Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.mft
File:                     RmSbV7gX7BQ93LfXcSwiux8orHU.mft (raw, json)
Hash identifier:          BcOKoQZLYEbUFRYfwg33x2JBe4O7pOhnsonxMjFEzLo=
Subject key identifier:   FE:D9:E1:29:18:55:6E:D1:5D:A0:AB:87:91:6D:29:59:50:66:94:E9
Authority key identifier: 46:64:9B:57:B8:17:EC:14:3D:DC:B7:D7:71:2C:22:BB:1F:28:AC:75
Certificate issuer:       /CN=46649b57b817ec143ddcb7d7712c22bb1f28ac75
Certificate serial:       01A0C7461BDBD10A6DA46DE593050E1E6EA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RmSbV7gX7BQ93LfXcSwiux8orHU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.mft
Manifest number:          1A41
Signing time:             Tue 22 Sep 2026 04:00:55 +0000
Manifest this update:     Tue 22 Sep 2026 04:00:55 +0000
Manifest next update:     Wed 23 Sep 2026 04:00:55 +0000
Files and hashes:         1: FN53nLLPikhn5-nY05Uj4mP3Vj4.roa (hash: qx+sQ+sLjcsImqJ84C9BFMVyXO8qcwSUngwbw+Vb2nk=)
                          2: RmSbV7gX7BQ93LfXcSwiux8orHU.crl (hash: dnrRmG6syuoVi/DyO8EzLDw+fKFfCXnNl7fWNTuNmdk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RmSbV7gX7BQ93LfXcSwiux8orHU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c7:46:1b:db:d1:0a:6d:a4:6d:e5:93:05:0e:1e:6e:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46649b57b817ec143ddcb7d7712c22bb1f28ac75
        Validity
            Not Before: Sep 22 04:00:55 2026 GMT
            Not After : Sep 23 04:00:55 2026 GMT
        Subject: CN=fed9e12918556ed15da0ab87916d2959506694e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fe:44:fe:d1:4c:89:f6:50:f1:99:ae:51:21:
                    ce:65:e6:f3:27:d8:ac:f2:0d:d8:fd:0a:7f:15:92:
                    38:1f:8d:3a:45:11:80:b7:fd:48:80:51:6d:ef:9f:
                    28:b1:ca:45:6c:92:d8:d8:0c:ec:90:2c:de:8d:8d:
                    e2:c5:da:4c:00:c6:87:4b:df:54:b6:a7:3a:00:7e:
                    ca:23:f2:48:f2:7b:e2:ef:ff:08:75:8e:d3:c8:c0:
                    8f:d8:da:75:e8:3f:a1:33:7d:68:e4:f0:60:40:3d:
                    0d:dc:5c:2f:d1:79:1f:0b:e5:c6:15:24:e7:8c:85:
                    9c:ff:62:60:c1:c1:14:5d:fa:cb:48:53:cb:a7:b5:
                    88:02:75:13:3b:a2:5d:42:90:5c:60:39:17:a5:74:
                    79:55:38:d1:39:2f:88:12:9f:d6:36:91:fa:9f:52:
                    ca:2f:be:60:4b:78:4e:c9:fa:e9:aa:ad:da:b4:ad:
                    03:18:9f:0b:a4:20:c1:5f:44:d1:83:ee:96:47:a2:
                    e2:b7:19:7a:2f:22:7a:4e:e1:01:99:1a:95:79:95:
                    c3:68:5a:5f:48:7a:e5:b0:3f:41:7f:db:bd:f8:ea:
                    08:c8:0d:e5:8f:e1:04:d8:87:5f:6c:42:55:7c:07:
                    1d:d2:86:2d:c3:cc:08:ff:e8:64:bc:cf:f2:19:a3:
                    4e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:D9:E1:29:18:55:6E:D1:5D:A0:AB:87:91:6D:29:59:50:66:94:E9
            X509v3 Authority Key Identifier:
                keyid:46:64:9B:57:B8:17:EC:14:3D:DC:B7:D7:71:2C:22:BB:1F:28:AC:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RmSbV7gX7BQ93LfXcSwiux8orHU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:07:8f:16:71:1e:87:ae:f1:81:55:4a:ca:41:9f:fd:34:79:
         35:47:68:fc:eb:2a:c4:25:97:c0:75:e7:38:05:ed:fa:3e:f8:
         63:17:1f:04:f1:db:06:39:62:ce:00:2c:89:d3:24:1b:8f:aa:
         1e:2a:4d:12:f2:45:f8:bf:db:69:e6:31:11:6f:80:c3:e2:d4:
         02:a1:e8:4d:91:84:6d:e7:91:b8:e7:35:da:81:4e:13:93:d7:
         ed:20:b5:cd:a1:7e:34:e7:0e:cc:7c:42:2a:d7:1b:d1:d2:d4:
         51:48:25:fd:8c:37:dc:2c:72:92:4a:11:59:39:45:a5:ff:8f:
         14:25:85:ff:3c:ef:74:97:ed:cb:a5:cb:12:ed:4a:65:aa:af:
         18:3d:52:3e:73:9d:30:40:bb:7b:f4:c5:64:e0:86:64:87:ab:
         07:ee:c2:f4:b2:52:40:06:be:4d:6d:13:de:6e:fd:bd:74:fd:
         e0:5a:d3:c6:49:62:d8:14:84:01:dd:80:f5:7e:bb:e7:89:8d:
         55:45:1f:6a:4a:2c:58:a0:24:b2:e3:cd:b1:2e:79:19:5c:cf:
         51:86:45:79:12:10:84:a7:8c:6d:db:09:13:66:af:86:af:b7:
         b5:4c:f0:80:2e:ab:a8:89:16:0c:24:a3:2d:f7:cf:65:de:7b:
         d0:3c:0f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:02:57 2026 by rpki-client