Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft
File:                     7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft (raw, json)
Hash identifier:          axfwuWJvSmUJJUi2kn2pC2ZY0TphTzlleWKCMpLwy0E=
Subject key identifier:   46:9F:0F:1F:92:02:43:08:2E:D3:26:40:33:87:CC:B9:83:B3:FF:D8
Authority key identifier: ED:47:6A:74:86:B7:85:45:12:93:57:11:26:C5:F9:DA:3E:C4:85:D8
Certificate issuer:       /CN=ed476a7486b785451293571126c5f9da3ec485d8
Certificate serial:       01A0C47C9514964AAD0B67E993526CC56857
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7UdqdIa3hUUSk1cRJsX52j7Ehdg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft
Manifest number:          19F8
Signing time:             Mon 21 Sep 2026 15:01:33 +0000
Manifest this update:     Mon 21 Sep 2026 15:01:33 +0000
Manifest next update:     Tue 22 Sep 2026 15:01:33 +0000
Files and hashes:         1: 7UdqdIa3hUUSk1cRJsX52j7Ehdg.crl (hash: F6kVjs4mvg+FNGU/8L203KUSzI0SpuwAIGzCLWEJ/oY=)
                          2: NJ53-rR_xX4WzjhOA9BrYV2nSLM.roa (hash: QoLJTTNt4EV3su31vq7GYg/U/5yk5wlrs70Rl9FmejU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7UdqdIa3hUUSk1cRJsX52j7Ehdg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 15:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c4:7c:95:14:96:4a:ad:0b:67:e9:93:52:6c:c5:68:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed476a7486b785451293571126c5f9da3ec485d8
        Validity
            Not Before: Sep 21 15:01:33 2026 GMT
            Not After : Sep 22 15:01:33 2026 GMT
        Subject: CN=469f0f1f920243082ed326403387ccb983b3ffd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a0:7a:00:c8:2a:85:36:1d:8b:6b:c6:9f:bc:
                    c5:68:61:f2:a7:1c:fa:a4:2b:d3:0e:7f:a5:04:02:
                    f3:a7:9c:8f:47:8d:ef:a0:84:50:5e:41:76:a0:f7:
                    2a:55:a9:a6:90:81:ad:6c:1b:37:09:ea:d6:09:08:
                    6b:f5:b5:db:7a:ec:61:6d:2c:83:1c:7a:67:99:5f:
                    ce:2a:67:5b:bb:c3:a3:15:93:bf:56:19:2c:ee:8a:
                    51:53:84:d5:87:cd:84:8f:f5:bb:f3:03:ca:3f:2e:
                    4b:8a:63:53:1f:f7:21:7a:2e:12:93:7a:f5:d7:2e:
                    33:79:1c:90:0b:f6:1e:95:f5:e0:ee:4c:6f:3f:57:
                    67:99:4f:a3:04:17:7f:12:79:d7:19:46:53:d0:83:
                    90:2c:93:eb:44:1b:e3:46:48:be:ef:94:38:9b:59:
                    a7:9a:1e:cd:8b:84:89:2c:fd:68:ad:d0:38:99:00:
                    35:2f:d5:7d:b5:3e:27:19:04:4b:3d:36:84:e4:db:
                    72:d9:4e:1f:dd:e9:b4:2d:bf:29:50:5d:09:be:c5:
                    9b:3b:0a:82:dc:bd:77:92:cd:e2:4c:4c:13:9d:1e:
                    1e:5e:c3:d0:93:07:bb:8c:b7:54:14:4c:c3:ba:fe:
                    5e:ad:26:af:d4:27:bf:40:8a:d5:cd:4f:b4:ba:cc:
                    86:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:9F:0F:1F:92:02:43:08:2E:D3:26:40:33:87:CC:B9:83:B3:FF:D8
            X509v3 Authority Key Identifier:
                keyid:ED:47:6A:74:86:B7:85:45:12:93:57:11:26:C5:F9:DA:3E:C4:85:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7UdqdIa3hUUSk1cRJsX52j7Ehdg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:d0:78:68:59:3d:05:1d:e4:1a:62:25:4c:cb:6d:6f:7e:4e:
         a3:37:e5:ed:8c:97:52:00:39:62:20:fb:95:39:71:8c:c3:c3:
         5b:94:38:61:b7:78:3f:81:3b:26:a5:e3:30:87:73:2d:a1:4f:
         05:30:84:73:ca:03:95:2d:ea:f9:76:9e:1a:d4:c6:46:ae:af:
         76:a8:0c:6c:b1:67:e7:fd:c1:80:cc:60:fd:cc:a8:fb:e9:6a:
         ff:92:a3:a7:22:68:c5:ef:7e:3f:f3:84:2f:99:16:ee:39:b6:
         6d:57:1b:8c:f2:82:94:61:c2:56:7f:94:f0:a4:d0:2f:22:79:
         cb:4f:24:73:ae:78:47:34:7d:c9:f1:40:95:b3:dd:b2:0d:73:
         fe:3a:5b:c1:46:92:75:24:9e:a0:d3:34:95:07:83:56:41:b9:
         fc:56:fc:98:f7:e8:55:fa:fb:c7:f8:74:81:70:83:48:d9:60:
         d2:88:f9:48:18:55:c7:0b:09:97:96:94:00:56:da:94:d6:d3:
         36:af:13:dd:c7:b0:2b:8c:5b:bf:b9:cb:4b:64:09:2b:69:fc:
         04:16:be:2b:ec:de:26:ce:6c:3c:f3:a7:af:bb:bb:a1:75:a6:
         cf:86:b0:9d:ec:b1:29:58:1b:e8:dc:e2:70:c4:d1:3e:da:7b:
         15:cd:80:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 02:29:43 2026 by rpki-client