0BoyfXvus.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c4cmY_zX_q1wXIdpEa0BoyfXvus.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 16:02:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d9:4d:69:36:4b:3c:72:7a:61:ad:cf:80:35:f3:13:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73872663fcd7fead705c876911ad01a327d7beeb
        Validity
            Not Before: Sep 25 16:02:03 2026 GMT
            Not After : Sep 26 16:02:03 2026 GMT
        Subject: CN=f25a56478103fa321f56be21a2d84c2b373bd14c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:1b:28:58:43:d6:a3:34:23:c0:86:95:a3:f1:
                    ec:e8:85:8b:ca:e6:dc:bd:43:78:e0:e2:1a:2b:6a:
                    85:99:3f:23:c4:7d:5c:db:f4:e0:af:7e:7b:47:3c:
                    89:91:bf:92:e4:22:20:b8:1c:49:41:8d:62:44:5a:
                    27:35:a9:e0:8a:02:cc:9e:74:ed:e6:92:33:d5:a0:
                    d0:35:93:3c:b2:44:d2:fd:57:97:dd:c3:02:99:c8:
                    cc:dd:72:18:a4:4e:f8:99:3b:78:a1:17:48:c1:c9:
                    e1:f1:29:d0:8d:7a:8c:7f:56:39:60:fc:01:8f:e7:
                    ee:32:7b:d9:60:f7:07:7c:06:82:94:e8:b1:42:f6:
                    c3:72:66:db:7e:4e:44:c1:3b:c8:92:a5:5a:5b:a9:
                    59:82:7a:b7:cd:e2:b1:e3:1a:a0:b1:8d:3a:be:96:
                    15:37:01:16:be:8e:ea:2c:5c:3c:c8:f5:15:5c:62:
                    97:87:09:fa:e3:16:04:cf:99:4d:f0:f3:78:3f:74:
                    3a:78:6c:c4:6f:c7:59:bd:d4:ff:b1:21:2d:c3:e1:
                    f9:60:f3:f7:a6:19:76:50:9d:74:0f:31:7a:26:b4:
                    05:f2:98:8c:03:7d:b0:09:66:87:6d:d4:0f:d9:8e:
                    39:d2:c0:72:ae:20:a8:1e:a2:dd:96:5f:4a:e0:8b:
                    82:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:5A:56:47:81:03:FA:32:1F:56:BE:21:A2:D8:4C:2B:37:3B:D1:4C
            X509v3 Authority Key Identifier:
                keyid:73:87:26:63:FC:D7:FE:AD:70:5C:87:69:11:AD:01:A3:27:D7:BE:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4cmY_zX_q1wXIdpEa0BoyfXvus.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/3dd6c3-69c9-45b0-9ce6-b46d072f60f4/1/c4cmY_zX_q1wXIdpEa0BoyfXvus.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/3dd6c3-69c9-45b0-9ce6-b46d072f60f4/1/c4cmY_zX_q1wXIdpEa0BoyfXvus.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:e8:de:52:17:48:0c:be:18:ab:f7:72:06:ba:c6:27:f4:a7:
         a3:5d:49:f2:d3:4f:84:70:a8:5f:d1:ec:50:d5:64:cd:e8:ea:
         4e:8c:59:2f:d9:a2:04:3f:45:77:1f:e9:b1:a3:14:82:fa:5d:
         e3:a1:9d:8d:5f:b5:88:d6:47:8c:a0:41:dc:53:3b:58:ce:74:
         2d:9b:43:76:81:35:97:c3:ee:08:2c:2b:a7:38:98:46:c9:10:
         06:13:99:d4:30:68:89:cd:30:4b:f6:b8:a3:21:e1:db:9c:36:
         17:02:fe:63:2b:da:21:3a:39:39:08:df:9a:e0:ee:df:ed:09:
         42:60:ec:8c:30:08:93:95:2c:c5:47:78:dd:e3:9d:08:07:a1:
         70:e7:12:49:ac:80:46:22:de:ed:29:e2:35:fd:57:9d:b6:ee:
         3d:f9:02:55:24:b2:43:1c:65:31:9c:02:23:7b:27:df:3d:2a:
         f0:1c:f7:a9:b2:40:f5:7c:12:17:df:f7:26:bb:f7:3e:35:57:
         75:a7:4f:29:e3:54:24:61:b3:87:e3:da:36:25:c1:ca:06:aa:
         bf:bf:45:61:f0:0e:dd:ea:a6:ee:dc:e4:0c:8f:03:d0:5a:83:
         39:fb:b6:eb:bd:e2:b6:bb:91:c2:d5:9f:30:a5:07:b0:50:d5:
         02:b9:27:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:54:04 2026 by rpki-client