Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/33f12a-9fca-4828-b8f1-9c704f815aaa/1/rhVFyl4w95yXBeJw8eh_r6-5pjI.mft
File:                     rhVFyl4w95yXBeJw8eh_r6-5pjI.mft (raw, json)
Hash identifier:          Tl8LzUrcHCFBclj+y2TG1qEDgHUsQHui/CVTNhGsTz4=
Subject key identifier:   60:95:52:E5:49:B2:A5:B3:CE:61:14:87:20:83:E1:2E:DF:2B:AD:65
Authority key identifier: AE:15:45:CA:5E:30:F7:9C:97:05:E2:70:F1:E8:7F:AF:AF:B9:A6:32
Certificate issuer:       /CN=ae1545ca5e30f79c9705e270f1e87fafafb9a632
Certificate serial:       01A0D803EA8F20E4E8D639D2555589497D08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rhVFyl4w95yXBeJw8eh_r6-5pjI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/33f12a-9fca-4828-b8f1-9c704f815aaa/1/rhVFyl4w95yXBeJw8eh_r6-5pjI.mft
Manifest number:          026E
Signing time:             Fri 25 Sep 2026 10:02:10 +0000
Manifest this update:     Fri 25 Sep 2026 10:02:10 +0000
Manifest next update:     Sat 26 Sep 2026 10:02:10 +0000
Files and hashes:         1: Q-4xy1lFuJPS1HBEiepclcPTuBk.asa (hash: gVcBXJQ9XX31XjFRDkaY8dMZNMEC1KZe+1TPQeZlpsw=)
                          2: rhVFyl4w95yXBeJw8eh_r6-5pjI.crl (hash: VbKSsTaRUez1xjsd9O3SUFPVHIN3+VBR2KXH6h2CkI8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/33f12a-9fca-4828-b8f1-9c704f815aaa/1/rhVFyl4w95yXBeJw8eh_r6-5pjI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/33f12a-9fca-4828-b8f1-9c704f815aaa/1/rhVFyl4w95yXBeJw8eh_r6-5pjI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rhVFyl4w95yXBeJw8eh_r6-5pjI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 08:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d8:03:ea:8f:20:e4:e8:d6:39:d2:55:55:89:49:7d:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae1545ca5e30f79c9705e270f1e87fafafb9a632
        Validity
            Not Before: Sep 25 10:02:10 2026 GMT
            Not After : Sep 26 10:02:10 2026 GMT
        Subject: CN=609552e549b2a5b3ce6114872083e12edf2bad65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d0:5d:76:99:76:19:d7:aa:ae:f8:5e:4a:43:
                    c1:04:4b:2f:59:a5:8b:8d:67:de:6e:c3:05:bd:d1:
                    d8:e3:5c:3b:0f:3f:c4:14:90:d4:e3:4c:d3:d2:fd:
                    be:a4:20:4b:3e:d0:45:98:e5:e9:0c:a4:4e:a0:9b:
                    33:e6:c6:dd:45:a3:57:05:80:46:4d:d5:8c:93:e4:
                    ca:80:6e:b8:ce:f4:1a:ba:d5:16:fc:d5:4d:5e:45:
                    a7:16:fc:db:68:35:9a:4b:8c:15:df:26:cc:a8:f9:
                    9d:ac:4c:1e:b5:5a:b9:16:02:12:85:48:66:4c:16:
                    0b:6c:a0:c4:8b:e2:bf:ba:7d:c4:66:7b:a3:dd:28:
                    c2:b7:8e:a1:93:d0:b0:8c:92:7d:f1:f1:66:d8:fa:
                    4a:8c:a3:75:6b:9b:e9:da:24:a5:6d:a0:f0:bc:7a:
                    34:dd:d4:7d:c7:96:75:77:6c:a2:0c:11:bb:8d:cc:
                    48:a8:66:a5:5e:1d:53:71:72:78:0d:b3:9b:2b:87:
                    21:3c:ee:d7:bf:0d:67:a8:c6:1c:07:58:0f:54:7c:
                    10:6d:cb:eb:21:c5:a9:bf:e7:4b:e1:33:eb:cc:f2:
                    ca:b8:7b:5c:92:94:4e:b6:c8:60:af:43:b1:96:14:
                    e0:3a:40:84:67:4d:7b:08:43:43:e8:eb:75:1c:5d:
                    4d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:95:52:E5:49:B2:A5:B3:CE:61:14:87:20:83:E1:2E:DF:2B:AD:65
            X509v3 Authority Key Identifier:
                keyid:AE:15:45:CA:5E:30:F7:9C:97:05:E2:70:F1:E8:7F:AF:AF:B9:A6:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rhVFyl4w95yXBeJw8eh_r6-5pjI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/33f12a-9fca-4828-b8f1-9c704f815aaa/1/rhVFyl4w95yXBeJw8eh_r6-5pjI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/33f12a-9fca-4828-b8f1-9c704f815aaa/1/rhVFyl4w95yXBeJw8eh_r6-5pjI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:e3:a2:05:c8:60:fe:e4:65:36:be:2b:2a:32:81:3d:e3:75:
         11:5d:ca:e3:4d:a1:2c:96:8d:74:e3:37:b6:6e:8c:0f:0f:06:
         c0:48:09:aa:fd:2d:dc:01:48:94:89:c1:f6:b0:c9:29:6b:e1:
         a9:f2:ad:a1:72:46:1e:72:f3:65:a6:85:1f:ad:b1:ac:f6:83:
         d8:6d:f9:3c:93:ef:ce:e0:42:f0:64:65:cb:c9:b1:14:f6:98:
         c7:7d:73:2e:9e:ed:cc:cd:9e:68:21:88:bb:56:52:61:ca:c0:
         4e:dc:44:25:60:08:2b:fe:a1:f7:02:59:7d:11:b3:2c:ee:12:
         fa:3d:00:bb:58:67:cc:d0:4e:0b:72:ef:88:50:19:d3:fa:78:
         e4:8f:90:62:5e:d5:c9:ca:0f:fd:76:79:58:e9:49:23:31:b6:
         dd:69:da:8c:42:32:fb:64:73:42:00:98:b7:df:e8:da:d1:ee:
         d3:27:34:d7:27:16:89:59:28:0f:61:09:2a:f9:53:60:47:7c:
         fb:70:49:d8:9f:94:b0:2c:cb:c8:a9:93:d8:22:05:a8:8a:37:
         d0:6e:e3:b7:31:36:34:7d:ca:d5:6b:cf:27:dd:a0:8d:a1:07:
         11:d0:40:5f:bc:c7:05:50:fa:b3:97:b0:1c:ba:b0:75:73:dd:
         a3:62:80:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:17:37 2026 by rpki-client