Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/rtyPMnpGGWTAqHqceAlAHFfIbUE.mft
File:                     rtyPMnpGGWTAqHqceAlAHFfIbUE.mft (raw, json)
Hash identifier:          P41AK5d6pFL53KZkbNoBUIEmAn0n1NyVDCs+/p/UyTo=
Subject key identifier:   48:E0:9E:2E:B0:FC:29:FD:DF:F4:6F:20:A3:96:9F:FF:73:D7:A4:EB
Authority key identifier: AE:DC:8F:32:7A:46:19:64:C0:A8:7A:9C:78:09:40:1C:57:C8:6D:41
Certificate issuer:       /CN=aedc8f327a461964c0a87a9c7809401c57c86d41
Certificate serial:       01A0FEA324A8947C07A764310900DAA938B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rtyPMnpGGWTAqHqceAlAHFfIbUE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/rtyPMnpGGWTAqHqceAlAHFfIbUE.mft
Manifest number:          1A83
Signing time:             Fri 02 Oct 2026 22:01:39 +0000
Manifest this update:     Fri 02 Oct 2026 22:01:39 +0000
Manifest next update:     Sat 03 Oct 2026 22:01:39 +0000
Files and hashes:         1: r9eaNKOzK8PPUei6RdKb9LkqhTI.roa (hash: +R7LC8z04wYSjkyWe1Pk5HhKfodwp2zyyiW39xvrzog=)
                          2: rtyPMnpGGWTAqHqceAlAHFfIbUE.crl (hash: eJOpxtQawEN0BtxaTuK+LM3upJB6HBzxM+fmqBCvckI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/rtyPMnpGGWTAqHqceAlAHFfIbUE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/rtyPMnpGGWTAqHqceAlAHFfIbUE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rtyPMnpGGWTAqHqceAlAHFfIbUE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Oct 2026 22:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:fe:a3:24:a8:94:7c:07:a7:64:31:09:00:da:a9:38:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aedc8f327a461964c0a87a9c7809401c57c86d41
        Validity
            Not Before: Oct  2 22:01:39 2026 GMT
            Not After : Oct  3 22:01:39 2026 GMT
        Subject: CN=48e09e2eb0fc29fddff46f20a3969fff73d7a4eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:74:bd:7c:fa:47:66:14:5c:39:b5:d8:71:e0:
                    37:5a:cc:67:94:36:d5:d0:17:40:3a:2e:75:39:85:
                    08:e8:95:8f:33:8f:ea:21:8c:5f:93:2f:84:58:6d:
                    01:69:91:b7:76:4c:19:c7:91:6c:6d:e0:8e:41:06:
                    7b:a3:4c:42:bd:87:c5:03:67:0b:09:c3:f0:0c:a2:
                    ae:35:ee:19:69:e6:59:53:db:dc:d4:bd:4f:b9:2d:
                    ae:0d:b9:42:97:44:82:da:19:a4:f4:10:bc:02:54:
                    87:62:00:88:51:d4:44:79:a7:e7:93:b3:da:f0:98:
                    c3:19:a0:1d:b3:20:77:e8:52:83:de:1c:cf:1a:0e:
                    9a:5f:13:eb:d3:96:01:8d:bf:59:1f:23:33:b9:0e:
                    cf:cd:94:5a:5d:b2:e2:4d:81:aa:c7:65:2b:49:52:
                    20:b6:bc:35:d5:e8:2e:0b:47:ce:29:84:b2:ee:b4:
                    ad:cc:f2:e1:1b:f4:43:bc:38:11:9c:6b:86:1e:dd:
                    fd:07:5e:79:bb:ef:09:c3:99:f3:d0:de:fe:0c:2f:
                    72:2c:dd:04:4c:11:21:ce:11:9b:0d:df:50:59:c4:
                    df:d1:de:18:99:f9:09:70:3f:0c:2a:13:4f:1b:39:
                    46:0c:a3:f8:6f:cd:fe:dd:e3:ad:52:b7:0f:e9:cc:
                    4b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:E0:9E:2E:B0:FC:29:FD:DF:F4:6F:20:A3:96:9F:FF:73:D7:A4:EB
            X509v3 Authority Key Identifier:
                keyid:AE:DC:8F:32:7A:46:19:64:C0:A8:7A:9C:78:09:40:1C:57:C8:6D:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtyPMnpGGWTAqHqceAlAHFfIbUE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/rtyPMnpGGWTAqHqceAlAHFfIbUE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/rtyPMnpGGWTAqHqceAlAHFfIbUE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:43:b7:5b:3b:3f:c7:a0:6f:22:68:1c:2f:78:9a:f7:f3:37:
         4a:41:f6:e7:a1:cf:17:e0:1c:e7:30:94:5c:85:99:51:d5:93:
         97:3e:87:36:01:8a:e1:2d:c0:5b:ba:8e:13:4e:52:0e:a4:f9:
         82:bb:fe:3b:63:c6:b1:aa:a5:6c:b9:43:30:17:f7:29:77:16:
         0f:44:6e:cf:67:6f:f5:28:2a:48:e0:6f:a0:da:32:b8:44:0d:
         b5:eb:c0:95:c3:f4:de:af:9e:2d:59:13:33:5f:56:94:f7:5d:
         42:e9:dc:f3:bb:aa:6f:ab:3f:b9:be:b2:35:bb:53:89:3f:fe:
         98:d8:3d:b7:1f:1e:8f:84:41:bb:e6:d2:e5:2d:30:87:02:69:
         e0:0e:a2:6a:8a:b3:bb:f0:3a:09:53:df:64:1d:a5:b1:3c:08:
         f1:bd:55:e5:d1:76:e6:29:16:b5:7f:ea:e3:fa:62:aa:64:9c:
         ea:31:6f:6c:41:a4:64:ec:96:df:76:9c:f7:b8:39:c6:00:b4:
         ea:05:3e:07:95:c4:1c:4b:60:c5:ec:66:56:96:bc:de:f9:b3:
         37:90:05:ea:e0:b1:00:0d:96:b1:87:b1:34:69:3c:02:98:61:
         40:97:73:74:eb:3e:36:6a:3e:8a:bc:37:fb:20:06:b9:e9:63:
         a8:1a:13:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 05:09:41 2026 by rpki-client