Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.mft
File:                     Cq4aYFi73NCDUGjjtPneUfK9kFc.mft (raw, json)
Hash identifier:          76VEUCQJVlx6a2K5etYX5mcECqalpw4q+FIFfE27u5Y=
Subject key identifier:   81:0D:18:6F:1C:4D:02:40:8D:A1:9C:C7:D3:89:81:1E:5E:82:1C:A8
Authority key identifier: 0A:AE:1A:60:58:BB:DC:D0:83:50:68:E3:B4:F9:DE:51:F2:BD:90:57
Certificate issuer:       /CN=0aae1a6058bbdcd0835068e3b4f9de51f2bd9057
Certificate serial:       01A0C4E9D7437082618E658AA6CD573F6E61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cq4aYFi73NCDUGjjtPneUfK9kFc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.mft
Manifest number:          1461
Signing time:             Mon 21 Sep 2026 17:00:54 +0000
Manifest this update:     Mon 21 Sep 2026 17:00:54 +0000
Manifest next update:     Tue 22 Sep 2026 17:00:54 +0000
Files and hashes:         1: Cq4aYFi73NCDUGjjtPneUfK9kFc.crl (hash: whqtoPZrepCv7U+78y4HLb0Coa9F55tXlj4YQUYVqek=)
                          2: yzLkeKkf0tPb4Uv9fas37hJCz_k.roa (hash: zKoTcGPS0jd4ECkZ/lyLggMREJXF/+DGOW+cdF5eKoA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Cq4aYFi73NCDUGjjtPneUfK9kFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 17:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c4:e9:d7:43:70:82:61:8e:65:8a:a6:cd:57:3f:6e:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0aae1a6058bbdcd0835068e3b4f9de51f2bd9057
        Validity
            Not Before: Sep 21 17:00:54 2026 GMT
            Not After : Sep 22 17:00:54 2026 GMT
        Subject: CN=810d186f1c4d02408da19cc7d389811e5e821ca8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7b:00:9d:6a:c8:86:ab:8a:93:8e:8c:f6:f7:
                    24:cd:11:4b:2c:e9:85:bb:b4:09:5f:b3:c8:8f:0f:
                    95:b7:c8:c9:7f:cf:94:e2:2d:48:4d:53:6e:61:c3:
                    e3:5d:10:37:12:20:44:98:8f:06:89:a2:60:e2:2c:
                    50:42:0e:fe:11:c7:1a:ce:d2:cf:32:d2:d6:94:20:
                    3e:66:6b:3d:56:06:3e:d4:77:ac:74:28:ec:a0:e5:
                    e4:4e:94:a5:5e:50:35:a7:55:80:c0:f8:80:0a:d0:
                    a6:24:6d:f5:5f:2d:3e:71:24:a2:40:38:7a:9a:68:
                    75:4c:45:0c:38:b6:93:08:8f:65:f9:32:04:b4:d4:
                    a2:cb:a9:d4:a2:31:f7:cb:0f:cf:ca:5b:74:fa:e5:
                    82:26:e0:1c:f9:e3:fe:0f:3b:d7:c0:8b:24:22:28:
                    02:61:22:5b:9d:39:6e:7c:17:64:b3:e1:37:09:c7:
                    d7:9e:9d:2e:3a:40:4d:0d:ff:94:b5:dc:40:5c:30:
                    6b:0d:98:6c:57:41:13:7b:c6:33:9f:eb:13:1c:bf:
                    d8:48:65:0d:3d:31:64:5d:d4:80:df:3f:a8:89:5b:
                    9b:18:8b:92:33:6b:5c:c1:d5:a2:79:58:dd:80:ad:
                    56:92:9f:31:fe:68:c1:55:82:94:f9:f0:95:2e:bd:
                    91:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:0D:18:6F:1C:4D:02:40:8D:A1:9C:C7:D3:89:81:1E:5E:82:1C:A8
            X509v3 Authority Key Identifier:
                keyid:0A:AE:1A:60:58:BB:DC:D0:83:50:68:E3:B4:F9:DE:51:F2:BD:90:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cq4aYFi73NCDUGjjtPneUfK9kFc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:e3:b1:74:f3:bb:b3:96:cb:70:a6:3a:0f:24:c8:41:41:93:
         64:57:31:12:51:07:99:52:d6:af:a4:c1:de:40:a1:d6:60:d6:
         f2:16:6a:b0:b1:59:ff:7a:55:15:92:a4:db:75:18:21:96:da:
         93:a6:02:44:77:1c:c4:62:b7:6f:58:48:71:7d:e1:7c:d2:f0:
         5d:26:4b:34:b9:d5:6e:96:3b:2d:da:2a:c4:0b:16:3f:6c:ad:
         26:4a:89:d1:23:fb:5b:22:69:62:84:b4:c3:6d:92:ca:80:74:
         c7:95:c2:a3:79:9b:ee:e8:29:d6:33:bd:30:8c:06:be:a1:a4:
         85:24:71:1f:85:ef:9b:0b:5b:08:41:c0:2e:6b:04:e3:89:1c:
         45:3d:65:9f:7f:ec:03:dd:fc:45:00:48:84:c0:8f:36:06:44:
         a1:44:18:78:8f:23:ed:61:0e:42:ba:65:1e:9a:78:59:c0:1e:
         cd:33:11:05:78:11:e1:eb:b3:1e:80:a2:f7:8f:7f:8c:56:1e:
         c9:00:36:be:b2:7b:d3:65:07:af:4d:98:1f:43:fd:34:1e:67:
         0f:cc:26:ca:76:4c:9f:18:42:22:73:f9:fe:34:bb:a0:3d:67:
         d1:cd:15:23:33:59:2f:5e:ad:e7:28:28:4a:fc:e4:6d:80:02:
         75:54:51:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:21:46 2026 by rpki-client