Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.mft
File:                     24P1T0UTHZIHwhWgmKKmvNb_BQs.mft (raw, json)
Hash identifier:          /ti+kZRSrS/IgIMkUhT5BQt7LLoh/OLolYiBIq8cIXc=
Subject key identifier:   13:E3:C8:D5:4F:95:89:1D:1E:79:15:AA:0E:E5:19:E9:C2:75:2C:57
Authority key identifier: DB:83:F5:4F:45:13:1D:92:07:C2:15:A0:98:A2:A6:BC:D6:FF:05:0B
Certificate issuer:       /CN=db83f54f45131d9207c215a098a2a6bcd6ff050b
Certificate serial:       01A0BF8C104F8A89BF60E27407613D301710
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/24P1T0UTHZIHwhWgmKKmvNb_BQs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.mft
Manifest number:          115D
Signing time:             Sun 20 Sep 2026 16:00:22 +0000
Manifest this update:     Sun 20 Sep 2026 16:00:22 +0000
Manifest next update:     Mon 21 Sep 2026 16:00:22 +0000
Files and hashes:         1: 0-WmLbEH77lOVqvVQ2YUnN7Nex4.roa (hash: K4clzCUFSq6IN3lmLQlxqL/RcAzKs5Apy7zTYqaaAwc=)
                          2: 24P1T0UTHZIHwhWgmKKmvNb_BQs.crl (hash: rWAz/0+FkJtWI22xxIwcALQNHxq2yo8C3NSWNxsj/ZE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/24P1T0UTHZIHwhWgmKKmvNb_BQs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:bf:8c:10:4f:8a:89:bf:60:e2:74:07:61:3d:30:17:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db83f54f45131d9207c215a098a2a6bcd6ff050b
        Validity
            Not Before: Sep 20 16:00:22 2026 GMT
            Not After : Sep 21 16:00:22 2026 GMT
        Subject: CN=13e3c8d54f95891d1e7915aa0ee519e9c2752c57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7d:69:4b:44:7d:dc:4f:0e:fa:76:cc:ac:2a:
                    a8:ed:ef:55:41:53:ad:3f:20:c5:4a:23:d8:ee:c7:
                    01:27:47:19:cf:f7:ad:2c:94:12:71:4e:96:39:a7:
                    3a:6a:8e:0f:9f:2e:fb:a0:9c:fd:17:33:a7:08:14:
                    47:26:fb:a1:38:d6:9f:b9:66:20:70:d4:aa:8f:77:
                    47:b9:5f:65:ad:c9:c3:f1:ab:8b:37:b1:b2:f6:75:
                    95:23:ae:bf:c3:f0:79:6a:e2:47:71:5b:9b:c6:5b:
                    56:32:c8:b9:99:af:4b:e2:18:e6:93:e3:1b:85:90:
                    43:0f:6c:d7:ad:56:da:14:d9:8f:6c:18:74:4d:32:
                    51:f9:86:e7:78:b9:5a:f3:53:63:c0:b9:e8:5d:e7:
                    b5:75:90:e6:da:36:97:45:4e:0d:ae:30:10:5e:3b:
                    72:33:2b:f8:70:81:d5:50:90:f8:fc:ae:f6:5e:3f:
                    d8:04:2c:72:20:83:0e:12:a6:f7:aa:50:63:be:d6:
                    9f:9d:52:8d:db:85:ef:6d:fb:5a:cd:76:e6:d6:ec:
                    f1:1a:7c:08:41:1f:d4:a6:b4:96:4d:ec:a5:56:b4:
                    cd:49:3a:c6:e9:5d:9c:f1:94:6d:6e:83:a4:0d:57:
                    17:ed:05:bc:fb:e4:cf:c0:f9:1c:3b:c2:0b:3a:95:
                    97:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:E3:C8:D5:4F:95:89:1D:1E:79:15:AA:0E:E5:19:E9:C2:75:2C:57
            X509v3 Authority Key Identifier:
                keyid:DB:83:F5:4F:45:13:1D:92:07:C2:15:A0:98:A2:A6:BC:D6:FF:05:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/24P1T0UTHZIHwhWgmKKmvNb_BQs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:21:6a:02:ea:bb:0a:ca:48:ba:80:fd:5e:c9:59:76:d4:15:
         06:ca:7b:cb:d1:95:30:97:ec:50:8f:e4:a2:5c:27:ec:28:eb:
         8c:9e:7b:f6:61:b8:14:68:bb:d7:46:6f:fb:cc:97:6d:25:f6:
         60:90:ae:11:0a:53:1b:f1:e1:d6:14:32:f7:2a:70:72:01:7d:
         8c:8b:d5:18:e6:66:ca:6a:80:3e:25:cf:41:0c:ed:cf:2c:8b:
         69:06:4c:da:de:0b:a7:d6:a7:ea:55:64:62:f2:04:ee:c6:60:
         14:2a:a7:2b:21:aa:31:2a:29:c4:bb:53:2e:8f:be:bc:d5:4b:
         14:89:7d:1c:51:64:c7:4b:b6:29:be:8a:ef:7a:e6:5c:a9:0e:
         6c:7d:af:45:71:84:b9:4a:1b:60:88:88:0e:45:38:38:b1:fd:
         2d:77:75:51:50:01:89:f9:2d:d5:5f:56:b9:31:f3:d3:e2:38:
         57:37:70:a2:33:a1:0e:fc:79:82:b1:ec:37:e3:8a:37:11:da:
         26:e7:75:09:92:d3:22:3b:44:92:6a:8e:c1:21:8d:bd:1f:73:
         af:0f:cd:29:6f:c0:ff:a1:59:d1:03:b7:ba:2b:61:9f:aa:dd:
         c6:62:07:93:eb:fa:ee:26:5d:b1:84:a2:a7:d8:80:e9:9b:58:
         c5:aa:7b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 18:39:01 2026 by rpki-client