Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft
File:                     rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft (raw, json)
Hash identifier:          WxEapqJmRznrMwXCmU6Zj2An4g+yhhZyimK0M6eHixc=
Subject key identifier:   5F:71:01:39:43:E7:37:E4:27:EE:5D:CF:19:5A:13:ED:42:5F:09:B4
Authority key identifier: AF:12:1C:D6:E1:1D:A0:95:F8:56:D7:9D:EE:C4:69:D0:C6:35:84:94
Certificate issuer:       /CN=af121cd6e11da095f856d79deec469d0c6358494
Certificate serial:       01A0D0EE4D9EC0B7F37752F6E5547CBC7B00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rxIc1uEdoJX4Vted7sRp0MY1hJQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft
Manifest number:          15B2
Signing time:             Thu 24 Sep 2026 01:01:13 +0000
Manifest this update:     Thu 24 Sep 2026 01:01:13 +0000
Manifest next update:     Fri 25 Sep 2026 01:01:13 +0000
Files and hashes:         1: Kt3WssTVExomZWHJCqXl8pbqTeI.roa (hash: sMdfEY5PN8jhtfsylFmunzan1olQaOOSvuDOe68g4ws=)
                          2: KzmoITHkJpLOR4Tlul5pobyRKM4.roa (hash: AsqRiFYDTCnKZFcWZmiW079vgPj+Gpml9bimn7NxEjY=)
                          3: LeESlSzWIvuQdTBNS-mk1tTyv7E.roa (hash: WD96tCmI2Z4zPrVkF6yX9hz40ljCQT+UIo7XuVxQtwE=)
                          4: rXLsHixYlq3Kcw9EvhZkSV4zLvI.roa (hash: xL1IzYaCYhuM2YhqoZfpmf/cRlZ3zbvhm0l28fnKcTk=)
                          5: rxIc1uEdoJX4Vted7sRp0MY1hJQ.crl (hash: IRo49pLFM6eXrO9fZYnBqSAw1PEvvFUfPZYph1HkBak=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rxIc1uEdoJX4Vted7sRp0MY1hJQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:ee:4d:9e:c0:b7:f3:77:52:f6:e5:54:7c:bc:7b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af121cd6e11da095f856d79deec469d0c6358494
        Validity
            Not Before: Sep 24 01:01:13 2026 GMT
            Not After : Sep 25 01:01:13 2026 GMT
        Subject: CN=5f71013943e737e427ee5dcf195a13ed425f09b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:2c:b5:c3:ab:f3:f7:c4:e0:4e:b1:9c:dc:3a:
                    80:51:51:29:53:2d:5e:39:e1:68:0a:18:82:9c:1f:
                    6d:d0:26:f7:c8:78:e0:2d:c4:18:a7:8c:fd:ee:29:
                    7b:b5:52:f8:8f:f5:1b:a2:7e:3a:43:2a:47:b3:5b:
                    ac:71:fa:e0:9d:d4:60:e5:bd:53:2d:8f:c9:7c:eb:
                    83:cc:56:00:82:d1:d7:57:51:1e:c9:f4:db:40:48:
                    6c:3e:57:ce:33:ee:e1:42:1d:77:17:be:d2:7c:b3:
                    e5:d2:fc:07:7b:ce:de:7e:1b:31:9e:96:59:28:ec:
                    1b:1e:0d:ac:f0:f3:2a:8e:d4:ce:55:03:40:e7:7e:
                    34:b2:27:13:bc:dd:b4:8c:64:c2:9c:72:31:d2:d7:
                    5a:79:d4:c0:d3:a0:32:24:a6:ca:e6:4b:d3:2f:a6:
                    86:70:0f:40:5c:ca:51:90:a4:7c:3b:bd:3c:d1:ad:
                    ca:7e:20:88:02:dc:b2:f6:67:c0:d3:5c:bd:32:97:
                    fc:30:f9:97:6e:10:ab:be:fa:78:40:8f:6f:05:46:
                    7f:09:e5:60:27:0b:af:bd:07:53:5b:2b:54:16:d7:
                    83:6c:02:74:d1:80:52:fa:30:b6:59:3f:c7:9b:53:
                    0a:d4:20:76:b4:c0:39:d1:49:26:3b:8e:20:47:fe:
                    27:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:71:01:39:43:E7:37:E4:27:EE:5D:CF:19:5A:13:ED:42:5F:09:B4
            X509v3 Authority Key Identifier:
                keyid:AF:12:1C:D6:E1:1D:A0:95:F8:56:D7:9D:EE:C4:69:D0:C6:35:84:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rxIc1uEdoJX4Vted7sRp0MY1hJQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:92:f4:f2:f1:3a:87:66:3a:ea:b5:6b:e1:e1:97:71:a3:02:
         ad:89:62:cc:05:f1:0d:5b:f0:84:cb:78:0d:d0:6f:a6:f1:65:
         34:60:45:d5:0d:77:75:d7:03:ee:ec:78:b9:fe:99:16:0c:b0:
         20:63:4f:67:da:23:e7:4d:14:2d:7e:21:3e:63:75:0b:a6:d8:
         55:b0:25:45:5e:cd:64:24:4c:31:f1:27:fd:d7:a0:4d:cb:71:
         d7:a3:48:11:0f:60:9e:2e:a8:fd:14:fe:df:19:86:44:64:ca:
         bc:0a:6e:85:da:55:69:15:5b:ac:df:18:b8:80:3b:ae:81:13:
         34:0f:02:56:42:8d:2c:5c:fb:f4:2d:07:9b:93:9b:92:f1:da:
         84:1f:0a:47:ce:fa:13:e5:fa:ae:35:78:2d:01:1a:a8:85:db:
         d6:6f:6d:9d:53:81:fd:10:71:ae:02:33:bc:88:ca:52:0c:1f:
         0a:2d:2d:18:e0:8e:92:78:20:95:a0:f2:6b:64:e0:ef:07:f7:
         79:36:e8:45:1b:3d:62:70:2a:8b:be:be:fa:39:26:01:67:19:
         53:5e:90:95:f3:3f:55:98:b3:7b:23:dc:bc:dc:c5:6d:9a:f4:
         f6:cc:f0:d8:7f:c8:80:0c:36:70:1b:e8:1d:6d:99:1b:95:8b:
         ac:5b:0e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:42:56 2026 by rpki-client