Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/e8fc9a-3b92-4798-8cfd-c6bdb1830694/1/rA_UaGtsEKXjfwoBj1ULZx1oyQg.mft
File:                     rA_UaGtsEKXjfwoBj1ULZx1oyQg.mft (raw, json)
Hash identifier:          /GI5hzJ1C4jg3XFCLkTgeazDA4gA7nJhyTvQtCQVkng=
Subject key identifier:   49:59:E7:51:28:14:2E:27:0D:58:87:63:D1:10:8A:BF:B3:56:0D:1C
Authority key identifier: AC:0F:D4:68:6B:6C:10:A5:E3:7F:0A:01:8F:55:0B:67:1D:68:C9:08
Certificate issuer:       /CN=ac0fd4686b6c10a5e37f0a018f550b671d68c908
Certificate serial:       01A0DBA92497C9B57E7442FBFEF80DA943DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rA_UaGtsEKXjfwoBj1ULZx1oyQg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/e8fc9a-3b92-4798-8cfd-c6bdb1830694/1/rA_UaGtsEKXjfwoBj1ULZx1oyQg.mft
Manifest number:          EB
Signing time:             Sat 26 Sep 2026 03:01:30 +0000
Manifest this update:     Sat 26 Sep 2026 03:01:30 +0000
Manifest next update:     Sun 27 Sep 2026 03:01:30 +0000
Files and hashes:         1: DvFoE9eQcmaY9cfgHPWGq1B4Y0o.roa (hash: 2frlwVf7B3+tlGK0l62bvwlFXmOnTN/JdBfNROmaTaE=)
                          2: rA_UaGtsEKXjfwoBj1ULZx1oyQg.crl (hash: CiaSL4H4nVSLq+eT3+iYGNDZDvu4/ck2KIrcdj+fGuk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/e8fc9a-3b92-4798-8cfd-c6bdb1830694/1/rA_UaGtsEKXjfwoBj1ULZx1oyQg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/e8fc9a-3b92-4798-8cfd-c6bdb1830694/1/rA_UaGtsEKXjfwoBj1ULZx1oyQg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rA_UaGtsEKXjfwoBj1ULZx1oyQg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 00:06:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:db:a9:24:97:c9:b5:7e:74:42:fb:fe:f8:0d:a9:43:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac0fd4686b6c10a5e37f0a018f550b671d68c908
        Validity
            Not Before: Sep 26 03:01:30 2026 GMT
            Not After : Sep 27 03:01:30 2026 GMT
        Subject: CN=4959e75128142e270d588763d1108abfb3560d1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:e1:c8:6c:e5:40:75:85:28:f1:29:c6:25:8d:
                    15:3e:4b:b5:4d:2a:cc:5d:45:a5:fb:be:9f:be:f5:
                    c2:71:d4:aa:dd:b0:e6:e0:a7:97:ae:c3:cc:6a:8e:
                    96:af:44:02:8f:3a:ab:05:e8:9d:a2:6c:a9:f3:d8:
                    33:42:c4:f2:0f:a0:2e:26:9e:c5:44:8f:03:a0:e4:
                    c3:02:9a:7e:7c:94:a6:43:ce:86:3d:18:ab:bf:af:
                    7c:ae:5f:17:91:b7:61:bf:3d:d8:f4:59:bb:68:67:
                    2c:71:f5:ed:07:b2:60:03:fc:4d:0a:7a:b8:fd:5c:
                    32:18:a3:87:43:72:77:33:a9:55:ab:6b:7f:a1:2d:
                    77:b7:11:93:af:1b:5b:13:c1:3b:87:21:71:b3:28:
                    dd:06:8d:3e:b5:08:22:1b:3a:72:40:fe:9b:a3:8a:
                    77:74:ce:27:9e:29:5a:cf:28:a7:ee:fe:03:07:22:
                    46:91:82:7b:01:a3:9f:b7:a8:c4:5f:f4:0d:35:16:
                    ae:42:a7:f3:0f:e7:fb:ee:d8:2e:d5:ef:4a:1d:d6:
                    37:60:33:28:3c:77:0e:fb:36:e8:ad:93:06:15:4f:
                    c3:d4:d9:cf:34:34:a5:13:ce:a4:37:cd:12:bc:62:
                    18:06:12:0b:e5:e2:95:72:57:e7:2e:b3:70:7a:13:
                    43:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:59:E7:51:28:14:2E:27:0D:58:87:63:D1:10:8A:BF:B3:56:0D:1C
            X509v3 Authority Key Identifier:
                keyid:AC:0F:D4:68:6B:6C:10:A5:E3:7F:0A:01:8F:55:0B:67:1D:68:C9:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rA_UaGtsEKXjfwoBj1ULZx1oyQg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8fc9a-3b92-4798-8cfd-c6bdb1830694/1/rA_UaGtsEKXjfwoBj1ULZx1oyQg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8fc9a-3b92-4798-8cfd-c6bdb1830694/1/rA_UaGtsEKXjfwoBj1ULZx1oyQg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:75:61:d1:50:71:ff:a1:aa:cd:d8:d3:8f:7e:1e:0f:ad:b9:
         bc:68:b7:39:c5:2a:97:c7:93:19:42:3d:9e:3a:9b:d8:62:dc:
         73:9e:4f:71:50:81:de:2d:5c:ee:8f:3d:91:8a:e5:91:e5:d1:
         02:aa:ef:c0:98:fd:d4:e3:63:0b:44:4c:0c:27:34:7b:62:72:
         a4:28:85:9c:4c:5b:b8:e1:1d:ca:3a:8d:46:63:7b:98:bb:ce:
         5c:3e:5a:66:e2:ab:73:4f:5b:78:ea:2c:93:4b:0b:01:c4:a2:
         88:48:fc:87:c6:e3:3c:65:2a:af:d4:d8:c1:79:dc:65:d0:91:
         fe:b1:b1:07:10:c6:f3:33:1d:89:b8:d5:6a:f6:c2:ba:76:a9:
         cc:ce:a4:b9:17:0b:12:75:00:c3:94:bd:1b:fd:92:a0:62:c8:
         2c:70:77:30:6d:a8:7a:cf:d8:c7:e1:2c:80:5a:28:ae:8a:72:
         4f:fe:09:d8:b4:35:7a:4a:42:75:52:d5:df:e8:66:88:49:d1:
         80:20:9e:1c:78:d3:dd:45:f4:d7:3e:e9:f8:6d:90:d8:30:ed:
         2c:49:9d:c2:c6:b9:57:ab:7f:b5:83:4a:88:22:88:e9:c2:d4:
         65:23:24:97:47:c8:f0:7d:be:13:69:f4:5a:df:bc:82:ce:5c:
         ce:1c:f5:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:28:49 2026 by rpki-client