Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.mft
File:                     RZR46fHzCyT9FxmNHKyDW8Hk368.mft (raw, json)
Hash identifier:          E4OjQ4ykgvGrNeK+kleZDV3EBzdUp8CoiiPZXo72SxA=
Subject key identifier:   15:79:4A:D9:4C:65:86:9F:A2:BF:2E:68:2D:F8:5E:5C:25:A6:11:E5
Authority key identifier: 45:94:78:E9:F1:F3:0B:24:FD:17:19:8D:1C:AC:83:5B:C1:E4:DF:AF
Certificate issuer:       /CN=459478e9f1f30b24fd17198d1cac835bc1e4dfaf
Certificate serial:       01A13AEDEB036053C2F4246BE2F7DF1D8E2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RZR46fHzCyT9FxmNHKyDW8Hk368.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.mft
Manifest number:          0B42
Signing time:             Wed 14 Oct 2026 15:00:33 +0000
Manifest this update:     Wed 14 Oct 2026 15:00:33 +0000
Manifest next update:     Thu 15 Oct 2026 15:00:33 +0000
Files and hashes:         1: 7QM2KeQ3Wn7b2DM_DaBA8kJny-8.roa (hash: 62/MDcXDz4G8cxXxwlkwD2glafSnz5PZXVYHbOFIM38=)
                          2: RZR46fHzCyT9FxmNHKyDW8Hk368.crl (hash: LkTV14KF0WNNd0/1wINdn1E/NrB8q7EebdR3OGukwRs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RZR46fHzCyT9FxmNHKyDW8Hk368.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 14:43:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3a:ed:eb:03:60:53:c2:f4:24:6b:e2:f7:df:1d:8e:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=459478e9f1f30b24fd17198d1cac835bc1e4dfaf
        Validity
            Not Before: Oct 14 15:00:33 2026 GMT
            Not After : Oct 15 15:00:33 2026 GMT
        Subject: CN=15794ad94c65869fa2bf2e682df85e5c25a611e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:70:2b:e1:38:3b:1e:9c:2a:b1:67:e5:9f:2f:
                    3e:95:23:3e:d4:7d:f1:a2:ce:eb:b7:ce:67:38:21:
                    9d:e1:56:1c:95:ac:b7:2c:e3:b4:21:1e:94:a2:64:
                    34:82:4b:0d:f1:8b:b9:94:d6:91:1e:5b:d6:69:ef:
                    1f:7f:c7:c5:c3:7a:11:67:13:fc:e5:e8:35:37:f8:
                    55:9a:91:af:5b:19:49:4e:db:17:ea:65:fb:72:e4:
                    56:9f:63:3c:ff:45:d6:69:d6:00:88:4a:33:2a:af:
                    bf:ca:e3:51:ed:fb:c2:ad:6f:9f:d2:34:36:1b:42:
                    da:bf:9a:1c:dd:eb:72:3b:30:88:ca:21:5d:d6:cb:
                    fc:71:e3:4e:0f:1c:a2:61:98:ca:8f:ca:df:06:dd:
                    17:75:ce:c9:b8:c7:34:87:1d:cb:81:66:ff:71:13:
                    43:c8:66:fd:59:c9:1c:a6:12:51:86:85:b5:02:b2:
                    5b:e5:a5:35:4d:75:a4:04:6e:2d:56:a6:0e:3b:ea:
                    12:6c:43:d9:c2:20:af:03:d9:85:2c:cc:85:8d:d2:
                    b8:51:5e:0e:4e:31:c8:c6:7f:01:be:38:30:d5:78:
                    2d:f0:81:17:1d:d9:6d:31:a4:3b:04:6b:39:81:81:
                    bc:26:7e:83:b4:bf:d0:1e:5d:db:df:d3:0c:77:eb:
                    f1:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:79:4A:D9:4C:65:86:9F:A2:BF:2E:68:2D:F8:5E:5C:25:A6:11:E5
            X509v3 Authority Key Identifier:
                keyid:45:94:78:E9:F1:F3:0B:24:FD:17:19:8D:1C:AC:83:5B:C1:E4:DF:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZR46fHzCyT9FxmNHKyDW8Hk368.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:46:ae:17:65:f4:b9:30:b6:b8:c3:e0:fb:c0:c3:2b:fd:c5:
         6d:2f:be:a1:6c:c4:07:38:fc:9c:6e:52:44:38:88:6a:0e:da:
         8e:54:7f:6c:c5:d1:56:20:77:2d:7b:b0:db:26:d2:0c:37:31:
         0b:d1:7f:e1:ea:ff:d5:0d:2d:83:9f:b5:cb:c6:11:30:a6:be:
         02:e1:ff:e5:07:48:a3:d5:32:38:6f:33:70:49:9f:84:cd:3c:
         34:cf:83:46:08:48:f1:86:df:e1:6b:b2:57:94:e4:e2:a4:d9:
         54:12:61:69:29:01:1a:95:4a:f0:b1:d7:b0:19:b3:f2:d6:ba:
         38:71:be:64:06:af:24:12:72:38:94:df:76:17:50:6f:17:ba:
         67:0f:90:d3:0b:d4:56:ab:98:d3:3d:5d:5b:75:0c:0e:38:99:
         3d:2a:af:aa:c8:50:ae:64:ff:2c:df:5c:0b:3c:1f:af:55:f1:
         e5:c6:4a:e8:5f:a6:31:67:c9:80:60:3c:68:e1:e4:04:e3:ff:
         ee:55:5b:7d:62:2a:5b:fc:a6:eb:47:4f:82:81:05:49:c2:31:
         10:29:9e:92:55:43:b3:95:b6:4b:a1:cd:c4:e6:fd:57:99:dd:
         8a:c9:14:4a:92:58:c6:e6:0c:cb:25:9b:c4:b6:16:05:cc:ca:
         a7:af:83:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 20:26:17 2026 by rpki-client