Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.mft
File:                     RyaU2KOZo6ZvRC7HIpXHVKy7rUE.mft (raw, json)
Hash identifier:          FwD/ZKqZKmUk97cSdeCz/ZKP1IMuaafRQ7LP+5K2cH4=
Subject key identifier:   58:C6:D8:0E:F9:6D:28:BE:A9:D2:CE:8F:88:73:14:CE:27:E2:D5:11
Authority key identifier: 47:26:94:D8:A3:99:A3:A6:6F:44:2E:C7:22:95:C7:54:AC:BB:AD:41
Certificate issuer:       /CN=472694d8a399a3a66f442ec72295c754acbbad41
Certificate serial:       01A0C47C7B5F5E45DD80A1125B4B34D6CA74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.mft
Manifest number:          193E
Signing time:             Mon 21 Sep 2026 15:01:27 +0000
Manifest this update:     Mon 21 Sep 2026 15:01:27 +0000
Manifest next update:     Tue 22 Sep 2026 15:01:27 +0000
Files and hashes:         1: 9Y9_-ghmVyAuliB_ZM6L4N2aR9Y.roa (hash: AlB+NM2coMQme+Vwjxfjbx7bvSYOwHST/cCoDhabdh8=)
                          2: BGx_SKWg0A0x4u2zJMu40hnQx4Q.roa (hash: 3vgm19azZKbua/L5jF2wErVGYC2PH4djUu3AdY79HJs=)
                          3: RyaU2KOZo6ZvRC7HIpXHVKy7rUE.crl (hash: Z8iDyh313hKWFricosEHY48JvIgUuB861qPUjehgWqA=)
                          4: gHq4ZQAB43U72DuDXjjiZ0-2-00.roa (hash: UuXFiLQX/A/tFOUVtGrjRAOGOHSsYt/+KkH7+iWkPIk=)
                          5: xiXKqk3tGFwKj2r6-VSmJj7eq_k.roa (hash: 1zP1wd86zOnUvyVaHLe0E+PkkU2X/81i9Nla1ulLn0A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c4:7c:7b:5f:5e:45:dd:80:a1:12:5b:4b:34:d6:ca:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=472694d8a399a3a66f442ec72295c754acbbad41
        Validity
            Not Before: Sep 21 15:01:27 2026 GMT
            Not After : Sep 22 15:01:27 2026 GMT
        Subject: CN=58c6d80ef96d28bea9d2ce8f887314ce27e2d511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e6:54:5c:41:4d:81:36:6d:75:3b:1b:cc:e7:
                    2a:c0:f1:f7:67:97:fc:54:f1:4a:1a:de:74:d6:8d:
                    34:77:a6:e2:d8:c3:98:f9:d1:0e:8c:f3:9d:37:5b:
                    32:70:28:bc:45:47:44:6e:32:82:6b:f1:5e:a7:b3:
                    48:90:14:b0:be:2f:a6:b3:f0:0e:bb:80:dd:b8:35:
                    7b:4c:f8:bb:c2:16:55:ca:c9:30:d5:75:70:43:89:
                    d2:89:c6:f5:66:62:b8:18:a6:49:5d:18:a1:16:c4:
                    42:46:ce:3a:a9:02:14:50:de:ee:8a:0a:04:ac:ad:
                    fb:9a:f8:e7:ee:52:8f:22:cd:0f:c4:43:d5:c3:7b:
                    e6:9f:16:41:dc:bb:3e:98:3f:c1:88:b4:c9:66:2b:
                    20:62:ca:38:b5:42:83:3d:b2:34:28:54:a4:63:49:
                    dc:77:4a:9c:61:18:6e:77:99:5e:a2:1d:d0:1e:40:
                    f4:fc:41:e2:fe:65:fc:71:c7:8d:09:00:af:9f:e9:
                    f4:fb:8e:36:17:c5:51:32:da:ab:f4:c3:ca:49:3d:
                    20:57:e2:34:53:3e:20:48:2d:e4:26:66:5b:67:9e:
                    1a:f7:9d:33:c9:8c:79:6f:2b:f7:d1:db:ac:5e:33:
                    62:15:e2:4f:ca:0a:d2:2d:68:8e:10:bd:b4:a9:75:
                    82:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:C6:D8:0E:F9:6D:28:BE:A9:D2:CE:8F:88:73:14:CE:27:E2:D5:11
            X509v3 Authority Key Identifier:
                keyid:47:26:94:D8:A3:99:A3:A6:6F:44:2E:C7:22:95:C7:54:AC:BB:AD:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:db:e1:28:f3:69:f9:8d:3b:8f:66:c0:0f:04:74:d3:7f:7c:
         99:fc:ac:50:74:4c:10:ea:c4:c6:64:48:19:83:41:9d:0d:75:
         aa:c4:b2:e4:ea:a0:55:d6:7c:9d:71:1f:dc:d0:d0:6f:6f:92:
         c5:48:b7:b1:25:1c:8f:8c:60:14:54:29:be:64:c0:71:2c:c4:
         75:52:31:65:e2:38:39:14:0f:4a:ff:b2:ad:b5:ac:02:a5:4a:
         02:3e:d7:81:36:90:52:eb:16:d8:62:4f:b1:9f:e5:c2:4d:fc:
         a1:02:70:63:58:12:da:d6:36:a5:57:b8:cc:fb:de:ca:14:7d:
         1e:6c:0d:69:b2:04:65:b5:14:56:9c:e8:d1:6c:19:1c:d6:0d:
         76:81:ab:c4:9e:2f:20:10:b8:fb:c2:b6:9a:31:61:8d:cf:85:
         0b:f3:ef:37:24:97:65:d0:75:0f:46:a7:fa:16:70:e2:14:df:
         63:19:50:37:c9:3b:22:3c:60:ec:cc:b2:cf:e0:c9:e5:24:a5:
         12:4e:93:de:71:65:12:84:89:eb:36:c9:b7:f3:bc:cc:a8:ab:
         59:a1:b2:a9:e4:63:cd:5a:b8:3f:ce:4f:1b:8a:6c:49:4d:af:
         1d:29:50:34:c9:c0:8e:3c:09:cf:4d:70:b0:77:36:8a:40:98:
         74:1b:0c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:52:10 2026 by rpki-client