Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/03b404-2f64-4c7c-ac6c-26eb0c6290ba/1/se4yDfBGSHfVF0XjFCMbVcg7aEU.mft
File:                     se4yDfBGSHfVF0XjFCMbVcg7aEU.mft (raw, json)
Hash identifier:          r9/nVQbrFVo1a2BzoXx9N9ls7Ut3n/lxEtoG7xk/vV4=
Subject key identifier:   4A:F5:F2:CC:78:1C:02:48:22:65:C3:91:E3:AB:53:CE:FE:0A:82:15
Authority key identifier: B1:EE:32:0D:F0:46:48:77:D5:17:45:E3:14:23:1B:55:C8:3B:68:45
Certificate issuer:       /CN=b1ee320df0464877d51745e314231b55c83b6845
Certificate serial:       01A0C8FD0461267AFE46BCBE5CA672F5D6C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/se4yDfBGSHfVF0XjFCMbVcg7aEU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/03b404-2f64-4c7c-ac6c-26eb0c6290ba/1/se4yDfBGSHfVF0XjFCMbVcg7aEU.mft
Manifest number:          19FB
Signing time:             Tue 22 Sep 2026 12:00:19 +0000
Manifest this update:     Tue 22 Sep 2026 12:00:19 +0000
Manifest next update:     Wed 23 Sep 2026 12:00:19 +0000
Files and hashes:         1: ZJ6WRtkzwu8v_Ad_XX8o7gcNNmU.roa (hash: H8SukrLououOm9b8DOSj2scPjyGTdIoNUh4OD9s1VW4=)
                          2: se4yDfBGSHfVF0XjFCMbVcg7aEU.crl (hash: P98DOeu21imkys35j7zNA4IKu32ouO9Yit8drnR/51w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/03b404-2f64-4c7c-ac6c-26eb0c6290ba/1/se4yDfBGSHfVF0XjFCMbVcg7aEU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/03b404-2f64-4c7c-ac6c-26eb0c6290ba/1/se4yDfBGSHfVF0XjFCMbVcg7aEU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/se4yDfBGSHfVF0XjFCMbVcg7aEU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 12:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c8:fd:04:61:26:7a:fe:46:bc:be:5c:a6:72:f5:d6:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1ee320df0464877d51745e314231b55c83b6845
        Validity
            Not Before: Sep 22 12:00:19 2026 GMT
            Not After : Sep 23 12:00:19 2026 GMT
        Subject: CN=4af5f2cc781c02482265c391e3ab53cefe0a8215
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f5:b4:a4:88:90:5a:d4:75:f1:6f:dd:39:01:
                    b5:3e:44:bf:8c:d3:45:e1:ea:12:a3:b9:02:d5:71:
                    4b:e8:a0:af:61:9e:9e:7c:4b:20:ad:68:b1:64:c2:
                    13:f0:42:fd:a6:72:a9:a0:ac:6b:82:b1:a7:f6:a7:
                    9d:b3:8f:4c:51:72:95:fb:4d:31:3a:f1:88:73:e9:
                    35:87:93:37:9b:f4:17:29:6e:9d:ed:fc:c9:13:9c:
                    b1:e2:5c:ff:af:d0:e0:a1:d7:55:72:89:ab:cc:f3:
                    4a:15:7a:fb:a7:d9:72:bd:1c:ed:55:8b:05:61:0c:
                    89:3b:9b:ab:bd:6d:5d:a8:a2:5c:c0:ec:30:98:15:
                    19:6e:b3:36:df:f2:d2:8b:38:11:d6:5c:71:48:5d:
                    a9:ac:f4:44:d0:6e:2f:52:92:7e:f5:d6:71:41:52:
                    09:87:d1:77:04:7f:6a:9f:58:67:26:47:54:b1:a7:
                    c5:cb:48:b4:94:bd:2f:56:b8:0b:21:04:8a:5e:fa:
                    b4:0c:a4:56:1f:3c:93:5a:88:5f:dc:d3:1b:a7:d0:
                    3d:74:1c:e9:4e:9b:43:a2:96:31:ca:fd:38:b2:ac:
                    8f:b7:f0:e7:e4:26:e6:b1:70:ae:0e:97:b9:b3:f5:
                    d4:7c:82:e5:01:6a:9b:b3:78:35:0d:d3:d1:47:71:
                    b1:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:F5:F2:CC:78:1C:02:48:22:65:C3:91:E3:AB:53:CE:FE:0A:82:15
            X509v3 Authority Key Identifier:
                keyid:B1:EE:32:0D:F0:46:48:77:D5:17:45:E3:14:23:1B:55:C8:3B:68:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/se4yDfBGSHfVF0XjFCMbVcg7aEU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/03b404-2f64-4c7c-ac6c-26eb0c6290ba/1/se4yDfBGSHfVF0XjFCMbVcg7aEU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/03b404-2f64-4c7c-ac6c-26eb0c6290ba/1/se4yDfBGSHfVF0XjFCMbVcg7aEU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:58:c7:83:f4:09:df:58:7d:c9:d3:11:f1:d7:ef:96:7d:03:
         0c:25:c3:24:22:d6:ac:9b:b2:28:49:53:80:d5:0e:60:22:7b:
         38:52:4b:32:9c:57:a3:a7:de:0e:d6:68:f4:3c:95:c0:e2:44:
         f6:d7:f1:33:a5:41:bb:b8:76:b7:30:84:b0:36:0c:eb:da:0c:
         65:8b:59:56:bc:3f:05:2c:df:57:d2:6b:63:6e:d0:ae:57:6d:
         a0:02:db:aa:cb:b6:a2:ce:0a:8f:4a:23:50:85:67:b5:43:83:
         a4:b0:7a:5d:b0:4d:d2:28:d7:c3:e5:b0:da:c5:50:b2:9b:c7:
         94:98:dc:1b:5d:51:a6:72:d7:93:b2:c9:06:e5:11:af:c4:84:
         30:58:71:12:2a:e4:46:ad:cd:37:40:63:83:c6:b5:fc:f2:49:
         41:17:31:97:80:3b:79:48:26:19:3f:5e:0f:09:65:4f:5e:f0:
         78:57:1c:1e:4e:f4:7b:4e:82:e1:21:2d:ef:1f:ef:6d:82:32:
         3f:42:86:7a:4f:fb:29:cc:2e:52:88:6e:eb:82:1f:8a:9a:ff:
         c6:79:19:7b:23:e5:c6:70:49:0c:69:9a:45:2b:61:76:89:50:
         af:74:5c:1f:2a:52:96:52:b6:72:7c:87:a5:82:e9:fc:b5:ea:
         c5:d8:71:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:02:59 2026 by rpki-client