Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft
File:                     4T43FhOUZeaoz59r2LW492M68ig.mft (raw, json)
Hash identifier:          b4Xq1MngLPcxq8v+W137OxK++l+yHB8kLIzdCrXsIig=
Subject key identifier:   B8:FE:69:45:AA:68:1A:4F:67:53:B3:1E:B6:C2:F0:7D:E0:16:9D:D4
Authority key identifier: E1:3E:37:16:13:94:65:E6:A8:CF:9F:6B:D8:B5:B8:F7:63:3A:F2:28
Certificate issuer:       /CN=e13e3716139465e6a8cf9f6bd8b5b8f7633af228
Certificate serial:       01A0C2C3F3CCD6842182AF16DAFC41A4F92B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4T43FhOUZeaoz59r2LW492M68ig.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft
Manifest number:          1A64
Signing time:             Mon 21 Sep 2026 07:00:16 +0000
Manifest this update:     Mon 21 Sep 2026 07:00:16 +0000
Manifest next update:     Tue 22 Sep 2026 07:00:16 +0000
Files and hashes:         1: 102rhK3hZolwzCt7IJfuq8GdQf0.roa (hash: YO/FD+MWLi1I9ePrVvUS7xZGRfMEMrX2LxQRpa4cPxs=)
                          2: 4T43FhOUZeaoz59r2LW492M68ig.crl (hash: ZqZVmLPn8crSDGram/Q57udEUBrESkt3mYN8z5bbdME=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4T43FhOUZeaoz59r2LW492M68ig.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 07:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c2:c3:f3:cc:d6:84:21:82:af:16:da:fc:41:a4:f9:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e13e3716139465e6a8cf9f6bd8b5b8f7633af228
        Validity
            Not Before: Sep 21 07:00:16 2026 GMT
            Not After : Sep 22 07:00:16 2026 GMT
        Subject: CN=b8fe6945aa681a4f6753b31eb6c2f07de0169dd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:fd:97:db:a0:eb:d1:b8:b5:1e:23:b5:dd:7d:
                    3d:a2:68:40:65:6e:b8:c9:7f:be:5c:c9:4b:55:87:
                    69:a8:35:77:a2:d5:44:7f:66:d3:11:2e:0a:cf:a2:
                    7b:3d:a7:62:ad:91:49:98:8a:f8:a7:04:0c:2c:ed:
                    64:62:cf:62:f4:7e:ea:38:ec:40:31:aa:90:76:05:
                    d5:32:76:e6:f9:ac:0e:4a:e0:dc:fb:31:b0:5b:ca:
                    43:92:4b:47:f1:ba:4b:4e:b9:92:3a:90:8f:40:ab:
                    dd:3f:06:74:a0:7b:30:f0:ac:8c:29:5e:16:82:b3:
                    34:96:f9:0c:52:16:7e:38:1c:3f:05:52:3f:38:59:
                    5f:ee:4f:fe:e6:e5:28:d2:93:eb:e8:e6:46:dd:18:
                    8b:94:a0:93:22:03:21:6b:b1:97:08:1e:32:98:3d:
                    12:7b:d5:4d:ba:2f:46:c8:43:9c:4f:d3:cc:48:e7:
                    b2:f9:5c:e6:27:56:b7:bd:3f:5f:5e:1c:19:b4:a2:
                    d1:59:f7:f7:c2:a3:49:a7:40:3f:9b:8d:59:22:e1:
                    d3:ae:ca:5e:25:ae:36:1c:51:8d:cc:30:31:0c:80:
                    d2:20:b1:91:5f:6a:c5:80:9c:07:73:6c:86:9e:f7:
                    f5:fb:4d:d9:a7:06:8e:13:53:9d:e3:77:f3:8f:f3:
                    a7:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:FE:69:45:AA:68:1A:4F:67:53:B3:1E:B6:C2:F0:7D:E0:16:9D:D4
            X509v3 Authority Key Identifier:
                keyid:E1:3E:37:16:13:94:65:E6:A8:CF:9F:6B:D8:B5:B8:F7:63:3A:F2:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4T43FhOUZeaoz59r2LW492M68ig.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:64:89:01:27:7e:ed:7a:30:b4:f1:d2:90:a8:a3:24:fa:48:
         fb:de:2e:e6:8f:bc:90:4a:47:09:09:f5:cb:3a:0a:49:01:20:
         ea:dc:fb:d0:f5:a6:4a:06:08:4c:f5:5f:e7:10:70:ba:a9:72:
         e7:79:9d:1a:64:c3:d2:a0:1c:5e:17:4f:c2:c0:70:a6:e9:3b:
         b7:60:11:a8:e5:3d:06:10:7c:bc:88:79:6a:8e:7c:6b:3f:f7:
         27:f8:3f:33:38:d6:0e:d2:2a:9f:7e:56:f3:a5:62:e7:03:35:
         3e:7c:07:70:04:24:1f:77:45:2a:af:3f:d5:a6:cf:14:93:23:
         33:3e:4c:45:75:33:0a:36:36:bb:4b:9d:58:21:c2:ad:4f:fd:
         6d:0b:92:c1:c0:d9:7f:e2:0b:b0:b4:24:02:d3:32:01:1b:31:
         04:55:ec:e7:87:65:cb:b5:96:72:e9:d3:2c:b6:f7:85:4d:19:
         5f:c0:ba:e2:c8:7b:d2:5c:00:f7:54:de:bc:06:6b:bd:6d:4a:
         07:aa:a5:57:ef:58:a6:5a:6b:04:78:0e:9b:c5:fc:21:52:3f:
         25:83:ba:ef:72:64:73:97:c1:95:ab:81:32:4c:17:21:8f:a5:
         f3:f7:da:b9:cb:78:d6:c6:fa:f2:74:d5:9d:d8:f8:00:93:97:
         95:0c:f5:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:18:34 2026 by rpki-client