Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.mft
File:                     A39TL6Ji9ca9lhW8151u3UPy4HU.mft (raw, json)
Hash identifier:          +1p0ix0k69BEgvM2DMJr9YCSqGrPJXwsB2zb0wTva2g=
Subject key identifier:   D2:5C:E6:87:76:11:17:68:11:99:50:65:AA:CB:39:FD:48:ED:7D:7E
Authority key identifier: 03:7F:53:2F:A2:62:F5:C6:BD:96:15:BC:D7:9D:6E:DD:43:F2:E0:75
Certificate issuer:       /CN=037f532fa262f5c6bd9615bcd79d6edd43f2e075
Certificate serial:       01A0DB04510B344439D19B2960766DF04938
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A39TL6Ji9ca9lhW8151u3UPy4HU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.mft
Manifest number:          1A72
Signing time:             Sat 26 Sep 2026 00:01:28 +0000
Manifest this update:     Sat 26 Sep 2026 00:01:28 +0000
Manifest next update:     Sun 27 Sep 2026 00:01:28 +0000
Files and hashes:         1: 0kDLFicUYCSnk5qezsAnlqD_YsQ.roa (hash: nPUI+tPRgC8/2WDdTR0OhIepUfEAFxE9m9YTijKjEm8=)
                          2: 5S_7thf2DaNAtWCpIaM3S8JGyIw.roa (hash: gFO7mmA7nFE7H8OIcfxRMIamOyG5pl0gNHLu/ghYBzU=)
                          3: A39TL6Ji9ca9lhW8151u3UPy4HU.crl (hash: ioU/ETqai1q52LeGWFKTyMvq8youPhopLoORnXy2ZCg=)
                          4: okyJ_dyqGcdnFwHJe7BtYHyXka8.roa (hash: 4dVv/6YLlqIKpJZjxm1+2Z9rbJ0osG+l17eURfhyO4s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A39TL6Ji9ca9lhW8151u3UPy4HU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 00:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:db:04:51:0b:34:44:39:d1:9b:29:60:76:6d:f0:49:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=037f532fa262f5c6bd9615bcd79d6edd43f2e075
        Validity
            Not Before: Sep 26 00:01:28 2026 GMT
            Not After : Sep 27 00:01:28 2026 GMT
        Subject: CN=d25ce6877611176811995065aacb39fd48ed7d7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:21:3f:59:14:29:c7:ee:95:41:04:b4:2e:7e:
                    14:ff:76:8c:ed:a9:63:e5:b2:70:28:dc:cb:4c:b3:
                    78:9e:24:9c:d7:4d:e0:69:b6:3b:dd:f8:b5:8a:cf:
                    60:14:9f:47:e1:0f:93:94:67:2d:ac:06:a9:17:e2:
                    ea:cf:92:7e:42:44:2d:76:7b:4f:87:0a:a8:5f:17:
                    28:c6:af:57:85:92:19:0e:7f:ab:9b:e9:61:c1:78:
                    20:88:cb:5d:27:02:06:e9:b9:ee:b8:a4:92:6c:ff:
                    d1:30:cf:75:06:46:60:be:f1:f6:ae:51:8d:d4:ea:
                    2b:0d:a7:58:5f:b3:d8:97:ef:87:9f:69:3d:60:66:
                    00:d0:52:8f:bf:86:52:76:21:b1:c5:de:ec:3c:98:
                    5c:53:af:5c:d0:a2:9a:e4:0a:25:bf:7b:ce:1d:a7:
                    18:ee:e8:a2:1a:9d:fa:bc:85:d1:28:bc:86:ce:de:
                    35:ac:83:ec:d7:b3:ac:0a:69:27:86:0c:01:3a:47:
                    28:ba:d8:ba:47:dd:50:19:1f:8f:c4:5b:87:86:d5:
                    aa:f7:df:f6:e9:b8:29:d6:ba:5a:c6:c5:55:9a:94:
                    88:78:d8:55:13:dc:8c:73:9f:4f:a2:19:f6:41:b0:
                    07:45:00:28:20:50:dc:18:c5:25:73:6f:15:42:5a:
                    3e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:5C:E6:87:76:11:17:68:11:99:50:65:AA:CB:39:FD:48:ED:7D:7E
            X509v3 Authority Key Identifier:
                keyid:03:7F:53:2F:A2:62:F5:C6:BD:96:15:BC:D7:9D:6E:DD:43:F2:E0:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A39TL6Ji9ca9lhW8151u3UPy4HU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:b4:31:4e:b2:20:f8:3f:95:34:0e:90:9f:14:f8:10:c3:41:
         ff:df:2d:38:cb:4d:2d:fe:e4:6e:b1:bc:58:4e:57:b8:1b:16:
         cc:ff:c0:e5:1e:57:05:f4:8a:23:3d:80:92:89:d7:5b:6c:93:
         a0:a3:94:dc:4c:53:b5:34:58:61:53:ed:fe:49:e8:6e:f7:1b:
         ee:59:8e:46:3a:58:99:39:39:08:46:aa:19:7a:c8:59:32:c9:
         e3:30:df:af:63:bb:bf:89:de:e7:d6:f2:47:1f:4e:c6:91:f1:
         62:88:5a:28:b7:5c:c5:fb:87:47:f9:0c:33:57:56:22:5d:17:
         37:fb:c0:7b:6f:a9:f4:fe:9f:3e:75:d5:3c:53:15:a8:62:c7:
         26:be:5d:9d:52:2d:53:75:5a:12:50:33:2f:4a:ce:ed:4d:ca:
         12:5e:26:78:e4:34:10:ef:f5:c1:54:97:a6:3b:56:3b:ce:e7:
         35:29:ba:7b:f6:bc:c4:19:2c:64:ed:a7:fd:6e:16:38:28:95:
         a5:36:54:3a:ed:44:20:f2:c8:d6:64:3d:86:cf:3d:d1:c1:d7:
         87:a7:9d:7e:0b:8b:35:85:e8:18:bd:77:85:24:a5:a8:62:18:
         d4:a3:69:7b:de:9c:11:49:21:ad:b8:31:0c:f7:34:ce:32:ba:
         97:7b:e3:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 08:53:35 2026 by rpki-client