Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.mft
File:                     pPhDYAPTdgICa2VTF1XKj80xvtI.mft (raw, json)
Hash identifier:          2zr7qBqE4exqKWiWLdwwYLttFqYobEyS0pf/YpLn81c=
Subject key identifier:   F7:FD:44:ED:C4:A7:35:5C:CE:63:4A:A8:D3:DB:92:63:B5:87:98:E9
Authority key identifier: A4:F8:43:60:03:D3:76:02:02:6B:65:53:17:55:CA:8F:CD:31:BE:D2
Certificate issuer:       /CN=a4f8436003d37602026b65531755ca8fcd31bed2
Certificate serial:       01A0CE5A9AE3E1AA0BC8196877EDF7E3CDE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pPhDYAPTdgICa2VTF1XKj80xvtI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.mft
Manifest number:          1A8B
Signing time:             Wed 23 Sep 2026 13:00:39 +0000
Manifest this update:     Wed 23 Sep 2026 13:00:39 +0000
Manifest next update:     Thu 24 Sep 2026 13:00:39 +0000
Files and hashes:         1: At7sxT6mL4XEiXdrKAbf-oB5YCc.roa (hash: d4FJAcpEe0iO1bxqcw6QAHvtcjgma3GLYgzaB3duGh0=)
                          2: MH0ePkGiqUNJj92Th9uz7ESBLuY.roa (hash: zEMC++4x++17MQ2QaYX26EoR6rGR9XCEMskuWanLEDo=)
                          3: TL6-YQoL6bM9YzZkFooupL9SKZc.roa (hash: fDKbKxnCCglM7bDeEH0JDX6y2HKlL0aR2oegXj3HyjY=)
                          4: ZSy9I3udyb1w0usAvKavWUhYUuM.roa (hash: NjrlIizcsmC5vnXJgYJk87Yv2k+U89uwtXh718Ex2Oo=)
                          5: lilRXnQbhAs_T-urB33KZ2t0KZQ.roa (hash: U6hwfDfpC6+pNA9h6WSEbMtCWXO/blanxBm4f8SHiVE=)
                          6: pPhDYAPTdgICa2VTF1XKj80xvtI.crl (hash: 7d6WB0AIOd/xlVCC6a3buQsPWmfHIeallR2ypZgvxPc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pPhDYAPTdgICa2VTF1XKj80xvtI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 13:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:5a:9a:e3:e1:aa:0b:c8:19:68:77:ed:f7:e3:cd:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4f8436003d37602026b65531755ca8fcd31bed2
        Validity
            Not Before: Sep 23 13:00:39 2026 GMT
            Not After : Sep 24 13:00:39 2026 GMT
        Subject: CN=f7fd44edc4a7355cce634aa8d3db9263b58798e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e5:81:c4:08:4d:c4:5e:f5:80:b2:f9:1f:83:
                    4c:a5:f8:33:aa:4b:50:4e:79:db:20:06:72:47:49:
                    07:62:af:d2:89:07:21:b5:68:e4:71:84:5e:8f:00:
                    d9:64:eb:7f:67:88:ec:42:35:d5:94:62:28:12:1f:
                    f8:43:71:c8:c8:ad:fc:89:74:5d:9d:d9:03:59:0d:
                    34:ab:14:85:a9:de:6b:16:95:1b:51:64:c9:be:a0:
                    bb:ea:c4:2c:a5:30:11:63:35:f5:ff:a5:f2:e6:22:
                    bc:0d:90:19:6a:59:55:30:a7:c2:81:a4:35:8c:3a:
                    e6:b5:04:21:68:35:f5:bb:c3:dd:7d:26:88:f0:bb:
                    e5:8f:a6:68:94:9c:91:4d:11:ee:51:aa:92:bd:9e:
                    a1:71:2c:63:39:59:73:9b:9e:2b:2a:bc:68:1c:f0:
                    db:13:18:34:11:c9:5f:95:a5:9c:0d:b1:c0:f8:d9:
                    e0:0c:4e:a1:ff:f7:f9:fe:b9:a8:ab:83:67:2d:01:
                    c3:da:77:39:4f:08:ce:8e:3b:cf:22:05:12:36:79:
                    cc:22:09:c2:34:52:d8:c5:b1:73:57:8c:0f:3f:c5:
                    3d:ba:4b:7f:c0:68:c3:a0:06:7e:38:20:98:7d:ab:
                    63:73:96:82:12:a3:c3:12:95:fe:46:0c:20:6d:de:
                    66:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:FD:44:ED:C4:A7:35:5C:CE:63:4A:A8:D3:DB:92:63:B5:87:98:E9
            X509v3 Authority Key Identifier:
                keyid:A4:F8:43:60:03:D3:76:02:02:6B:65:53:17:55:CA:8F:CD:31:BE:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPhDYAPTdgICa2VTF1XKj80xvtI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:8f:84:e1:c5:5a:65:c6:a8:b2:0c:b7:ef:bd:9d:25:53:75:
         03:08:d6:aa:fd:eb:fb:9a:2f:0f:c0:56:8f:d4:da:a5:b4:86:
         e7:ec:0f:27:f8:b6:5d:30:f1:7e:61:14:13:a3:a0:61:e1:a6:
         bb:bd:ef:6e:28:33:24:cd:83:e5:dd:8a:55:1e:dc:07:6c:f7:
         76:b4:b2:60:ee:6f:a6:27:9b:6d:ad:9e:e2:92:d5:a7:48:65:
         f4:49:1b:ca:68:8f:8d:74:28:6d:39:11:3b:61:a3:18:68:02:
         9b:69:02:01:9a:e6:96:a9:39:eb:dc:b2:97:98:f0:d4:39:97:
         5d:e6:3a:43:b4:79:53:d9:c3:8c:47:fd:dc:1d:7b:cf:83:53:
         de:4f:06:a2:f2:c1:b5:20:74:95:49:1b:08:36:15:8f:a0:cd:
         d8:45:a7:54:d8:fa:8b:c4:24:d7:3a:18:57:ee:27:f5:bb:06:
         e9:5a:66:f5:84:13:c4:e8:18:5f:70:00:5c:bd:d8:55:31:da:
         f2:1d:e0:84:10:01:0f:1e:e9:17:09:f1:26:98:69:84:65:b9:
         d4:3c:68:fa:77:c0:fc:a1:c8:58:a1:dc:e8:1f:3b:c6:41:94:
         cb:fd:f7:5d:d3:ea:1c:ba:2d:35:62:fe:e7:4b:ac:e0:b1:10:
         aa:e4:9b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:29:52 2026 by rpki-client