Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.mft
File:                     sSZ6Uay2bymRvqUkP-OIBolxofE.mft (raw, json)
Hash identifier:          JNG/Zl1YKl/2KrdgnpkVHnJPIXmcKmuQB9gjcT5uK/o=
Subject key identifier:   12:F4:43:9F:61:E3:4C:10:D8:A3:57:6D:80:87:77:0D:B3:CF:CF:DB
Authority key identifier: B1:26:7A:51:AC:B6:6F:29:91:BE:A5:24:3F:E3:88:06:89:71:A1:F1
Certificate issuer:       /CN=b1267a51acb66f2991bea5243fe388068971a1f1
Certificate serial:       01A0D6152ECA0D1B68414A63D16B42926DC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sSZ6Uay2bymRvqUkP-OIBolxofE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.mft
Manifest number:          1A78
Signing time:             Fri 25 Sep 2026 01:01:47 +0000
Manifest this update:     Fri 25 Sep 2026 01:01:47 +0000
Manifest next update:     Sat 26 Sep 2026 01:01:47 +0000
Files and hashes:         1: 23A1M_7D38Nasymq2osByPDI5cA.roa (hash: wp6SoUXMRZMv8bCbA5J4Lo7L/L66QrTkl3U2sJg5Tss=)
                          2: 7tRxzOjQ9HlU-8n_YoQ9S2kmRLc.roa (hash: VZLOnCAersGhWtsmb7R0s5AlGZFScIm4sdJlK/A7tN8=)
                          3: eAGo7tcphLVCScj4mWyqTWB40DE.roa (hash: vUYrbB3y1Fed1n+d3yU4y69AsjIYo8MsiwphvcU79ek=)
                          4: kORyH1zk4kpVVZcN-RFEOaPpCYQ.roa (hash: eM3a4CHDiPxCoPRiTlT4LzKEhGGZUAXh/d8bAjKFKxA=)
                          5: sP8B78WvrO-I9FMOKnP4eLOTxh8.roa (hash: j0/QkDqzGm9cKi69XdtrTTNVhk9moQxAiYICzefknS8=)
                          6: sSZ6Uay2bymRvqUkP-OIBolxofE.crl (hash: /IPLB88dwrc6beqyBUmBk8jOSgbLkyz+NJb7v1ef/9Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sSZ6Uay2bymRvqUkP-OIBolxofE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d6:15:2e:ca:0d:1b:68:41:4a:63:d1:6b:42:92:6d:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1267a51acb66f2991bea5243fe388068971a1f1
        Validity
            Not Before: Sep 25 01:01:47 2026 GMT
            Not After : Sep 26 01:01:47 2026 GMT
        Subject: CN=12f4439f61e34c10d8a3576d8087770db3cfcfdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:db:cf:ad:9a:ab:29:1e:f2:fb:48:e5:c4:97:
                    95:e3:30:17:6b:b3:30:ea:4e:b1:99:1d:e3:51:37:
                    e7:54:b3:8c:13:67:85:19:c4:e5:19:27:cb:06:2a:
                    01:2b:a4:6b:e5:b5:eb:25:38:2d:e8:90:47:4a:fd:
                    7b:82:05:db:34:c0:88:34:4e:99:cc:f3:3d:de:ad:
                    91:10:19:3b:02:c3:ef:cd:fd:46:62:bd:89:91:46:
                    e3:d8:e7:68:28:0a:0f:c7:91:9c:67:13:47:95:33:
                    44:59:ca:7e:53:34:75:d9:a1:67:48:14:ca:fa:25:
                    de:59:eb:cb:1a:34:33:09:17:05:a9:56:ab:52:7d:
                    92:cd:88:a2:27:8e:5a:f9:95:d5:85:2d:2e:91:28:
                    be:0c:91:73:5d:71:f3:41:96:4c:73:3d:2a:56:76:
                    f9:bd:32:b5:b3:6f:25:ce:01:a0:d4:a5:fa:1a:1d:
                    b8:07:2d:fe:01:05:3e:cf:50:e2:69:0a:7d:7f:de:
                    80:4a:2a:4b:2c:1c:19:fe:71:bb:e7:53:2c:aa:d9:
                    b8:68:2c:5f:51:f1:8c:79:f2:ff:80:c9:c4:00:8a:
                    32:27:d3:d4:e0:88:a3:2e:43:d9:e6:3c:9d:a5:1b:
                    a8:bb:4e:36:dd:96:29:48:9d:bd:f6:76:0d:a8:7a:
                    70:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:F4:43:9F:61:E3:4C:10:D8:A3:57:6D:80:87:77:0D:B3:CF:CF:DB
            X509v3 Authority Key Identifier:
                keyid:B1:26:7A:51:AC:B6:6F:29:91:BE:A5:24:3F:E3:88:06:89:71:A1:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sSZ6Uay2bymRvqUkP-OIBolxofE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:56:7c:fd:d2:84:c5:b1:b5:ce:c0:61:35:93:6b:1b:1e:4f:
         b0:51:77:28:bd:3d:e3:b5:85:25:f5:4f:47:78:c0:a8:92:fc:
         f6:97:45:cb:ac:69:ca:e8:ac:13:ee:7c:47:0f:f7:29:2c:fc:
         ea:04:4c:3e:5d:7f:a2:9b:09:9a:b0:20:d3:f1:0b:24:a4:64:
         a7:0d:b9:5e:41:60:27:75:c0:0c:69:31:b3:0d:b7:8d:41:b1:
         86:c5:74:a6:7e:8b:26:a3:fb:ab:84:a3:e9:b7:c2:ba:97:cf:
         0c:c7:1d:d4:98:8c:2d:72:80:cb:06:1a:5c:f8:e9:c6:03:10:
         03:43:b3:a2:a7:22:37:d2:09:b6:0a:c6:bb:b2:e5:8b:7d:96:
         64:79:22:be:50:9d:9c:ac:42:98:a1:d8:f7:3d:8e:a6:9d:1c:
         56:af:b5:46:b3:f4:6a:ca:b3:e7:dd:d3:11:cc:2b:72:97:bf:
         de:6e:3f:f6:66:f6:18:e3:27:5d:39:86:49:99:10:df:8c:1a:
         07:2d:83:21:04:8f:3a:55:4c:bb:3c:ec:71:1d:5c:0f:fa:19:
         5c:1e:fa:32:c9:23:e1:47:bc:70:f1:16:b7:4c:77:8e:f5:b5:
         8e:05:13:b0:60:03:67:22:47:55:5a:38:b5:fa:df:28:05:c1:
         8c:63:5b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:16:32 2026 by rpki-client