Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/A7zvl2ZC1UtLShmY8LP_SIRakm0.mft
File:                     A7zvl2ZC1UtLShmY8LP_SIRakm0.mft (raw, json)
Hash identifier:          tMXN4RDzMepUxDHZSvuBtF7pK6p+ZbttWjWtBJwFdNI=
Subject key identifier:   19:EE:40:FD:D0:EE:4D:D9:0C:E3:10:6B:CF:25:C8:63:CA:F4:EA:5D
Authority key identifier: 03:BC:EF:97:66:42:D5:4B:4B:4A:19:98:F0:B3:FF:48:84:5A:92:6D
Certificate issuer:       /CN=03bcef976642d54b4b4a1998f0b3ff48845a926d
Certificate serial:       01A0C5C55126122F077521836D58E99DBCA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A7zvl2ZC1UtLShmY8LP_SIRakm0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/A7zvl2ZC1UtLShmY8LP_SIRakm0.mft
Manifest number:          1460
Signing time:             Mon 21 Sep 2026 21:00:37 +0000
Manifest this update:     Mon 21 Sep 2026 21:00:37 +0000
Manifest next update:     Tue 22 Sep 2026 21:00:37 +0000
Files and hashes:         1: A7zvl2ZC1UtLShmY8LP_SIRakm0.crl (hash: h95FhCI6xFcjuEvvJq6cg+LE2Wj2pAG4xynoWEbIs08=)
                          2: EHGORi86xgHpvwoBk068qPN7iqE.roa (hash: YNshrsxOuHcW6UCsa9oev2SY9StlDKp1vMjVv/oevCU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/A7zvl2ZC1UtLShmY8LP_SIRakm0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/A7zvl2ZC1UtLShmY8LP_SIRakm0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A7zvl2ZC1UtLShmY8LP_SIRakm0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c5:c5:51:26:12:2f:07:75:21:83:6d:58:e9:9d:bc:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03bcef976642d54b4b4a1998f0b3ff48845a926d
        Validity
            Not Before: Sep 21 21:00:37 2026 GMT
            Not After : Sep 22 21:00:37 2026 GMT
        Subject: CN=19ee40fdd0ee4dd90ce3106bcf25c863caf4ea5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c1:df:6c:ba:31:71:55:15:40:a2:ab:17:41:
                    fe:2e:d0:b7:62:3a:d2:cd:c9:9e:b1:ad:59:07:19:
                    4d:0f:a6:74:b3:79:e8:4e:56:5c:86:be:a9:9d:59:
                    c9:50:47:51:62:fe:c6:f5:72:02:bd:a0:cb:1c:a4:
                    50:ba:a4:f8:55:67:a3:72:3a:de:41:92:f4:a8:bf:
                    47:5a:d3:6d:11:68:31:80:45:d0:41:e7:5c:14:d8:
                    e7:e3:d8:49:c1:04:2b:4b:ac:83:b8:48:d2:25:3b:
                    09:2e:8e:1d:ab:32:fc:30:0c:aa:20:bd:e4:1d:24:
                    97:6d:e7:62:de:ef:f5:d9:01:96:46:5e:70:0c:a1:
                    2d:d4:34:0a:e3:dc:69:3c:31:10:b3:e6:44:63:2c:
                    ef:65:47:87:42:d9:9a:f2:b0:88:e3:d2:58:7e:8e:
                    f7:e7:dc:03:38:52:50:af:aa:77:c4:fe:a5:25:53:
                    c0:ca:86:e6:b6:f1:84:bc:da:df:d2:01:78:a6:ff:
                    3d:31:e0:af:4f:c4:46:08:96:ef:00:3c:33:07:0f:
                    a2:93:df:8a:fb:0f:9c:58:2c:15:3d:c5:47:43:0a:
                    62:48:3b:52:13:6f:10:ff:d9:5f:7d:36:ac:12:4e:
                    a1:7a:67:f2:a4:87:b7:43:04:00:ae:09:db:1e:bb:
                    33:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:EE:40:FD:D0:EE:4D:D9:0C:E3:10:6B:CF:25:C8:63:CA:F4:EA:5D
            X509v3 Authority Key Identifier:
                keyid:03:BC:EF:97:66:42:D5:4B:4B:4A:19:98:F0:B3:FF:48:84:5A:92:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7zvl2ZC1UtLShmY8LP_SIRakm0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/A7zvl2ZC1UtLShmY8LP_SIRakm0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/A7zvl2ZC1UtLShmY8LP_SIRakm0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:6a:7d:f7:7a:f2:c6:88:d7:3d:ed:79:e6:eb:2d:49:75:a4:
         e5:96:d6:61:ae:a8:8e:38:10:80:12:77:8f:e9:2b:e9:a4:f6:
         43:22:86:fa:b2:8f:48:4d:66:76:35:70:6a:f1:ad:f7:4d:d8:
         c4:13:e2:3e:b0:3b:7d:e5:4f:bf:cc:91:95:a2:b9:a8:62:60:
         70:79:87:cc:56:41:bd:6d:25:8f:5b:b5:65:3e:77:d2:29:61:
         e4:c6:e1:1a:71:1c:b3:a9:23:af:74:d5:df:20:0f:11:90:da:
         59:71:b2:38:70:cb:f5:0c:80:79:2b:5c:04:d0:35:28:88:42:
         85:22:f3:14:0d:1e:79:cd:48:79:1c:39:a6:00:ea:92:88:bb:
         56:36:51:05:42:a5:22:90:73:e5:14:94:55:95:0d:f2:dc:9a:
         d2:00:ff:2b:c5:48:93:67:d8:29:7a:6c:ad:29:4b:53:f0:74:
         1e:90:66:64:fa:4d:fb:1b:06:72:5b:0a:97:ca:27:68:56:00:
         3c:c8:2c:2c:2c:d0:e3:5e:92:63:68:b7:1e:bc:66:87:e8:29:
         a7:66:0e:f2:a5:51:bf:d3:db:8d:cf:67:dc:6d:aa:e6:75:f7:
         61:d3:ea:ef:aa:85:90:97:81:74:1f:ce:25:ec:f2:ec:99:3a:
         b2:d7:a8:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:17:48 2026 by rpki-client