Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/a9024d-bbd8-4dee-a323-0050ea36c296/1/RidnpzdfGsVGaRqvKlEfu2J3Ax0.mft
File:                     RidnpzdfGsVGaRqvKlEfu2J3Ax0.mft (raw, json)
Hash identifier:          YRCMWTNx46Hr0EXbX0VgBEjlMamqfEckfh/D+lGUzHc=
Subject key identifier:   9D:47:BF:1A:5A:95:FE:54:F7:72:E4:0D:52:D5:3C:F4:4C:25:0D:FC
Authority key identifier: 46:27:67:A7:37:5F:1A:C5:46:69:1A:AF:2A:51:1F:BB:62:77:03:1D
Certificate issuer:       /CN=462767a7375f1ac546691aaf2a511fbb6277031d
Certificate serial:       01A0C39F97299CCD82527406813428A925B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RidnpzdfGsVGaRqvKlEfu2J3Ax0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/a9024d-bbd8-4dee-a323-0050ea36c296/1/RidnpzdfGsVGaRqvKlEfu2J3Ax0.mft
Manifest number:          02E6
Signing time:             Mon 21 Sep 2026 11:00:11 +0000
Manifest this update:     Mon 21 Sep 2026 11:00:11 +0000
Manifest next update:     Tue 22 Sep 2026 11:00:11 +0000
Files and hashes:         1: 0ppkgAkMVUZmtvxiis_JaRg_jKc.roa (hash: hmBjjzY/GLh0BaP+YN19dWeqC0F3ldt8pYexHB8bxW0=)
                          2: RidnpzdfGsVGaRqvKlEfu2J3Ax0.crl (hash: EJou0M6BnyNMV+jdfsDhx8fQrU+zeGMIf28SY216ixY=)
                          3: gFOGmZRlX2Va7a4eZJorJSldfM0.asa (hash: iWV8IrqVD+U7+lJQU0PeeR9WILJwhPNuOe7C9EI2EN0=)
                          4: hvFmobLJgv_FtphUoy5jADPJJnc.roa (hash: jnuVvbpAgeJ1NUOXj3up5SgN82P8AgWr5+BqvtU3HaY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/a9024d-bbd8-4dee-a323-0050ea36c296/1/RidnpzdfGsVGaRqvKlEfu2J3Ax0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/a9024d-bbd8-4dee-a323-0050ea36c296/1/RidnpzdfGsVGaRqvKlEfu2J3Ax0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RidnpzdfGsVGaRqvKlEfu2J3Ax0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 11:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c3:9f:97:29:9c:cd:82:52:74:06:81:34:28:a9:25:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=462767a7375f1ac546691aaf2a511fbb6277031d
        Validity
            Not Before: Sep 21 11:00:11 2026 GMT
            Not After : Sep 22 11:00:11 2026 GMT
        Subject: CN=9d47bf1a5a95fe54f772e40d52d53cf44c250dfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:71:33:1b:fb:2a:b2:e7:c2:2e:23:78:c5:2f:
                    23:62:4d:2e:2d:f9:69:16:b4:6c:01:1a:57:ce:36:
                    91:93:7b:aa:cd:7c:6b:d1:52:16:fe:1c:4f:f3:2f:
                    2e:2c:1a:c3:8f:46:2f:82:d8:15:9c:94:73:02:df:
                    94:72:2a:f9:0c:1c:7f:7b:42:c7:19:bc:65:b5:3d:
                    2d:fb:10:96:f7:b6:9c:60:7e:84:7d:21:f4:85:9e:
                    eb:76:ca:5c:01:a5:b7:6e:e0:b2:b4:e5:99:9d:b0:
                    c6:fc:fe:21:bd:46:bc:9f:1a:b2:ad:aa:c9:0a:2a:
                    aa:e8:9f:77:49:53:8c:00:81:87:58:71:5a:58:cf:
                    7d:72:21:0f:35:56:1d:7b:cb:79:87:73:cc:f4:5d:
                    dd:48:d1:25:8e:6d:4e:4c:23:f5:b5:85:2e:a5:5f:
                    f9:28:37:04:d4:0e:03:5c:86:21:be:e2:e6:e9:00:
                    55:db:fb:95:78:ad:bf:47:ad:84:3e:bb:b6:c6:8e:
                    e6:b6:98:97:24:53:0a:c8:66:8b:dd:d0:49:4e:0c:
                    49:e6:e8:3f:13:93:33:24:56:b7:d4:e0:f4:a8:80:
                    ce:53:8a:22:dd:5e:80:6a:46:b2:8d:21:96:ae:fb:
                    da:00:e6:02:03:e9:38:4a:f0:20:ec:f1:fe:b1:0b:
                    1c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:47:BF:1A:5A:95:FE:54:F7:72:E4:0D:52:D5:3C:F4:4C:25:0D:FC
            X509v3 Authority Key Identifier:
                keyid:46:27:67:A7:37:5F:1A:C5:46:69:1A:AF:2A:51:1F:BB:62:77:03:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RidnpzdfGsVGaRqvKlEfu2J3Ax0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/a9024d-bbd8-4dee-a323-0050ea36c296/1/RidnpzdfGsVGaRqvKlEfu2J3Ax0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/a9024d-bbd8-4dee-a323-0050ea36c296/1/RidnpzdfGsVGaRqvKlEfu2J3Ax0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:ba:4c:0b:d7:8f:5b:cf:32:0b:ea:6f:f8:72:f5:b3:9a:51:
         b4:3e:95:01:07:c1:dd:fb:45:60:06:00:e7:01:9d:17:fe:1f:
         18:98:61:9f:07:f2:09:7f:a3:b0:a4:90:57:e5:4b:7f:23:ff:
         aa:c8:e4:3b:a8:f7:36:b3:c7:90:01:60:f8:bd:8e:4a:92:14:
         ed:b0:df:41:a0:43:b9:71:07:9f:d7:8b:3b:e4:04:6e:11:8a:
         8a:24:a9:94:3e:15:be:0a:fe:70:df:e1:7b:8d:1d:65:4c:7f:
         88:89:c7:35:14:f6:61:cd:fa:19:73:43:13:61:ab:d2:7b:9b:
         e3:2f:0f:bb:cd:f4:bd:05:98:5f:4a:12:0a:b5:39:39:c2:aa:
         6a:c0:a9:4f:9c:e3:ae:c1:c9:5f:8b:d5:fb:f5:52:49:57:02:
         d8:2e:01:e1:c3:61:56:33:40:0d:4e:30:32:2c:54:af:cc:de:
         08:64:64:ba:77:9e:d6:0f:0a:ee:87:39:4b:13:ba:0d:c8:65:
         45:e0:3c:21:e6:71:95:d8:e5:5a:03:f3:7e:80:0c:be:0c:74:
         48:2d:c3:dc:9b:70:96:5e:23:35:61:a9:5a:55:a0:5e:f2:3f:
         f3:a8:5f:80:b3:0f:92:de:77:07:b0:aa:43:05:b2:cf:06:5c:
         1d:e3:56:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:01:04 2026 by rpki-client