Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/mm4UdEgoljS5hojuWlr0R9Qsuwc.mft
File:                     mm4UdEgoljS5hojuWlr0R9Qsuwc.mft (raw, json)
Hash identifier:          X/SfkqXCq8gCewjEFBG6f9jnck9BgQv6TDqgShOrhug=
Subject key identifier:   A1:67:7D:57:2D:51:2D:C8:1F:CB:A5:9C:CC:CD:67:05:32:0E:A9:23
Authority key identifier: 9A:6E:14:74:48:28:96:34:B9:86:88:EE:5A:5A:F4:47:D4:2C:BB:07
Certificate issuer:       /CN=9a6e147448289634b98688ee5a5af447d42cbb07
Certificate serial:       01A0EBF961F65AA642028E2C4E9DEAC37147
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mm4UdEgoljS5hojuWlr0R9Qsuwc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/mm4UdEgoljS5hojuWlr0R9Qsuwc.mft
Manifest number:          1600
Signing time:             Tue 29 Sep 2026 07:03:04 +0000
Manifest this update:     Tue 29 Sep 2026 07:03:04 +0000
Manifest next update:     Wed 30 Sep 2026 07:03:04 +0000
Files and hashes:         1: Go6GTg9yZuH3ldmoQA3YEONTm-o.roa (hash: CGqeavzuShq2B73tI+xEe2/nH2gqlzVsSoTBNrlZzNM=)
                          2: NQhohxpX79LaflkqFn_SdMtNXkc.roa (hash: hz/eOIHPRLWhV6gGQdsCHSgfHNHYQpMaIgkZOgKyDdU=)
                          3: mm4UdEgoljS5hojuWlr0R9Qsuwc.crl (hash: GubQkr8hkFG7vmF9YinZboOBIUrz2U0g76bc5D9lmGU=)
                          4: uQs-ZJfKnsb459_bSKrUNmzfSB4.roa (hash: Mi8CPwabE4hTHrT6goEVCJdEWrAoZ6ttolmgoUc/pCQ=)
                          5: xTuc6UK9A4gZnxWW2S3npGWfiHs.roa (hash: gv+TgqVRuNuQuQ9MsAnfTnrMxqIjbm5uB+jO2MB/vu4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/mm4UdEgoljS5hojuWlr0R9Qsuwc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/mm4UdEgoljS5hojuWlr0R9Qsuwc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mm4UdEgoljS5hojuWlr0R9Qsuwc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 07:03:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:eb:f9:61:f6:5a:a6:42:02:8e:2c:4e:9d:ea:c3:71:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a6e147448289634b98688ee5a5af447d42cbb07
        Validity
            Not Before: Sep 29 07:03:04 2026 GMT
            Not After : Sep 30 07:03:04 2026 GMT
        Subject: CN=a1677d572d512dc81fcba59ccccd6705320ea923
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f5:6f:7c:77:86:cf:01:00:2d:40:c4:5d:3a:
                    58:b2:c2:52:a4:39:c3:a7:70:76:a3:7d:a3:76:7f:
                    5e:47:94:5b:08:56:54:33:95:f8:e8:e6:66:42:3f:
                    97:18:c1:35:f1:0e:47:02:f1:c5:b7:f3:ac:78:0b:
                    d7:41:f9:54:75:76:c8:4f:30:68:85:c4:48:05:13:
                    73:db:3b:68:b3:fe:89:31:96:f2:08:61:81:24:b7:
                    1d:33:32:01:15:a9:88:50:93:80:ef:69:49:8a:51:
                    2f:53:52:d0:4e:91:a6:ea:e4:16:8f:49:50:a7:3c:
                    2e:49:7b:84:25:0d:df:e8:f0:ba:bb:21:5b:cb:a5:
                    19:c9:59:88:d3:57:c3:b4:07:8d:d4:f7:2b:a5:93:
                    55:b8:1e:50:5b:ff:48:a9:51:fa:50:79:d0:ce:d4:
                    4d:9d:09:46:1b:cf:34:ee:fa:4c:e6:2d:31:49:7e:
                    ae:d2:65:33:70:70:8c:bc:ef:4c:28:12:37:ea:c5:
                    f4:99:d1:c2:f4:83:56:cc:9b:e3:d7:63:bb:1f:b9:
                    ad:df:4e:fe:e8:61:fd:61:fb:a2:55:99:73:25:56:
                    6b:28:2d:96:87:72:94:4a:49:a6:b9:91:0f:33:36:
                    d2:91:87:1a:3b:b5:0a:75:d8:c1:8a:51:e7:49:e7:
                    fb:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:67:7D:57:2D:51:2D:C8:1F:CB:A5:9C:CC:CD:67:05:32:0E:A9:23
            X509v3 Authority Key Identifier:
                keyid:9A:6E:14:74:48:28:96:34:B9:86:88:EE:5A:5A:F4:47:D4:2C:BB:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mm4UdEgoljS5hojuWlr0R9Qsuwc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/mm4UdEgoljS5hojuWlr0R9Qsuwc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/mm4UdEgoljS5hojuWlr0R9Qsuwc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:39:57:c0:0f:ad:06:ea:bc:be:e2:9d:25:9e:74:d1:e6:96:
         ae:24:14:26:4a:f8:b1:72:f1:f9:26:67:17:ef:4f:93:42:d7:
         71:b7:39:78:8c:d9:aa:60:d8:d7:0a:c9:63:03:6e:f0:f1:81:
         ec:8c:a0:6f:6f:3d:27:37:a7:f9:a8:d8:fd:bc:4f:07:6a:55:
         ab:ab:33:e6:d7:02:85:51:16:24:4b:6f:40:28:f3:21:ab:94:
         b9:cd:90:29:e5:9a:bc:8f:f0:4c:17:d9:14:fa:ae:32:a8:d4:
         22:8d:04:8b:e3:02:ac:4d:12:cf:eb:73:45:69:6e:4a:05:77:
         a6:65:d4:f1:8e:16:27:21:32:28:6c:97:f8:f5:c9:61:3e:53:
         0a:41:62:40:7f:f8:36:ec:fd:e9:c3:85:c0:03:de:b6:13:a5:
         b0:92:84:f1:1b:d8:01:31:c6:e5:89:ed:ca:33:1a:07:6b:59:
         e5:4f:08:f9:01:f3:73:6d:57:1a:a4:4d:07:ac:86:e4:00:d1:
         8c:c6:7d:bf:16:0a:8a:31:7e:9a:0c:1c:b9:79:d5:27:58:71:
         ee:0a:d2:08:df:9a:18:3d:5f:56:5c:33:a6:20:97:38:64:c6:
         ac:f6:80:66:01:85:76:f8:3b:51:14:b0:2c:62:a7:8c:31:eb:
         83:ae:1b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 17:51:10 2026 by rpki-client