Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.mft
File:                     piqMeh9qTJSeAntTadl9dXbhR_g.mft (raw, json)
Hash identifier:          gbfLWbM6u5V0IOUlgGNHXgc3+cTQAFSJRmCvm5tA6ho=
Subject key identifier:   F2:6F:BA:22:0D:8B:6D:5C:05:20:D4:7C:D3:8C:38:F5:F5:A0:FF:00
Authority key identifier: A6:2A:8C:7A:1F:6A:4C:94:9E:02:7B:53:69:D9:7D:75:76:E1:47:F8
Certificate issuer:       /CN=a62a8c7a1f6a4c949e027b5369d97d7576e147f8
Certificate serial:       01A120C1661685659D49D09F9C129A0DE33B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/piqMeh9qTJSeAntTadl9dXbhR_g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.mft
Manifest number:          0ED9
Signing time:             Fri 09 Oct 2026 13:01:47 +0000
Manifest this update:     Fri 09 Oct 2026 13:01:47 +0000
Manifest next update:     Sat 10 Oct 2026 13:01:47 +0000
Files and hashes:         1: Sr6zqiJ99FeqwYQ28f19iLqoqDg.roa (hash: TL3BARSlFoDZ5ZNhUOEZiPZ9fIVbuOQ2POjRAByuFjI=)
                          2: TGeDIFBGIW5eczvcX5q3jNyzVtA.roa (hash: DgUdGVPI56iMDORgQFEHjPBMjjgqkbyYMnQ4bBFfVcc=)
                          3: piqMeh9qTJSeAntTadl9dXbhR_g.crl (hash: R+oqf4PiVF+UR4TyiqEZSmMa5LjvPqhy1FkB2QvK8c8=)
                          4: tVbgzppTtTNiiJtIVClKJaUjV5Q.roa (hash: +w5E9Iu1vewLPX6wA/Khvas6REQH1AClWY9b6rdLWo0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/piqMeh9qTJSeAntTadl9dXbhR_g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Oct 2026 13:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:20:c1:66:16:85:65:9d:49:d0:9f:9c:12:9a:0d:e3:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a62a8c7a1f6a4c949e027b5369d97d7576e147f8
        Validity
            Not Before: Oct  9 13:01:47 2026 GMT
            Not After : Oct 10 13:01:47 2026 GMT
        Subject: CN=f26fba220d8b6d5c0520d47cd38c38f5f5a0ff00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c4:78:fa:49:af:5e:84:42:f9:e8:f7:b6:64:
                    78:89:fa:ac:92:28:b7:25:e9:95:74:6f:33:bd:73:
                    21:75:6f:4b:89:7e:fc:4c:cd:1f:d4:52:f6:4e:e8:
                    c9:84:c8:7b:86:a7:f1:21:2c:88:c1:4e:e3:c5:1f:
                    03:91:cd:c1:96:30:8f:4a:71:03:4c:01:f1:ee:17:
                    01:76:13:97:47:96:f2:e9:4b:9a:1e:fd:8a:72:21:
                    f8:26:33:96:e0:53:2c:38:e9:0c:61:d0:1a:ea:1b:
                    26:1c:dd:09:1c:5d:0d:80:f6:40:e5:7c:f0:52:8c:
                    14:d7:33:a8:b7:78:d7:48:5f:74:31:26:7b:d3:5b:
                    85:5b:77:19:ed:22:17:a9:4e:44:13:9a:b0:bf:01:
                    59:db:17:d9:d3:4a:45:e3:74:ac:9b:84:17:af:58:
                    3d:6d:5a:55:32:eb:96:48:d5:0c:66:98:f8:7d:51:
                    6f:91:64:9e:fe:e9:9f:7c:6f:c3:e8:2b:ea:a0:b6:
                    9b:97:a9:04:8d:48:1a:30:b2:39:1f:4e:42:1f:0d:
                    04:74:e2:54:ec:63:de:c9:28:63:d7:19:85:1b:62:
                    45:fe:17:52:9d:81:be:8e:f4:33:34:e1:3a:9b:45:
                    93:e4:eb:39:00:d2:6d:8f:36:e3:d7:d7:1e:02:50:
                    c8:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:6F:BA:22:0D:8B:6D:5C:05:20:D4:7C:D3:8C:38:F5:F5:A0:FF:00
            X509v3 Authority Key Identifier:
                keyid:A6:2A:8C:7A:1F:6A:4C:94:9E:02:7B:53:69:D9:7D:75:76:E1:47:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/piqMeh9qTJSeAntTadl9dXbhR_g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:92:83:46:17:5b:8e:49:f1:c3:ea:11:62:69:11:2e:b8:e2:
         f0:ce:98:82:92:9f:a7:82:62:1b:49:3c:74:fd:1d:ac:9e:a9:
         f0:11:eb:52:fa:45:31:f6:0d:56:c1:3f:52:0d:93:17:e9:f3:
         4a:23:02:1b:53:9d:0e:e7:e2:ad:89:25:88:82:ff:da:c0:bc:
         4e:fc:9f:26:67:59:53:0f:4d:c7:a6:ac:b7:2a:46:90:33:3a:
         96:e8:0d:62:df:eb:4e:29:42:00:e8:4c:00:a9:df:1f:0e:1f:
         1d:f6:a2:0d:ba:8d:78:70:9f:d9:d4:8f:92:7b:74:77:9f:f7:
         56:bf:2d:50:67:27:99:24:2f:44:75:c3:c5:05:f5:b4:49:88:
         02:cc:23:9c:74:2e:a1:6e:50:24:5e:d1:c2:44:82:9b:94:ee:
         d5:f3:ea:b1:f8:6d:55:16:78:e0:42:f7:3d:50:39:8e:1a:ee:
         5e:43:b2:a2:c6:99:a0:6c:44:d7:5a:a4:a5:b6:8b:fc:e9:24:
         aa:42:0e:58:6d:c3:d3:d1:dc:8c:b5:8a:7c:e7:2a:ec:86:42:
         2d:13:55:0a:8d:9e:80:30:32:71:b0:8a:fe:81:d5:91:cf:dd:
         77:fc:06:ab:25:6e:f4:cf:76:76:75:5e:d2:f3:3f:12:3b:c3:
         cf:9b:9b:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 23:03:32 2026 by rpki-client