Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/e9WZftB1wimLRhIl4QYPV3sdfU0.mft
File:                     e9WZftB1wimLRhIl4QYPV3sdfU0.mft (raw, json)
Hash identifier:          LWA+OrzBnzJ0DZwbEwUloCHoFUsUW8hdaXJ+l3lLHjM=
Subject key identifier:   B3:47:1B:DA:4D:5B:00:F2:B1:F4:07:AF:1E:23:2E:B1:2C:6B:1E:FD
Authority key identifier: 7B:D5:99:7E:D0:75:C2:29:8B:46:12:25:E1:06:0F:57:7B:1D:7D:4D
Certificate issuer:       /CN=7bd5997ed075c2298b461225e1060f577b1d7d4d
Certificate serial:       01A0C40E65F05288FD6E14860DEF43258A9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e9WZftB1wimLRhIl4QYPV3sdfU0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/e9WZftB1wimLRhIl4QYPV3sdfU0.mft
Manifest number:          0E38
Signing time:             Mon 21 Sep 2026 13:01:12 +0000
Manifest this update:     Mon 21 Sep 2026 13:01:12 +0000
Manifest next update:     Tue 22 Sep 2026 13:01:12 +0000
Files and hashes:         1: 1-2vR9D5EuHiUZ8YUPiWZdd3LlOc.roa (hash: UyaZQo5wMw6T5Iq4+XMbThUI1LZMa4RGhlfpw/fbh4w=)
                          2: Ge-rFXvoQMvJ19A1KaJc_IM4oUc.roa (hash: X7ptSGD8hMEh9qW7Py0+45xWZLrj3NoOhUjyiTrtyQc=)
                          3: e9WZftB1wimLRhIl4QYPV3sdfU0.crl (hash: N77lmiVZmkoszQQ86GbNHxWvu6sClZhV2xsmNw2hT20=)
                          4: ytUrE1yikUozgHVrWde_TAyxalY.asa (hash: cd7uv24NUxcddeM4R6jn2GTZOxo6970ut0T+FVbZ/XM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/e9WZftB1wimLRhIl4QYPV3sdfU0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/e9WZftB1wimLRhIl4QYPV3sdfU0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e9WZftB1wimLRhIl4QYPV3sdfU0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 13:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c4:0e:65:f0:52:88:fd:6e:14:86:0d:ef:43:25:8a:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bd5997ed075c2298b461225e1060f577b1d7d4d
        Validity
            Not Before: Sep 21 13:01:12 2026 GMT
            Not After : Sep 22 13:01:12 2026 GMT
        Subject: CN=b3471bda4d5b00f2b1f407af1e232eb12c6b1efd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c6:5c:0e:9e:d8:03:48:16:27:8e:76:98:78:
                    b2:b0:15:a7:56:78:2f:8d:6b:a6:5d:09:47:73:91:
                    64:ee:f8:c4:51:33:d3:c3:fd:8c:31:15:18:87:d9:
                    ce:23:20:42:69:61:4d:9f:99:11:12:1b:bb:40:c4:
                    42:e8:f0:47:32:c7:2d:aa:58:b2:80:5a:88:d0:66:
                    19:51:f7:5f:9a:c5:87:44:10:e5:8a:0e:50:33:88:
                    36:d7:68:c6:53:97:8e:87:45:43:f8:e5:d6:93:4e:
                    87:ea:11:3e:07:7f:63:2e:88:10:c8:19:03:22:b7:
                    8d:1c:32:dd:59:24:fe:e4:34:dd:3f:b8:eb:37:d1:
                    6f:c6:c1:18:d2:62:a2:e9:0e:59:28:9d:32:bd:6c:
                    d1:dd:04:60:b4:fe:75:03:ca:e2:ca:93:ed:8b:fb:
                    ef:ee:9f:47:cd:11:2a:7e:04:d2:34:f0:6c:90:42:
                    5d:12:2c:33:e3:4c:8b:91:ce:25:e4:a5:c7:75:e1:
                    68:2c:aa:b9:d1:d7:16:c6:69:a0:06:2d:b1:44:87:
                    b4:67:38:df:cd:4e:90:f2:59:f3:5d:80:82:ba:cb:
                    eb:95:32:2b:f2:f7:ac:5f:30:bd:2a:ee:44:b7:97:
                    e8:e0:47:2c:4d:a5:7f:d8:b5:e5:f1:2f:6c:57:d6:
                    89:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:47:1B:DA:4D:5B:00:F2:B1:F4:07:AF:1E:23:2E:B1:2C:6B:1E:FD
            X509v3 Authority Key Identifier:
                keyid:7B:D5:99:7E:D0:75:C2:29:8B:46:12:25:E1:06:0F:57:7B:1D:7D:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9WZftB1wimLRhIl4QYPV3sdfU0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/e9WZftB1wimLRhIl4QYPV3sdfU0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/e9WZftB1wimLRhIl4QYPV3sdfU0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:5c:64:58:82:ef:29:e4:7c:24:87:6c:8f:b7:b4:83:93:62:
         a3:58:7f:7c:3b:00:a8:fe:10:fd:01:ef:0d:e7:e8:b3:5b:51:
         47:9b:90:bb:02:f4:ca:e1:df:b9:37:40:e6:41:8b:a8:c6:6b:
         fd:17:81:71:62:37:31:88:86:1c:32:c5:0a:df:f8:db:45:a5:
         3b:bf:cb:e1:f8:f3:a0:83:f2:24:be:95:5c:b5:be:a9:5b:b6:
         e0:04:ec:ce:57:2b:c1:8d:54:05:21:42:de:aa:b4:a5:31:b4:
         a5:b0:e5:f7:59:90:45:b4:a1:24:ef:f1:ba:08:4c:52:e6:54:
         f7:82:f7:34:4c:69:54:57:1a:42:a0:fc:dd:69:21:ee:06:f2:
         76:20:34:ae:77:d7:29:1a:5d:bf:b7:d4:ab:8c:fe:e8:f6:17:
         fe:2f:a3:97:20:3b:d7:00:b8:2a:00:63:a7:1a:4c:2e:5d:98:
         33:da:4f:56:30:b4:bd:e9:ad:a4:ea:2c:b5:af:b0:05:66:2b:
         3f:ad:2b:6e:e2:16:91:d5:d1:da:34:d7:18:13:fa:75:4e:b4:
         2a:7a:c0:62:b6:ea:92:73:d3:47:ef:5f:18:61:76:fc:6e:23:
         ad:6b:16:32:ca:8e:a6:cf:09:44:ae:8f:b9:48:98:3c:42:40:
         69:83:77:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:56:38 2026 by rpki-client