Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/7983fc-2019-47b3-a6c3-d99c8c25dbc8/1/au3YfPvkKOnEKzDCLhlh9xfx20k.mft
File:                     au3YfPvkKOnEKzDCLhlh9xfx20k.mft (raw, json)
Hash identifier:          HfngS5kez58m3IlGQVgfKoW5giajM8sQTM3DdiUkI2w=
Subject key identifier:   A3:A4:6E:A7:47:22:AC:D7:93:6A:22:49:87:C5:05:3F:3E:FF:46:4B
Authority key identifier: 6A:ED:D8:7C:FB:E4:28:E9:C4:2B:30:C2:2E:19:61:F7:17:F1:DB:49
Certificate issuer:       /CN=6aedd87cfbe428e9c42b30c22e1961f717f1db49
Certificate serial:       01A0C21FEB73A81BC632EC92D29D9342AEC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/au3YfPvkKOnEKzDCLhlh9xfx20k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/7983fc-2019-47b3-a6c3-d99c8c25dbc8/1/au3YfPvkKOnEKzDCLhlh9xfx20k.mft
Manifest number:          027C
Signing time:             Mon 21 Sep 2026 04:01:06 +0000
Manifest this update:     Mon 21 Sep 2026 04:01:06 +0000
Manifest next update:     Tue 22 Sep 2026 04:01:06 +0000
Files and hashes:         1: au3YfPvkKOnEKzDCLhlh9xfx20k.crl (hash: 2NT7pITcnbv3mR9RlC0iA+E7oRTFeTkBn/PJEyHI+jA=)
                          2: vWjIW1eikUSm_cPtDhI_f3EodY4.roa (hash: PyLkHRQBEvUL9Bk7Ermj8JEaYKhwlYCHxtYPNjdnGVg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/7983fc-2019-47b3-a6c3-d99c8c25dbc8/1/au3YfPvkKOnEKzDCLhlh9xfx20k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/7983fc-2019-47b3-a6c3-d99c8c25dbc8/1/au3YfPvkKOnEKzDCLhlh9xfx20k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/au3YfPvkKOnEKzDCLhlh9xfx20k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 04:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c2:1f:eb:73:a8:1b:c6:32:ec:92:d2:9d:93:42:ae:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6aedd87cfbe428e9c42b30c22e1961f717f1db49
        Validity
            Not Before: Sep 21 04:01:06 2026 GMT
            Not After : Sep 22 04:01:06 2026 GMT
        Subject: CN=a3a46ea74722acd7936a224987c5053f3eff464b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4c:cd:be:da:81:d0:a9:a0:b1:d8:60:ee:d3:
                    50:30:a1:de:b9:75:54:fa:f2:78:ea:3f:03:b6:c4:
                    35:0c:c5:fc:6f:8b:28:b5:0a:45:f4:8d:66:bd:21:
                    42:71:5e:06:80:09:30:93:d2:be:a8:54:d8:a6:8e:
                    0a:10:46:d5:b1:e5:59:17:d3:1a:ca:e7:11:4f:b8:
                    fd:25:0f:f6:59:da:45:26:be:2a:9f:80:11:04:d8:
                    44:64:bf:76:67:e5:c1:4f:9e:ed:0d:90:05:12:75:
                    f2:0d:8f:bc:02:7f:d0:03:5f:6a:2d:00:0a:7c:df:
                    20:e4:16:80:a9:d6:85:e6:59:f1:81:7d:c9:18:dc:
                    48:4a:d7:44:02:0f:ab:6f:5f:1f:fe:01:69:81:e2:
                    71:a2:60:50:fa:fd:9d:1f:b6:8a:1a:78:75:a9:80:
                    46:a3:d0:30:95:d5:eb:d6:3b:3c:fe:e0:16:6b:97:
                    dc:f5:87:0b:fb:17:ca:fd:f6:96:84:fe:bb:de:2d:
                    26:d6:68:3d:c5:3b:0e:c0:0f:af:9b:d4:06:cf:ee:
                    16:e9:21:a1:53:15:02:ab:e5:1e:8e:29:ca:33:72:
                    6c:81:56:30:f9:52:92:d9:fd:eb:b1:6e:7a:14:93:
                    a2:b0:7a:f3:ae:dc:ca:cc:0d:36:9a:12:63:76:5a:
                    4c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:A4:6E:A7:47:22:AC:D7:93:6A:22:49:87:C5:05:3F:3E:FF:46:4B
            X509v3 Authority Key Identifier:
                keyid:6A:ED:D8:7C:FB:E4:28:E9:C4:2B:30:C2:2E:19:61:F7:17:F1:DB:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/au3YfPvkKOnEKzDCLhlh9xfx20k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7983fc-2019-47b3-a6c3-d99c8c25dbc8/1/au3YfPvkKOnEKzDCLhlh9xfx20k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7983fc-2019-47b3-a6c3-d99c8c25dbc8/1/au3YfPvkKOnEKzDCLhlh9xfx20k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:e8:82:ac:66:0c:86:0c:96:df:df:25:7a:ac:8c:d7:c7:14:
         66:17:ca:6c:9f:2e:83:13:92:7c:f5:e0:ef:23:af:94:96:4b:
         4f:58:45:58:57:dd:80:4c:e0:bb:b8:34:c4:c0:f6:f8:27:2e:
         4a:09:2f:ba:e5:63:c5:15:3e:47:64:50:37:38:cb:0b:de:47:
         63:f5:00:7c:e7:a2:46:db:20:e2:d7:89:b8:eb:fd:13:ff:41:
         62:0c:77:55:d8:18:75:d0:19:ad:5e:08:c0:41:ef:c1:df:87:
         06:f1:6b:39:60:9b:ac:fb:57:73:dc:da:1e:ae:7c:6d:a3:c4:
         9c:2b:a3:19:25:28:48:d7:1e:e2:b8:74:3e:87:bd:4b:a4:0d:
         62:a5:1e:c5:7f:8b:e0:cb:64:b1:1c:28:7f:03:36:e6:c9:8c:
         d1:14:39:79:d1:ec:97:a4:9c:e2:d1:d2:e5:67:69:77:ac:06:
         57:5c:b0:19:c7:79:f4:f5:dc:d1:37:8f:7f:7e:08:94:96:b8:
         c4:08:97:20:fd:e8:59:75:9d:f1:8e:4b:86:84:69:58:55:af:
         46:7f:2c:8d:bc:94:a9:5a:24:ad:0c:3f:a9:08:61:f5:21:2b:
         22:f6:cf:3d:3a:f2:9d:67:e5:09:99:df:7c:70:44:e9:0d:10:
         75:20:8c:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:53:58 2026 by rpki-client