Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/fe902a-023d-43b5-8b14-3f670a0714d9/1/tN_AMXGtMlQ4CuUUQ6MURVHjSvo.mft
File:                     tN_AMXGtMlQ4CuUUQ6MURVHjSvo.mft (raw, json)
Hash identifier:          rJE0fDNNbQKBXyDS7hTRd7vGq2DaQ5rb9MbUvmISiXY=
Subject key identifier:   3B:97:26:F6:76:E2:06:2B:E2:EF:E1:0B:F0:96:CF:90:55:75:E2:83
Authority key identifier: B4:DF:C0:31:71:AD:32:54:38:0A:E5:14:43:A3:14:45:51:E3:4A:FA
Certificate issuer:       /CN=b4dfc03171ad3254380ae51443a3144551e34afa
Certificate serial:       01A127D610FBA0991C5B8FB04A7C5772AF1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tN_AMXGtMlQ4CuUUQ6MURVHjSvo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/fe902a-023d-43b5-8b14-3f670a0714d9/1/tN_AMXGtMlQ4CuUUQ6MURVHjSvo.mft
Manifest number:          023B
Signing time:             Sat 10 Oct 2026 22:01:42 +0000
Manifest this update:     Sat 10 Oct 2026 22:01:42 +0000
Manifest next update:     Sun 11 Oct 2026 22:01:42 +0000
Files and hashes:         1: jEu7pwg2-E1mqN2DpjSiLFBgzdU.roa (hash: TORAgDcuiUrJI3uCzvwnsqjEqpo7+K175vdEdYU+bdc=)
                          2: tN_AMXGtMlQ4CuUUQ6MURVHjSvo.crl (hash: xqf8cHMNpRDWzrPESSGvpP21VpcuPN0tpayIswqZilo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/fe902a-023d-43b5-8b14-3f670a0714d9/1/tN_AMXGtMlQ4CuUUQ6MURVHjSvo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/fe902a-023d-43b5-8b14-3f670a0714d9/1/tN_AMXGtMlQ4CuUUQ6MURVHjSvo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tN_AMXGtMlQ4CuUUQ6MURVHjSvo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 20:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:27:d6:10:fb:a0:99:1c:5b:8f:b0:4a:7c:57:72:af:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4dfc03171ad3254380ae51443a3144551e34afa
        Validity
            Not Before: Oct 10 22:01:42 2026 GMT
            Not After : Oct 11 22:01:42 2026 GMT
        Subject: CN=3b9726f676e2062be2efe10bf096cf905575e283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:80:40:b3:0b:63:3a:d3:de:58:38:f0:85:cf:
                    33:b7:df:62:5d:53:84:0c:8c:c8:a6:99:f8:87:65:
                    c9:1e:d3:60:eb:a2:18:66:dc:3d:68:cf:bf:fc:ca:
                    9a:38:da:47:44:aa:e5:49:43:a2:d2:92:f7:aa:17:
                    1f:9a:86:a5:bc:a3:76:d3:f5:9d:3b:db:eb:6b:db:
                    0f:41:e2:7f:b0:5b:e5:57:27:75:a6:51:29:71:55:
                    4b:14:22:02:1b:59:cb:54:84:c7:eb:ea:4a:26:78:
                    c5:58:bc:ce:84:1f:7e:f1:fb:e0:86:ee:16:dc:96:
                    a0:ac:b1:b8:4c:bd:8a:4f:8d:ad:3e:7a:ce:e6:8c:
                    b3:e0:89:ea:ee:43:51:c5:02:10:1a:a3:92:72:de:
                    aa:15:aa:0c:97:0e:b7:16:63:91:1d:85:f2:12:98:
                    b3:21:77:68:99:c9:78:43:6f:a8:d6:bb:1f:d8:92:
                    13:f3:1d:a4:1b:99:09:c5:7d:56:15:ea:a8:2a:e0:
                    4f:69:41:f9:e9:b0:e0:4a:fd:30:97:e9:0a:36:94:
                    fd:7e:f8:60:2f:66:44:83:9d:f6:62:f9:90:39:f0:
                    6a:d3:6e:ea:c8:37:2c:73:5c:10:45:ad:96:e8:22:
                    ec:91:b3:1d:8f:b9:05:71:89:08:a4:c8:49:21:1e:
                    c9:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:97:26:F6:76:E2:06:2B:E2:EF:E1:0B:F0:96:CF:90:55:75:E2:83
            X509v3 Authority Key Identifier:
                keyid:B4:DF:C0:31:71:AD:32:54:38:0A:E5:14:43:A3:14:45:51:E3:4A:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tN_AMXGtMlQ4CuUUQ6MURVHjSvo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/fe902a-023d-43b5-8b14-3f670a0714d9/1/tN_AMXGtMlQ4CuUUQ6MURVHjSvo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/fe902a-023d-43b5-8b14-3f670a0714d9/1/tN_AMXGtMlQ4CuUUQ6MURVHjSvo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:e7:c2:b0:d4:49:05:b8:67:c2:5d:33:bc:9d:04:f2:9a:9f:
         29:e6:f0:0c:58:ac:f4:2a:63:ff:99:53:ab:14:bd:74:b7:3c:
         b7:13:83:37:0b:00:27:34:e2:63:99:1c:58:58:b4:4c:9d:27:
         fa:ac:f2:52:4d:40:2d:08:20:b3:55:52:82:e8:ea:41:b8:c1:
         44:d1:bb:48:2e:35:4d:d0:34:35:45:48:3f:43:b8:40:18:6a:
         5c:76:fd:73:e8:20:d0:ad:3b:00:47:a3:f2:ba:75:a6:63:0a:
         81:6e:aa:20:56:b4:06:8a:9f:15:6e:28:45:26:24:3b:63:87:
         37:ee:92:d8:87:ba:77:d2:89:14:80:f5:f4:72:38:0a:2a:08:
         5a:31:fb:b9:86:54:d4:c0:69:fa:b6:79:1d:53:05:8d:fd:e5:
         dd:bd:c2:bc:9c:d6:44:99:99:05:46:2b:1b:b9:94:8c:ef:66:
         2d:aa:a3:15:25:d7:16:80:f4:a5:78:32:4b:55:b1:f3:32:57:
         26:e8:89:d0:36:a9:5f:0b:cf:59:8b:02:ec:43:1e:9d:ad:ce:
         f4:66:36:f1:cf:e8:85:31:2d:26:66:00:8a:19:25:62:20:3d:
         74:fa:50:77:78:c7:19:c9:1b:d7:9e:6c:43:7d:9e:57:f6:eb:
         6d:f8:a8:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 03:47:37 2026 by rpki-client