Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.mft
File:                     45VXJQVD5Edq-IxGEtSolTExO1c.mft (raw, json)
Hash identifier:          z66toAKdKGdFiq22bH6VhQKA/ZNmGFR8vt0VKAmIekE=
Subject key identifier:   DD:48:41:5F:E0:F6:28:CF:7E:28:50:88:8E:39:67:05:27:0F:0D:1D
Authority key identifier: E3:95:57:25:05:43:E4:47:6A:F8:8C:46:12:D4:A8:95:31:31:3B:57
Certificate issuer:       /CN=e39557250543e4476af88c4612d4a89531313b57
Certificate serial:       01A110A91CC77F84C70E1C9A62091937BC00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/45VXJQVD5Edq-IxGEtSolTExO1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.mft
Manifest number:          0630
Signing time:             Tue 06 Oct 2026 10:01:20 +0000
Manifest this update:     Tue 06 Oct 2026 10:01:20 +0000
Manifest next update:     Wed 07 Oct 2026 10:01:20 +0000
Files and hashes:         1: 2F4RMUmq0lpAOhiDCB5e-Y1vbfk.roa (hash: l3nVP84qgAebXZ45df8F6skmyfbFKhUrmvG9dZuwE7o=)
                          2: 45VXJQVD5Edq-IxGEtSolTExO1c.crl (hash: sA4RKuM2073hp4AAXnxzuqeEwYo0kAtBHFPJWly5SWk=)
                          3: Iacpz7QDqdYmpPkWqkjxU0vWlw0.roa (hash: Egal+mT8M6xP1Rl+/8TQk/EbX4bTommbuReOlbLDzcc=)
                          4: aiFineB_gxGIrcZvhU1Nu9cj4A0.roa (hash: AkbNmkpqMmin2o1u61DaHLTarr56+ivukYMQYGh0IcA=)
                          5: d9AXTVr2vRRCUzg4PpWPZA9-G3Y.roa (hash: 4Ee4Ao/K0Ut8uGSYkeeEJIsMyx7D4XFRo3U7gWI9B3c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/45VXJQVD5Edq-IxGEtSolTExO1c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Oct 2026 10:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:10:a9:1c:c7:7f:84:c7:0e:1c:9a:62:09:19:37:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e39557250543e4476af88c4612d4a89531313b57
        Validity
            Not Before: Oct  6 10:01:20 2026 GMT
            Not After : Oct  7 10:01:20 2026 GMT
        Subject: CN=dd48415fe0f628cf7e2850888e396705270f0d1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:9b:f2:69:43:86:22:e8:69:cc:a1:5b:60:d5:
                    3c:38:0c:a1:7d:4e:6a:bd:a0:db:81:73:fc:0d:7f:
                    b7:42:7b:d1:fa:72:62:df:8f:ee:60:ef:d9:11:7a:
                    e8:65:5a:1c:79:d0:d7:42:0b:cf:17:dd:35:71:4a:
                    94:ed:d1:3b:45:47:42:03:2d:9c:94:57:a7:4a:1f:
                    57:51:bf:69:72:e8:86:f4:cf:cf:5f:d9:ea:2d:b8:
                    1e:b9:01:73:9b:77:8d:22:25:37:a0:d6:95:d4:53:
                    7b:77:7b:8d:7f:26:b5:02:20:1a:b7:59:54:d7:7a:
                    5e:a8:91:f4:2b:e4:ad:fb:f4:9a:b6:40:66:c7:44:
                    ac:ed:c3:c4:b2:58:f3:bf:72:f4:84:7f:c5:89:20:
                    02:ab:96:e3:07:e9:32:ea:cf:5a:eb:b7:b6:ca:57:
                    d4:cf:41:6c:55:cc:39:61:14:a3:36:41:ca:87:d9:
                    99:f4:27:86:45:64:c6:53:4e:38:ea:ce:3e:b1:e3:
                    6c:0d:fa:4e:40:fe:fb:72:77:93:21:46:06:c9:d0:
                    f7:15:12:44:4f:79:e0:07:98:f5:c4:22:6f:2e:4c:
                    00:2e:1d:48:ce:43:6a:16:4a:5f:e0:00:a3:3c:ef:
                    18:b2:83:ce:25:7b:21:51:52:72:49:50:51:03:8c:
                    f6:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:48:41:5F:E0:F6:28:CF:7E:28:50:88:8E:39:67:05:27:0F:0D:1D
            X509v3 Authority Key Identifier:
                keyid:E3:95:57:25:05:43:E4:47:6A:F8:8C:46:12:D4:A8:95:31:31:3B:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/45VXJQVD5Edq-IxGEtSolTExO1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:4c:ff:8c:e4:bf:50:70:56:b5:87:d4:77:d3:95:fc:f4:8f:
         0f:ed:6c:e5:1f:f4:fb:77:e6:20:7b:54:5b:61:0a:c0:16:d5:
         b4:0c:d0:d9:b0:9c:c6:c0:18:24:ea:c3:bd:58:bf:c8:81:30:
         76:13:7c:fe:89:b7:c3:d9:6d:44:0b:49:eb:26:ea:33:55:03:
         1e:ca:37:45:0d:6d:c1:ed:ab:e0:d9:20:86:92:d0:c6:5b:17:
         5c:fe:72:e2:a7:9a:0b:f9:93:ef:c0:49:48:f4:07:90:dd:a2:
         6c:6a:b8:31:90:ef:50:11:b1:ee:20:38:64:90:b7:d3:46:7f:
         39:ba:ba:d6:9c:fe:a1:17:c6:1e:5d:0e:8d:10:92:5d:f7:7d:
         9d:59:88:a0:7c:df:17:25:e6:8c:01:89:c7:f6:43:6a:bf:9d:
         ae:f1:be:52:5a:16:63:44:44:4c:19:5b:11:11:b9:98:a6:3e:
         d8:a8:90:6b:e4:8a:7f:4d:0d:a7:9e:24:03:48:30:77:76:8d:
         57:aa:b1:14:08:23:20:eb:aa:d1:ea:e1:e1:04:03:9e:99:b0:
         11:85:f2:8e:c2:7b:0a:6a:ac:03:e0:23:ca:4f:94:ea:2a:fa:
         9c:66:a1:a3:22:92:59:46:3a:c6:42:6f:68:08:3a:c7:11:27:
         f6:e3:ab:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 20:28:28 2026 by rpki-client