Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/9a500d-9177-4241-b432-4cc28d0bd35d/1/pFo97qIq1w9Evf_z2sp4fPq3Ovw.mft
File:                     pFo97qIq1w9Evf_z2sp4fPq3Ovw.mft (raw, json)
Hash identifier:          sb04kreS4qwR8Imv/AOg74BgdAFEELeHq459TAogrXo=
Subject key identifier:   4C:FE:3E:C0:A4:67:42:4D:60:9F:0B:14:A4:A4:3F:D2:D7:A7:CE:DF
Authority key identifier: A4:5A:3D:EE:A2:2A:D7:0F:44:BD:FF:F3:DA:CA:78:7C:FA:B7:3A:FC
Certificate issuer:       /CN=a45a3deea22ad70f44bdfff3daca787cfab73afc
Certificate serial:       01A128E869613E522B0CCA176605905E8C7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pFo97qIq1w9Evf_z2sp4fPq3Ovw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/9a500d-9177-4241-b432-4cc28d0bd35d/1/pFo97qIq1w9Evf_z2sp4fPq3Ovw.mft
Manifest number:          0196
Signing time:             Sun 11 Oct 2026 03:01:22 +0000
Manifest this update:     Sun 11 Oct 2026 03:01:22 +0000
Manifest next update:     Mon 12 Oct 2026 03:01:22 +0000
Files and hashes:         1: ZhmfZOQthLNwaXu66U6ErWqlalA.asa (hash: qf+Z2Ej6j2Id/dJp4k8hFnsz0b10rm8/N0nNZYscrA0=)
                          2: pFo97qIq1w9Evf_z2sp4fPq3Ovw.crl (hash: Zzw47CVDrPyUgT1FXlaZ/uu1gAHoVHgHYdCN6bEPX48=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/9a500d-9177-4241-b432-4cc28d0bd35d/1/pFo97qIq1w9Evf_z2sp4fPq3Ovw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/9a500d-9177-4241-b432-4cc28d0bd35d/1/pFo97qIq1w9Evf_z2sp4fPq3Ovw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pFo97qIq1w9Evf_z2sp4fPq3Ovw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 03:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:28:e8:69:61:3e:52:2b:0c:ca:17:66:05:90:5e:8c:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a45a3deea22ad70f44bdfff3daca787cfab73afc
        Validity
            Not Before: Oct 11 03:01:22 2026 GMT
            Not After : Oct 12 03:01:22 2026 GMT
        Subject: CN=4cfe3ec0a467424d609f0b14a4a43fd2d7a7cedf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:50:42:e1:78:62:6e:1a:75:d8:50:8e:cd:bf:
                    f6:1f:6e:b0:32:1f:b0:5e:ff:47:fa:d4:34:dd:52:
                    05:8b:1c:19:ec:0f:58:36:f5:60:e7:58:eb:c4:69:
                    b1:9e:4d:21:84:fd:ad:7e:e0:40:56:df:c2:b3:bb:
                    79:98:09:38:80:c1:16:13:a1:fd:1c:49:c8:a5:b0:
                    0e:d8:0e:d4:72:dc:14:b4:c7:91:f7:0e:c9:c0:7c:
                    2b:1f:4f:61:bb:bb:75:cd:2b:59:b6:d9:0b:23:ce:
                    9c:25:7a:0e:f6:f8:ef:0b:06:e5:e7:72:fc:b3:63:
                    3b:fb:66:50:f4:b0:09:ff:7c:34:25:e3:f7:58:2e:
                    56:81:e5:79:75:67:d3:3b:4a:da:b5:19:4e:24:55:
                    39:3a:e8:9d:f1:ef:cd:4c:cd:c6:b2:e7:09:70:24:
                    63:39:12:02:02:34:73:c9:b0:cd:20:bb:0d:4f:75:
                    6c:b2:c5:f1:5a:be:60:c7:61:3d:65:5e:15:05:a0:
                    a6:21:f2:1a:3f:1e:31:59:e0:22:99:62:40:b4:65:
                    dc:27:90:98:8a:49:8d:95:e4:df:80:c5:fc:b5:78:
                    21:60:b9:40:d5:03:8b:db:a0:f3:3b:de:30:05:21:
                    4f:da:d1:c1:ee:16:fb:a0:3f:69:07:94:dd:bb:88:
                    98:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:FE:3E:C0:A4:67:42:4D:60:9F:0B:14:A4:A4:3F:D2:D7:A7:CE:DF
            X509v3 Authority Key Identifier:
                keyid:A4:5A:3D:EE:A2:2A:D7:0F:44:BD:FF:F3:DA:CA:78:7C:FA:B7:3A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pFo97qIq1w9Evf_z2sp4fPq3Ovw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9a500d-9177-4241-b432-4cc28d0bd35d/1/pFo97qIq1w9Evf_z2sp4fPq3Ovw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9a500d-9177-4241-b432-4cc28d0bd35d/1/pFo97qIq1w9Evf_z2sp4fPq3Ovw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:a9:6a:99:50:ab:fd:05:4d:26:90:0e:f2:5a:20:99:02:d1:
         44:05:97:8d:b1:6d:2a:ba:c6:09:e6:79:e1:0c:8a:54:35:67:
         52:9d:99:c3:de:b1:11:8a:f6:21:f3:6b:0d:50:30:a2:6e:0c:
         6e:5f:b5:ce:af:65:ec:5a:59:be:a6:a4:b7:89:15:00:31:a9:
         02:3b:09:6b:7f:f7:d2:7c:b8:8c:9f:ed:18:01:d9:ad:91:c9:
         b9:fe:90:7f:b3:d4:9b:57:7f:9f:85:03:82:92:de:6c:6d:e6:
         da:89:07:e5:f2:72:54:88:42:6d:f4:65:f9:f6:ad:a0:f7:13:
         e1:63:8d:ee:96:78:26:87:2c:4a:ba:2f:fd:b3:10:bb:48:45:
         64:96:83:3f:91:d9:69:91:74:c2:3b:50:4f:12:5a:52:7b:02:
         12:dc:e6:fe:d7:60:1e:cb:84:e9:4d:56:dd:07:d4:4c:79:fa:
         e3:ed:80:68:6b:17:3c:03:58:77:80:30:5d:09:f1:3d:77:59:
         80:64:7b:9f:e1:48:e4:70:a2:09:31:77:bc:e5:81:ed:64:64:
         59:56:b7:b1:37:a4:65:d4:43:5e:09:3f:55:47:95:15:95:8f:
         e6:74:b3:58:84:fd:36:94:64:c7:07:71:5a:36:18:1b:b5:fa:
         b3:19:eb:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 13:50:55 2026 by rpki-client