Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/Rk1zPegfvUhtRCNY4MFTcFIPkxI.mft
File:                     Rk1zPegfvUhtRCNY4MFTcFIPkxI.mft (raw, json)
Hash identifier:          lwmcH/mHX+EmmdrCTeTnidHraMdP+pd5+Lk8b8vekiU=
Subject key identifier:   3F:7A:66:22:73:09:30:6A:AB:11:66:05:F5:FD:3C:E2:32:CF:19:CD
Authority key identifier: 46:4D:73:3D:E8:1F:BD:48:6D:44:23:58:E0:C1:53:70:52:0F:93:12
Certificate issuer:       /CN=464d733de81fbd486d442358e0c15370520f9312
Certificate serial:       01A0D1929DFF9ABCAA82FF7227E9C210619B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rk1zPegfvUhtRCNY4MFTcFIPkxI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/Rk1zPegfvUhtRCNY4MFTcFIPkxI.mft
Manifest number:          050E
Signing time:             Thu 24 Sep 2026 04:00:41 +0000
Manifest this update:     Thu 24 Sep 2026 04:00:41 +0000
Manifest next update:     Fri 25 Sep 2026 04:00:41 +0000
Files and hashes:         1: Rk1zPegfvUhtRCNY4MFTcFIPkxI.crl (hash: uYzimuT+Ar+GhAxc76Wn6uFnEttpDu1iVRAOeXgZtsU=)
                          2: X2-StnXGjfI9wfKhZQp0793U3Io.roa (hash: l8ocH0IxQsjfL6ukdiPqqCpYZzs3R9sEM3Pe+2LGF84=)
                          3: _BGqcu40RXoTf10_8VGIOgqYEiw.roa (hash: EO0e4LrOi8gJaif6ib941Se3Fz7ZwcHJpJUxBOS6sjg=)
                          4: sYLKdeDOUeQxy_Kv2E_Cnj0I44k.roa (hash: 7UjSkmLEewaWHHfvbCaxDyZlIQWGWRAv2o5SfuX7IBI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/Rk1zPegfvUhtRCNY4MFTcFIPkxI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/Rk1zPegfvUhtRCNY4MFTcFIPkxI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rk1zPegfvUhtRCNY4MFTcFIPkxI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 04:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:92:9d:ff:9a:bc:aa:82:ff:72:27:e9:c2:10:61:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=464d733de81fbd486d442358e0c15370520f9312
        Validity
            Not Before: Sep 24 04:00:41 2026 GMT
            Not After : Sep 25 04:00:41 2026 GMT
        Subject: CN=3f7a66227309306aab116605f5fd3ce232cf19cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:df:b2:21:e5:c1:ed:b5:90:2b:40:89:1c:3d:
                    b5:d5:96:1a:86:e5:1c:b5:9f:27:55:ce:4b:f9:39:
                    99:37:e2:60:27:c4:28:a7:63:ca:a6:d1:d1:09:6e:
                    f9:79:42:32:ee:f6:2f:ea:a2:91:47:3b:2c:90:7b:
                    88:af:9a:de:8d:6a:8e:e1:d2:4d:9a:73:ac:4c:83:
                    25:ce:5a:39:02:6e:5a:a4:28:8f:93:d9:99:d9:6b:
                    5e:66:ec:51:5f:54:65:26:8c:4c:73:be:eb:07:7b:
                    1f:d3:4e:38:ab:9e:7a:5d:d8:0c:c7:4d:00:dd:b4:
                    44:16:2c:50:be:e7:c1:53:c3:a7:9b:85:1d:98:9e:
                    d3:41:10:1e:4e:87:72:47:04:3b:22:1c:de:37:c8:
                    96:b9:df:c3:83:1a:11:93:c6:60:48:41:ca:39:e0:
                    da:76:e7:cd:a0:d2:c4:81:db:24:54:4f:76:ea:98:
                    a1:42:0a:f7:d2:3b:f4:64:ee:6f:46:c7:e1:94:b9:
                    49:0b:1c:b5:1d:69:39:44:15:6f:8f:33:89:57:7d:
                    68:99:95:97:64:26:70:76:0b:7c:e6:75:0e:7c:f4:
                    34:7c:b4:1f:9d:6e:f7:cc:e4:1c:0e:33:7b:6f:81:
                    ea:0a:04:b4:e8:85:5d:a8:d0:fb:60:66:43:34:cf:
                    43:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:7A:66:22:73:09:30:6A:AB:11:66:05:F5:FD:3C:E2:32:CF:19:CD
            X509v3 Authority Key Identifier:
                keyid:46:4D:73:3D:E8:1F:BD:48:6D:44:23:58:E0:C1:53:70:52:0F:93:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rk1zPegfvUhtRCNY4MFTcFIPkxI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/Rk1zPegfvUhtRCNY4MFTcFIPkxI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/Rk1zPegfvUhtRCNY4MFTcFIPkxI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:7b:99:0d:1c:a3:6f:86:ca:40:4e:04:57:1f:b1:df:38:e9:
         c0:ce:60:82:53:2c:5c:73:ed:a4:00:bc:30:a4:21:b0:a5:a3:
         aa:7a:30:f5:89:5e:0c:13:9c:c3:ad:5e:3f:a2:53:b8:fe:38:
         0a:7f:0d:e4:ce:b0:8a:6a:83:65:89:09:b8:93:51:76:14:a5:
         93:24:45:fa:55:fb:86:ea:0d:5d:bd:51:9f:c8:fa:43:28:2a:
         68:51:35:a8:7d:38:5d:1e:c7:d1:47:38:63:02:87:23:1d:a7:
         5e:ac:ca:51:da:d4:d4:d2:83:23:b7:02:9f:d4:47:8e:17:40:
         15:e0:ed:c6:9e:2c:36:40:71:0b:f5:57:42:e2:38:67:7c:00:
         15:c1:d3:5d:36:ed:5a:ca:dc:a1:8b:5d:d0:da:b7:73:9a:b8:
         80:03:06:c2:16:17:ae:92:0a:93:30:ea:b1:93:d3:bf:01:26:
         b6:1e:7f:e6:60:f3:fd:d6:a7:71:b0:22:55:ec:f2:22:4f:ac:
         5d:76:c9:82:3d:63:8a:4a:c8:82:51:79:97:8e:77:b6:6b:a2:
         3b:90:81:8d:1d:4f:c9:24:38:c4:3b:d1:3d:7a:8b:ca:76:81:
         f6:a4:3c:87:18:2e:ca:fd:e6:35:87:18:d5:9f:68:64:59:e5:
         cf:8a:6b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:33:32 2026 by rpki-client