Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft
File:                     Rji_aLZnXipaOnki9kd9Kvs1f6w.mft (raw, json)
Hash identifier:          QYVhxQXxMLnFsHmam2UIRaN/07nKU3qYMOG4IMqRvQg=
Subject key identifier:   1C:19:05:99:A0:90:F0:F4:1E:8D:81:60:03:2B:66:5C:5A:37:20:56
Authority key identifier: 46:38:BF:68:B6:67:5E:2A:5A:3A:79:22:F6:47:7D:2A:FB:35:7F:AC
Certificate issuer:       /CN=4638bf68b6675e2a5a3a7922f6477d2afb357fac
Certificate serial:       01A0BD67104FC31844F3B22419A2C2F5B496
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rji_aLZnXipaOnki9kd9Kvs1f6w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft
Manifest number:          0870
Signing time:             Sun 20 Sep 2026 06:00:43 +0000
Manifest this update:     Sun 20 Sep 2026 06:00:43 +0000
Manifest next update:     Mon 21 Sep 2026 06:00:43 +0000
Files and hashes:         1: Rji_aLZnXipaOnki9kd9Kvs1f6w.crl (hash: bXouyU8tebpv3ghU1dLtfOiHjRq1PcKllOYoLPw6Sr4=)
                          2: TkBggeEIG38cTqgeQZJyjYdfERw.roa (hash: TVtGwEq6QFTLzR+0I1131Dy7n+e87d5rFxxyq5eLPbY=)
                          3: WEVqV3-Rp-d0LXAX2D5pD9lVyK4.roa (hash: /YFcmAE3f+SI8C115sE0xgY4yWWtCJhMHzRULYVE/Ig=)
                          4: nGgWCHlP5Rfk7nEXR5r0SwPGVhg.roa (hash: ub89EExosLdu9SpuUWFdEh7qASm/VbEptc/K/f13V3g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rji_aLZnXipaOnki9kd9Kvs1f6w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 05:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:bd:67:10:4f:c3:18:44:f3:b2:24:19:a2:c2:f5:b4:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4638bf68b6675e2a5a3a7922f6477d2afb357fac
        Validity
            Not Before: Sep 20 06:00:43 2026 GMT
            Not After : Sep 21 06:00:43 2026 GMT
        Subject: CN=1c190599a090f0f41e8d8160032b665c5a372056
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:2c:e8:3a:4e:95:6a:f9:7b:3f:8a:cc:2c:44:
                    d4:56:e7:b8:ca:0b:68:d5:77:4d:5c:95:f2:51:3c:
                    c4:fc:41:d1:e3:70:fe:73:da:e7:0e:95:04:8d:60:
                    7f:bb:39:3f:a7:92:8a:61:dd:d7:06:34:e9:0c:da:
                    35:17:f0:67:fc:3f:dd:ad:53:4f:37:a6:da:cd:d2:
                    c0:66:ad:a1:58:93:7c:45:b8:ce:b3:e3:e5:f1:d8:
                    ba:df:2a:57:1a:2f:92:58:9c:e1:b0:68:af:dd:39:
                    d8:c4:ff:0c:c1:4e:11:12:1c:75:3e:bb:91:eb:e2:
                    e0:3e:2a:6f:c0:a3:55:ec:04:91:d8:01:80:da:8a:
                    3e:6e:8d:ee:84:f9:b2:72:39:95:c1:77:dd:1f:67:
                    b7:11:71:93:ce:1b:e5:ee:36:67:22:62:6e:98:78:
                    fc:95:26:ea:4a:53:ca:f7:e1:03:9d:bd:57:21:54:
                    28:4e:7c:d0:ee:8e:f9:11:d9:13:d2:0d:30:3b:83:
                    5a:16:68:8d:ce:6e:cd:aa:10:57:ab:f0:5d:f4:00:
                    fb:92:f7:d1:42:21:fb:89:bb:0d:04:77:45:2c:15:
                    ba:e6:4e:b3:6a:70:dd:25:d0:5a:c1:b6:7a:a7:71:
                    66:f6:fa:98:7f:ae:56:16:54:2a:c9:95:91:8d:ed:
                    58:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:19:05:99:A0:90:F0:F4:1E:8D:81:60:03:2B:66:5C:5A:37:20:56
            X509v3 Authority Key Identifier:
                keyid:46:38:BF:68:B6:67:5E:2A:5A:3A:79:22:F6:47:7D:2A:FB:35:7F:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rji_aLZnXipaOnki9kd9Kvs1f6w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:2b:24:a5:bd:ee:b2:50:43:5f:5d:17:32:b6:5d:21:d3:76:
         f0:53:75:85:67:8a:56:79:f3:ff:8a:5a:c8:29:5b:a2:37:ab:
         ad:63:60:60:18:da:4e:d8:df:e4:8b:c1:bb:c7:92:87:12:7a:
         cd:39:b0:f6:e9:03:7e:66:7b:2c:7f:55:26:31:92:46:0d:b0:
         9e:c0:66:fe:d8:f4:58:73:2b:6c:89:f1:e5:4d:e5:a9:f4:c9:
         46:52:81:a2:53:cc:ef:56:85:12:02:1f:b0:e1:ca:d8:a6:ef:
         8e:7b:06:f4:7e:61:92:e8:e9:6c:e0:b3:dd:30:07:21:d5:fe:
         de:ce:30:de:9d:3d:56:14:48:76:c2:c1:7c:d5:5e:78:96:95:
         ce:3b:cb:3f:b7:2d:57:c0:ec:76:0d:9c:05:6c:1b:de:f2:96:
         a7:ad:15:3b:df:3e:a1:49:18:73:77:f5:b2:c2:f5:6d:f6:d9:
         00:c6:70:95:d4:84:71:b9:e6:b4:25:3b:f1:27:92:eb:1d:ad:
         af:76:fd:2b:d6:9f:75:ff:78:b3:77:7a:fa:cc:e1:24:12:77:
         46:61:84:fb:f9:4d:5f:c1:56:14:97:28:65:c9:76:92:42:8a:
         e0:ec:7c:cd:86:63:72:6a:c4:dc:f7:f8:82:d9:8c:6b:67:dd:
         7a:81:63:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:51:13 2026 by rpki-client