Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/4n5m5APTHHlYM1KYFo3mCiFcDA8.mft
File:                     4n5m5APTHHlYM1KYFo3mCiFcDA8.mft (raw, json)
Hash identifier:          Mzav120YnSEVdvpN20sAKO85TdA2RDf0GlgCyrnu/zY=
Subject key identifier:   42:CF:36:90:93:39:E5:C3:84:C1:5F:A1:41:1A:FF:25:AD:B9:EE:67
Authority key identifier: E2:7E:66:E4:03:D3:1C:79:58:33:52:98:16:8D:E6:0A:21:5C:0C:0F
Certificate issuer:       /CN=e27e66e403d31c7958335298168de60a215c0c0f
Certificate serial:       01A0C1E88A82ED1139B50690E319097018EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4n5m5APTHHlYM1KYFo3mCiFcDA8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/4n5m5APTHHlYM1KYFo3mCiFcDA8.mft
Manifest number:          09C6
Signing time:             Mon 21 Sep 2026 03:00:37 +0000
Manifest this update:     Mon 21 Sep 2026 03:00:37 +0000
Manifest next update:     Tue 22 Sep 2026 03:00:37 +0000
Files and hashes:         1: 4n5m5APTHHlYM1KYFo3mCiFcDA8.crl (hash: UgsAnh9vrOekQWJA3e3cdCEW+FA5VXK/q51gFngNiRM=)
                          2: TzjkxJ5uhGEfHXwvHlagl5xkbsQ.roa (hash: qXXMC/HeIWPrRvKJ2DgRkb/ol4IjgdGdGjqNdS+NMKo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/4n5m5APTHHlYM1KYFo3mCiFcDA8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/4n5m5APTHHlYM1KYFo3mCiFcDA8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4n5m5APTHHlYM1KYFo3mCiFcDA8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c1:e8:8a:82:ed:11:39:b5:06:90:e3:19:09:70:18:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e27e66e403d31c7958335298168de60a215c0c0f
        Validity
            Not Before: Sep 21 03:00:37 2026 GMT
            Not After : Sep 22 03:00:37 2026 GMT
        Subject: CN=42cf36909339e5c384c15fa1411aff25adb9ee67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5f:d6:77:00:dc:76:b0:43:74:21:6a:d4:db:
                    6b:ea:09:ff:f1:f6:09:b1:f6:00:64:dd:2a:81:0e:
                    fd:0a:c6:04:84:b1:57:4e:8f:50:33:0a:4d:a8:6e:
                    7e:a7:84:61:4e:2d:73:c2:d4:50:f0:64:bf:1a:63:
                    ba:30:b0:b5:4c:cb:0a:d7:c3:d4:de:97:c6:f3:a2:
                    aa:b3:d8:fa:3e:a5:0e:97:3e:ff:98:b9:c1:51:fc:
                    19:59:72:a8:b3:c7:5c:e1:51:51:9d:d2:20:b3:ec:
                    a0:50:28:ca:cc:48:b6:9c:9e:25:4d:bf:c8:e1:89:
                    f9:0b:ff:a7:84:02:7f:33:b5:a5:75:20:81:17:7f:
                    6a:a8:30:64:69:57:29:a6:02:10:c0:10:50:71:10:
                    86:6b:18:31:d0:c7:bf:32:53:a8:5d:f9:b5:86:ef:
                    c0:d4:42:ed:58:bb:03:78:9a:e9:f6:be:4a:e3:9a:
                    b8:79:94:8e:a7:e3:88:e4:0e:ae:97:10:bc:a5:aa:
                    14:0b:85:91:a7:c7:f9:67:6e:3d:d0:96:91:d5:eb:
                    a2:c2:68:91:62:33:9e:ff:23:b0:b9:3b:02:f0:e0:
                    1d:9c:93:ba:28:f1:e0:d0:a8:d6:f2:b8:51:b8:2b:
                    0d:d3:95:5e:0b:4c:e6:93:d5:0e:9b:e8:45:eb:3f:
                    18:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:CF:36:90:93:39:E5:C3:84:C1:5F:A1:41:1A:FF:25:AD:B9:EE:67
            X509v3 Authority Key Identifier:
                keyid:E2:7E:66:E4:03:D3:1C:79:58:33:52:98:16:8D:E6:0A:21:5C:0C:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4n5m5APTHHlYM1KYFo3mCiFcDA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/4n5m5APTHHlYM1KYFo3mCiFcDA8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/4n5m5APTHHlYM1KYFo3mCiFcDA8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:17:92:e4:d0:b3:40:3b:c2:4b:31:8e:fd:53:fa:75:29:ee:
         bc:ac:30:c9:06:f5:03:3c:75:8a:a8:8c:83:19:1f:2f:17:dc:
         ef:00:93:66:32:fb:98:eb:b9:54:56:b2:88:91:a7:02:3d:5c:
         bd:98:5e:d1:67:25:70:3c:00:63:56:b4:ab:51:ef:ea:66:a5:
         16:de:14:27:fe:e7:63:7d:71:a8:9e:bb:28:9a:6c:90:de:2d:
         4d:9f:a4:c9:7e:a3:bf:32:8e:05:c8:9b:8d:e4:b6:69:98:ee:
         fb:18:08:2c:3d:01:61:5b:73:08:42:cb:ee:40:e0:32:73:10:
         5e:09:b6:66:d6:79:18:34:22:9c:e6:99:58:f8:33:54:16:2b:
         7e:4c:a5:96:d3:a2:6b:5f:26:4f:01:e8:20:88:12:b7:a2:93:
         68:0f:3c:78:4b:0a:1e:c0:46:c3:46:04:b6:ce:6d:56:dd:68:
         b0:f4:c1:67:bc:e9:04:98:b8:bf:da:03:5e:92:e4:1d:2e:47:
         2d:6a:02:ff:51:48:78:ee:86:f9:66:25:bc:e3:53:b8:d0:04:
         d0:df:99:e1:31:50:2e:af:32:c3:5e:f6:d9:ab:1c:13:01:cd:
         93:40:07:e4:7f:34:a7:1b:7d:93:d0:bf:8e:5f:f1:dd:4a:b5:
         d8:7d:6c:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:45:52 2026 by rpki-client