Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.mft
File:                     45Dy7gpwvK7-AZWj2LN300KXqUM.mft (raw, json)
Hash identifier:          x8sBvyynbMy+G/wNqa2HSeTMCF2LkbtqtaxN2BK438g=
Subject key identifier:   A8:98:29:39:72:DE:92:97:B0:CF:5B:7D:15:78:2A:1A:27:13:4A:CA
Authority key identifier: E3:90:F2:EE:0A:70:BC:AE:FE:01:95:A3:D8:B3:77:D3:42:97:A9:43
Certificate issuer:       /CN=e390f2ee0a70bcaefe0195a3d8b377d34297a943
Certificate serial:       01A0D2A64AE029905CB26538F7C874B203B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/45Dy7gpwvK7-AZWj2LN300KXqUM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.mft
Manifest number:          1A6E
Signing time:             Thu 24 Sep 2026 09:01:48 +0000
Manifest this update:     Thu 24 Sep 2026 09:01:48 +0000
Manifest next update:     Fri 25 Sep 2026 09:01:48 +0000
Files and hashes:         1: 45Dy7gpwvK7-AZWj2LN300KXqUM.crl (hash: u0ezCBHJg/MLbgTMWSPUvT8otODVfVba0i8VOHAyPzU=)
                          2: acUHfVCy5j8WfhXBkKrvtIIZ6u4.roa (hash: A0ZoDSyXeoOjiHDBQQXTi7qUdiWgsEQgspWWgoPcjbU=)
                          3: mY4iCleNhrzf8aXMLmHiJ52ay4A.roa (hash: XzaZ+/TpO1ZESBFBMtwiRlJAL9YVrFYukINjmUNi5KQ=)
                          4: mflNPwnPi4f5wBAod8r23N6IFVQ.roa (hash: eCHOBETtrQl/yFYeuqvktndVXTn5G2F5otfDMkWdMXY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/45Dy7gpwvK7-AZWj2LN300KXqUM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 08:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d2:a6:4a:e0:29:90:5c:b2:65:38:f7:c8:74:b2:03:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e390f2ee0a70bcaefe0195a3d8b377d34297a943
        Validity
            Not Before: Sep 24 09:01:48 2026 GMT
            Not After : Sep 25 09:01:48 2026 GMT
        Subject: CN=a898293972de9297b0cf5b7d15782a1a27134aca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5e:9c:c0:0c:19:10:20:eb:0c:02:2d:e1:00:
                    a8:20:44:83:2a:37:3f:ba:db:e2:f0:3c:79:6b:a4:
                    19:2e:9d:c5:6b:8e:80:fa:d9:2d:9a:ae:fe:11:90:
                    c0:64:79:65:e3:f6:ee:79:41:d8:29:bb:25:de:10:
                    8c:dc:88:d4:95:d6:80:07:17:1d:24:82:4c:38:98:
                    33:49:21:35:77:a2:ed:aa:cb:d9:cb:c7:22:11:70:
                    79:83:8f:11:29:29:24:2e:c9:cf:ef:46:be:86:9b:
                    36:d3:c0:22:59:37:e7:34:3d:49:b9:47:95:95:fd:
                    a2:40:5a:75:9f:eb:3d:2a:05:18:5c:cc:48:9b:7f:
                    97:92:f2:9a:6f:17:3f:95:53:92:cf:ae:23:a2:a5:
                    13:78:4c:b0:34:17:5e:55:dc:c8:fd:0c:1a:39:9e:
                    bc:ec:1d:c4:65:57:fa:d0:c0:80:11:4e:52:24:bc:
                    58:2f:39:bb:e5:81:c9:7f:9b:ba:45:d4:78:fd:d4:
                    63:2d:17:63:de:79:f9:09:00:e6:83:63:fa:22:d4:
                    48:79:04:35:a3:f8:44:12:a9:e5:78:73:78:65:7b:
                    59:86:9d:ad:d6:e8:22:29:8b:b2:61:22:69:6c:bd:
                    0f:62:a3:7e:27:50:ab:3b:cc:07:bc:dc:3a:dd:f7:
                    9a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:98:29:39:72:DE:92:97:B0:CF:5B:7D:15:78:2A:1A:27:13:4A:CA
            X509v3 Authority Key Identifier:
                keyid:E3:90:F2:EE:0A:70:BC:AE:FE:01:95:A3:D8:B3:77:D3:42:97:A9:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/45Dy7gpwvK7-AZWj2LN300KXqUM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:fb:05:a3:d2:17:43:66:e5:99:cd:6a:3f:01:cf:fd:e2:0d:
         04:9d:e5:bf:fb:36:05:87:25:29:c8:5e:e6:d2:bf:66:08:a0:
         f7:c1:38:a0:a3:49:f5:35:65:cd:ae:0f:78:15:14:66:07:01:
         6e:3a:dd:2b:f5:ff:15:06:ae:ab:69:7b:ce:39:54:84:a7:03:
         45:33:e8:80:8a:fb:0d:64:57:9b:4a:c9:0a:49:b4:a5:a6:08:
         6f:c6:0d:8f:a2:3c:dd:13:a7:de:c2:c6:c6:37:c0:2e:b7:38:
         26:80:ad:9e:31:49:3b:f1:6a:3b:60:4a:41:e3:e3:4d:0d:24:
         1b:c4:c4:06:1a:03:3e:6e:27:d3:71:5d:49:16:1b:74:9a:df:
         62:37:7e:6e:96:12:af:31:29:cb:09:60:88:78:99:a8:32:b6:
         33:6b:1b:06:c4:10:5c:a8:09:cc:9f:fd:2e:3e:c8:f0:01:c6:
         e1:32:0a:19:ca:81:36:1c:a4:11:0c:2f:4b:76:13:05:de:f9:
         37:f3:cb:74:6a:6d:ce:39:f7:ad:4e:af:d4:3b:98:5e:8d:fc:
         9b:8e:61:fd:79:bb:83:1b:5d:80:d0:05:40:a5:fc:63:cd:51:
         99:db:85:d8:e6:1d:e2:6f:45:76:32:83:57:af:4a:cb:41:35:
         bf:4e:07:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:36:11 2026 by rpki-client