Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/2d5960-c66d-42df-95d2-4052450c90a9/1/p8dUTotILSMRkDcG7tckBJ_jhb8.mft
File:                     p8dUTotILSMRkDcG7tckBJ_jhb8.mft (raw, json)
Hash identifier:          qih/GRvkcFtpzoI7KZR3FLzRIQtD18gWKS4b+mdcYlU=
Subject key identifier:   54:FE:DC:D0:03:92:7B:FD:F5:64:6D:A5:34:6E:FD:8C:46:B0:B1:DE
Authority key identifier: A7:C7:54:4E:8B:48:2D:23:11:90:37:06:EE:D7:24:04:9F:E3:85:BF
Certificate issuer:       /CN=a7c7544e8b482d2311903706eed724049fe385bf
Certificate serial:       01A0DC4E17DC16568C8E29E64B535CF0CA27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p8dUTotILSMRkDcG7tckBJ_jhb8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/2d5960-c66d-42df-95d2-4052450c90a9/1/p8dUTotILSMRkDcG7tckBJ_jhb8.mft
Manifest number:          14F4
Signing time:             Sat 26 Sep 2026 06:01:40 +0000
Manifest this update:     Sat 26 Sep 2026 06:01:40 +0000
Manifest next update:     Sun 27 Sep 2026 06:01:40 +0000
Files and hashes:         1: L5BGhmd0saN8xecQNe9wiYjTs78.roa (hash: SbX44mvpZzphunBDxZ1gsi9c+uRL89kA1JQ3kMK3eJg=)
                          2: cgfGejDrVLaUqLSIzCYonqY6EL8.roa (hash: Mq/JUvCV9dSTx3b4h/eSywAPXcHk8+Plfex5qUmVasE=)
                          3: jhWbeo3zbogtegwkjldlY2v1Cmo.roa (hash: jMRPW06nsrBs6eYuP8nzo2cpYTotCTqzqowlQklFSC0=)
                          4: p8dUTotILSMRkDcG7tckBJ_jhb8.crl (hash: AMxv6cWFdOErORXKcctZ7fdDix9pi5Rab7yxx8x4jRU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/2d5960-c66d-42df-95d2-4052450c90a9/1/p8dUTotILSMRkDcG7tckBJ_jhb8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/2d5960-c66d-42df-95d2-4052450c90a9/1/p8dUTotILSMRkDcG7tckBJ_jhb8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p8dUTotILSMRkDcG7tckBJ_jhb8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dc:4e:17:dc:16:56:8c:8e:29:e6:4b:53:5c:f0:ca:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7c7544e8b482d2311903706eed724049fe385bf
        Validity
            Not Before: Sep 26 06:01:40 2026 GMT
            Not After : Sep 27 06:01:40 2026 GMT
        Subject: CN=54fedcd003927bfdf5646da5346efd8c46b0b1de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a7:47:b2:2a:8b:83:fb:66:54:ce:b2:8d:19:
                    56:cb:dc:ed:80:3b:5b:f0:f3:93:0a:c0:23:06:bf:
                    30:55:05:b7:c0:f5:39:57:1e:4a:37:67:31:cd:c6:
                    e9:8d:dd:83:9b:2c:fe:0d:0f:d6:db:4a:8b:1f:be:
                    53:2e:4d:ef:9f:7b:83:88:8f:82:0a:8f:a9:b3:8e:
                    43:55:9e:ff:8f:f5:0d:89:81:dc:eb:6c:17:ad:57:
                    79:8c:80:16:5b:d1:b4:d1:ec:35:f8:7d:d4:01:56:
                    12:f1:61:2f:91:06:66:46:3b:71:ee:41:6f:f5:4c:
                    07:a3:27:8c:1d:65:37:08:ae:bf:c4:e0:da:bd:3a:
                    fa:c1:9a:68:99:ef:b8:f4:81:21:11:ca:26:d5:4a:
                    2e:f7:08:d8:53:38:14:bf:6b:41:c3:54:5e:e5:d3:
                    d0:c2:f2:6d:83:6a:d4:72:3c:09:0c:25:36:0c:a9:
                    92:e4:2c:c9:7e:e7:4e:15:d6:5b:23:90:6a:d1:8f:
                    26:2d:f3:89:b5:e8:67:89:de:2c:4f:e2:c1:28:08:
                    27:da:21:d5:59:80:5b:09:6f:f0:68:f8:0f:aa:9b:
                    dc:3e:18:ce:02:0b:44:e5:51:bc:4c:18:46:ca:fd:
                    37:5f:2e:0e:4d:ed:62:df:38:25:1b:16:25:dd:48:
                    58:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:FE:DC:D0:03:92:7B:FD:F5:64:6D:A5:34:6E:FD:8C:46:B0:B1:DE
            X509v3 Authority Key Identifier:
                keyid:A7:C7:54:4E:8B:48:2D:23:11:90:37:06:EE:D7:24:04:9F:E3:85:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p8dUTotILSMRkDcG7tckBJ_jhb8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/2d5960-c66d-42df-95d2-4052450c90a9/1/p8dUTotILSMRkDcG7tckBJ_jhb8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/2d5960-c66d-42df-95d2-4052450c90a9/1/p8dUTotILSMRkDcG7tckBJ_jhb8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:49:00:a1:de:78:b4:dd:69:f8:77:a0:56:d4:67:4e:9e:df:
         56:69:9d:ff:01:b3:4f:a2:3d:01:e9:72:75:63:d8:21:3c:8c:
         cd:90:61:07:16:d5:db:a3:c3:23:d9:9f:14:f8:e0:78:8d:cc:
         74:fa:40:5a:d9:94:34:16:8e:0f:65:4c:8e:33:83:e2:71:bb:
         45:60:8b:cc:06:fd:c8:26:74:fe:e0:a4:37:19:d7:1b:23:86:
         87:03:7d:a6:c7:95:99:da:ee:82:b3:e8:eb:b9:d7:78:1a:2e:
         9d:67:72:a4:4f:58:45:36:8f:31:3a:8b:6e:fb:d0:a9:2c:26:
         fb:77:a3:e2:0e:02:95:73:c0:fd:74:54:9f:8c:33:62:29:d0:
         ac:04:67:ea:75:be:f1:28:db:70:3e:c8:40:ea:49:9d:b4:fe:
         79:30:4c:92:e9:f5:ea:98:7a:48:2b:5c:56:d5:f4:e4:ee:fc:
         5c:a1:df:90:b4:12:7d:fe:d0:08:49:ae:c7:4d:21:ad:fc:75:
         77:e8:94:f2:a3:f1:56:f8:6e:04:20:e1:6d:be:5e:ac:54:a1:
         19:88:6b:5c:d7:8c:d9:66:cf:ba:53:73:b6:b3:97:12:49:20:
         c0:04:cd:57:df:7c:75:35:3d:49:9d:5b:87:06:d8:41:71:98:
         df:cf:cd:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:19:56 2026 by rpki-client