Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/404feb-a8bc-4c54-90ac-0660c16efcce/1/79xI2asQ8OQqPcZ_vQ9MuORMq2k.mft
File:                     79xI2asQ8OQqPcZ_vQ9MuORMq2k.mft (raw, json)
Hash identifier:          3t9SmcUAH6x12s+GaEIcsv8MreHzDSJ+dF7R1olBhDc=
Subject key identifier:   F8:05:BD:42:F3:FA:10:58:FF:52:1C:78:B1:A2:A9:FC:6C:9F:5A:90
Authority key identifier: EF:DC:48:D9:AB:10:F0:E4:2A:3D:C6:7F:BD:0F:4C:B8:E4:4C:AB:69
Certificate issuer:       /CN=efdc48d9ab10f0e42a3dc67fbd0f4cb8e44cab69
Certificate serial:       01A0C557A1DD50AC2AF808C4CACB6FCF850E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/79xI2asQ8OQqPcZ_vQ9MuORMq2k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/404feb-a8bc-4c54-90ac-0660c16efcce/1/79xI2asQ8OQqPcZ_vQ9MuORMq2k.mft
Manifest number:          1A67
Signing time:             Mon 21 Sep 2026 19:00:49 +0000
Manifest this update:     Mon 21 Sep 2026 19:00:49 +0000
Manifest next update:     Tue 22 Sep 2026 19:00:49 +0000
Files and hashes:         1: 5q8b-mFBKEi7KxA-qotiTf_Ngcs.roa (hash: UP1Aef3+F12caRUYXmTS+aJsJJVlKeAHOy7RJvD6MyQ=)
                          2: 79xI2asQ8OQqPcZ_vQ9MuORMq2k.crl (hash: ckvSuSJhJf6Ed/mMtr2PqplDtBA2ZtP7bXOx4bczipo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/404feb-a8bc-4c54-90ac-0660c16efcce/1/79xI2asQ8OQqPcZ_vQ9MuORMq2k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/404feb-a8bc-4c54-90ac-0660c16efcce/1/79xI2asQ8OQqPcZ_vQ9MuORMq2k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/79xI2asQ8OQqPcZ_vQ9MuORMq2k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c5:57:a1:dd:50:ac:2a:f8:08:c4:ca:cb:6f:cf:85:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efdc48d9ab10f0e42a3dc67fbd0f4cb8e44cab69
        Validity
            Not Before: Sep 21 19:00:49 2026 GMT
            Not After : Sep 22 19:00:49 2026 GMT
        Subject: CN=f805bd42f3fa1058ff521c78b1a2a9fc6c9f5a90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:cf:66:a2:15:5f:e9:12:fd:98:1b:9f:22:ad:
                    30:2c:da:b5:7b:d4:c8:80:33:f6:f3:52:58:70:32:
                    e1:4e:a3:9b:90:6e:8d:e4:5d:f2:86:24:f7:c6:1d:
                    70:a2:37:3e:19:67:68:31:6e:33:cd:91:c3:ef:d5:
                    e6:b7:8d:b3:a8:8a:99:fc:24:aa:ff:c6:ba:7b:67:
                    35:9e:95:62:7c:82:00:1c:e0:0c:f0:14:34:a5:47:
                    80:8d:86:f4:01:b2:5a:bd:81:31:5e:44:2c:32:e8:
                    03:de:67:17:f1:8c:78:32:75:80:ca:29:38:ea:37:
                    db:25:aa:7c:11:04:a1:2c:42:e0:de:ad:86:f0:e9:
                    37:63:4a:95:31:79:fe:1e:56:c4:09:98:c9:ec:c2:
                    b5:43:22:6a:b2:ce:02:52:c0:a5:37:91:74:e2:a9:
                    42:39:77:d4:20:f1:c2:e9:65:de:bb:36:f0:10:92:
                    a2:47:ed:98:1c:57:9f:9f:4f:b7:e0:fc:a1:17:e2:
                    74:8a:fc:cc:b4:98:e2:d2:6e:85:03:7c:d5:9e:2f:
                    e8:d6:17:56:e5:ea:61:75:b0:ca:79:40:23:15:fc:
                    a5:e9:f5:e3:ca:d5:06:93:31:a5:35:7f:ea:32:ce:
                    b9:b7:3e:35:2e:68:be:5b:63:a0:83:b4:87:be:cc:
                    57:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:05:BD:42:F3:FA:10:58:FF:52:1C:78:B1:A2:A9:FC:6C:9F:5A:90
            X509v3 Authority Key Identifier:
                keyid:EF:DC:48:D9:AB:10:F0:E4:2A:3D:C6:7F:BD:0F:4C:B8:E4:4C:AB:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/79xI2asQ8OQqPcZ_vQ9MuORMq2k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/404feb-a8bc-4c54-90ac-0660c16efcce/1/79xI2asQ8OQqPcZ_vQ9MuORMq2k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/404feb-a8bc-4c54-90ac-0660c16efcce/1/79xI2asQ8OQqPcZ_vQ9MuORMq2k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:59:ae:b7:0a:eb:ec:08:e9:af:76:6e:7b:b0:31:1a:dc:7a:
         fc:bd:33:1c:69:e8:f8:66:55:9b:75:de:6f:07:dc:89:56:c2:
         91:eb:e2:3d:f5:ae:8f:8f:3a:b8:fb:c6:4e:f1:e2:18:67:72:
         25:81:9e:97:b6:47:fe:a3:f5:d0:7b:e2:79:ea:b1:b8:e2:98:
         30:26:9f:f2:bf:13:25:b3:68:22:cf:6c:20:9e:c7:ee:8b:69:
         1a:c8:9c:ff:c5:a4:f6:e2:a4:2e:09:5b:80:30:58:aa:8a:05:
         b8:93:02:cd:7a:d5:2a:d4:e7:ba:49:bb:6c:d6:72:f4:47:64:
         fb:48:28:b8:d9:0a:1e:61:0d:8d:5c:db:44:ce:16:b9:59:c6:
         41:1b:f8:02:3f:c4:93:e5:52:de:74:86:48:9a:0b:42:34:0d:
         3e:42:3e:03:dc:8f:b9:0e:15:b2:fb:b8:f0:dd:7b:50:4c:82:
         f5:12:99:c2:0d:aa:ae:61:d6:d7:56:34:e7:fb:4f:30:78:95:
         6e:01:27:35:55:a7:b0:60:48:99:32:09:46:67:69:1f:f2:ba:
         a2:ea:53:6e:6c:90:1f:b0:ed:98:77:68:db:98:7a:c3:b3:23:
         0c:1f:17:13:22:8d:13:df:5b:b1:1a:e1:ee:93:ab:94:01:f2:
         ae:9c:7a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:58:21 2026 by rpki-client