Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.mft
File:                     A_P4JZsw7ANyL5QgNalOIJ-IKGE.mft (raw, json)
Hash identifier:          NMDnFaR9dfdSMygsH52nGwzK+Ykr8cgeYa0VvkPYhZU=
Subject key identifier:   B4:FB:FB:1D:D7:4D:83:2B:6A:9B:F7:64:07:58:22:DE:7F:20:C7:5B
Authority key identifier: 03:F3:F8:25:9B:30:EC:03:72:2F:94:20:35:A9:4E:20:9F:88:28:61
Certificate issuer:       /CN=03f3f8259b30ec03722f942035a94e209f882861
Certificate serial:       01A0DDCEC0E4A2B54D60EC03B95537176838
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A_P4JZsw7ANyL5QgNalOIJ-IKGE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.mft
Manifest number:          1A73
Signing time:             Sat 26 Sep 2026 13:01:49 +0000
Manifest this update:     Sat 26 Sep 2026 13:01:49 +0000
Manifest next update:     Sun 27 Sep 2026 13:01:49 +0000
Files and hashes:         1: A_P4JZsw7ANyL5QgNalOIJ-IKGE.crl (hash: iru7K3x9C9Ph3gHZzWDXUjqFsFhJeuK+Ilj0RWAYAE4=)
                          2: DNy-Ywo37F1s94DzRvRfvjndiAw.roa (hash: kJUUhnZY4jdclwXVHJF/NcqyyZenLqwhpoq2KYT5Bxk=)
                          3: GtRmGH4bGG6oOP8kzT17gVxixR0.roa (hash: vabTUX5Qd4MvYjPie5N9mfB497dNe6aI2rUnS9Qyx28=)
                          4: nehss--I5fmpoVCvb0Oo4Ab0mGQ.roa (hash: QL6FWPRVEjAfMv/oZtTE230B/5xMRz1J6W0IaVZGkq0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A_P4JZsw7ANyL5QgNalOIJ-IKGE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 13:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dd:ce:c0:e4:a2:b5:4d:60:ec:03:b9:55:37:17:68:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03f3f8259b30ec03722f942035a94e209f882861
        Validity
            Not Before: Sep 26 13:01:49 2026 GMT
            Not After : Sep 27 13:01:49 2026 GMT
        Subject: CN=b4fbfb1dd74d832b6a9bf764075822de7f20c75b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e5:e6:4f:d2:04:d2:3d:1d:ed:8c:d7:04:f7:
                    78:61:5b:c6:56:c4:f2:b4:40:83:a4:40:93:01:7d:
                    59:10:c5:e9:6d:47:cf:bf:61:44:91:15:bc:67:52:
                    38:d7:bd:5f:da:f1:01:2d:38:03:d0:83:08:7b:10:
                    ca:85:90:4c:07:f1:de:8f:7d:7c:43:ac:80:69:43:
                    f1:33:5b:9f:5d:96:58:50:f7:77:ea:ea:e5:67:9d:
                    db:2c:57:b8:64:5e:99:e9:85:4a:08:fe:96:fb:ce:
                    9e:f1:68:ac:50:5c:c0:89:6f:ef:fb:49:47:00:53:
                    9d:1d:d5:f7:cf:36:4f:28:55:96:16:22:f8:ab:3c:
                    bf:0a:c7:36:18:22:1e:dd:5a:0a:e4:03:33:d9:c9:
                    f6:1e:fe:b5:1e:12:4b:7b:51:95:08:8d:f9:ec:38:
                    b8:40:38:49:79:03:c8:fa:73:72:ef:4e:5b:c0:34:
                    15:48:14:8c:6e:66:fc:f0:c3:f3:f1:cf:50:70:5d:
                    da:3c:ec:1f:4c:0c:83:b5:70:62:06:2b:d3:39:8e:
                    47:4f:c9:d5:16:b4:25:58:a8:69:fb:29:99:75:a1:
                    46:5b:45:27:3b:d8:85:f6:6d:d2:f9:8a:68:e8:b3:
                    74:c8:69:52:b4:42:ae:2f:4a:5d:85:6c:91:d5:9a:
                    78:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:FB:FB:1D:D7:4D:83:2B:6A:9B:F7:64:07:58:22:DE:7F:20:C7:5B
            X509v3 Authority Key Identifier:
                keyid:03:F3:F8:25:9B:30:EC:03:72:2F:94:20:35:A9:4E:20:9F:88:28:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_P4JZsw7ANyL5QgNalOIJ-IKGE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:3d:c8:a1:61:b8:77:bc:91:fa:34:a6:4d:62:ae:46:e6:0d:
         0d:90:59:64:ba:8d:fe:6c:7f:03:39:8c:d6:89:5d:2b:80:a1:
         9d:d1:2f:51:e2:ca:13:83:d8:db:e8:90:f4:48:63:80:bb:07:
         c4:4c:f3:87:32:dd:52:77:69:c7:e9:d1:65:3d:04:35:c5:44:
         1e:e9:09:03:18:ba:a1:ab:b4:12:71:d7:22:e8:f3:60:5e:6c:
         39:1d:0e:d7:ba:be:28:01:3b:ad:c1:2e:fc:da:43:8e:d5:1f:
         b2:04:74:1b:db:d3:e6:69:d5:b9:98:6c:ae:5c:d9:82:8e:28:
         36:fb:54:0f:06:bc:3a:af:a9:83:b1:70:d5:d5:be:6f:90:c9:
         6c:2e:ea:57:4b:88:f5:04:2f:8a:dd:ec:87:3e:38:0a:7f:16:
         40:ec:c4:40:14:d6:ed:49:2d:29:04:89:f2:25:22:21:41:c4:
         e3:b2:79:0e:e3:d2:ce:06:de:a2:e9:e2:00:1e:cf:f7:ed:87:
         3d:a4:b4:f0:2a:63:de:99:06:33:53:e0:f3:02:83:82:0d:4b:
         3d:0d:8b:50:4d:9b:1b:9e:a1:62:dd:f3:f7:01:1c:58:d6:dc:
         f1:8e:88:cf:60:fd:35:29:84:61:3f:ad:57:c8:04:9f:e4:ff:
         11:ba:bd:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 22:27:46 2026 by rpki-client