Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft
File:                     NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft (raw, json)
Hash identifier:          2KhCEGrcutt12fcSiujcLAGaAqqD1wUigPfuArZyy6Q=
Subject key identifier:   F3:34:EA:B1:51:78:68:77:40:A9:4E:73:C9:85:B7:89:E8:2A:EA:40
Authority key identifier: 36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
Certificate issuer:       /CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Certificate serial:       01A0BE0BFE18B1439429640884A039CED220
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft
Manifest number:          0F19
Signing time:             Sun 20 Sep 2026 09:00:51 +0000
Manifest this update:     Sun 20 Sep 2026 09:00:51 +0000
Manifest next update:     Mon 21 Sep 2026 09:00:51 +0000
Files and hashes:         1: 1SSyQfD3O61r-0_FItqO3lw_MmA.roa (hash: RJ3ZJVTKNWpK9z9PjQZWQb60GRcUi85TrZFBl50s/Uk=)
                          2: 6q9b7__sRMAQ5H8wPNM1-5Wj1MY.roa (hash: uJr3m+RiKwnu4afLEWC3I0AkuNJJG/6oHjgue62qkmQ=)
                          3: KAltvpawgV1iJ0fnMCKzK8M-ZcM.roa (hash: DswvHDX2EO0fYrl9sOT/kMzodvF3kQoGV1M9SIEp3Mo=)
                          4: NhKIuR4OHdWiG8iLKoNcTUDlNf4.roa (hash: Ud86cYDDc2XR7qnnT5IZpUuQFid4fW0m2q3yiK3R9Lw=)
                          5: NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl (hash: x1YbR5LVauQetzRsc6qjYgdUVW049Y5jzPMBgd5rfvM=)
                          6: TgXiy8xa5uMmYmW-gKUlnQMNHLI.roa (hash: 0EWgGceKXhp29ZiS1UwiHFdZA70DW8sVoZiU+6O5Idw=)
                          7: WaZa3O1op2Py8EHD9_ozXMS93qM.roa (hash: 8FtaOWgJoh3KpqD4c4HC6dKZYcGZBruTB4MZGeeqiVQ=)
                          8: bhIBklZheMq-9tZpH7RtF8qmQRk.roa (hash: N9DLacCSl3KtCFUJLw6tdIHFf2BMAbo1XMXGyOGBM5Q=)
                          9: tPs5y50TL-Gaj8ccNAGqlv7gruY.roa (hash: yIDSmikGAGxtPGWmqnkdb5gGbPGe9+DVmGSD7UkZfDg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 09:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:be:0b:fe:18:b1:43:94:29:64:08:84:a0:39:ce:d2:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
        Validity
            Not Before: Sep 20 09:00:51 2026 GMT
            Not After : Sep 21 09:00:51 2026 GMT
        Subject: CN=f334eab15178687740a94e73c985b789e82aea40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:84:1d:b4:3b:95:b3:26:d1:66:71:53:eb:e4:
                    5e:ac:04:71:39:24:21:9f:e7:0f:46:dc:19:f2:b8:
                    e9:55:b8:e5:41:80:19:41:c1:0b:19:db:54:c9:f1:
                    5c:b3:f6:fe:2d:0e:ba:0c:8b:78:0b:39:dc:bd:01:
                    5e:48:15:3a:5d:dd:fe:7f:a1:66:3e:8a:a2:d4:e1:
                    75:09:2d:c2:5c:e5:6c:f0:1f:cc:ce:03:5d:51:4e:
                    70:3d:be:01:2c:30:ea:99:91:85:2d:68:a0:cd:ce:
                    98:2f:db:2e:40:b9:47:13:f6:c0:b5:0d:74:e7:c7:
                    b2:91:da:cf:1a:08:b2:dd:c1:8e:12:5a:c9:0f:ed:
                    7e:e8:51:b3:ce:ca:33:0c:8e:cb:80:bd:c9:34:c3:
                    30:6d:6e:3b:ce:ee:49:f8:a3:e6:1c:8d:e2:50:1f:
                    6c:af:36:22:59:66:66:cf:91:0b:b3:8f:9a:4b:71:
                    04:9c:fd:62:01:85:2f:0c:d4:e0:1c:1b:f6:e9:2d:
                    88:1d:d2:d1:63:a9:13:40:4d:7c:31:11:4c:28:1e:
                    bb:2c:b6:75:e4:b3:74:f5:12:e2:25:d2:6d:54:31:
                    dd:dd:50:37:8d:e9:0a:1b:06:ef:ce:c2:81:11:f4:
                    44:6b:b1:fb:84:58:d4:e4:fe:a5:e1:9e:53:0a:1b:
                    82:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:34:EA:B1:51:78:68:77:40:A9:4E:73:C9:85:B7:89:E8:2A:EA:40
            X509v3 Authority Key Identifier:
                keyid:36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:b2:6f:fd:2e:a4:d9:ee:18:91:79:6e:05:34:45:b8:4c:3d:
         be:67:ca:cf:1b:7a:6b:05:cb:00:d1:3a:1c:a3:e9:53:7c:61:
         94:dc:fd:a5:3b:45:43:c0:5c:aa:89:9a:6b:bd:c5:67:cb:97:
         e6:ab:02:85:b0:27:3a:9b:43:fa:e7:5d:89:2f:1f:93:5a:d7:
         cc:b7:14:74:17:21:0c:e2:bb:9c:9e:d9:55:61:47:6f:ec:3d:
         13:53:a2:67:e9:5e:f6:14:ce:a9:65:06:5c:e8:96:d7:f3:0f:
         b3:a1:06:d1:b7:19:39:c7:1b:44:72:dc:c5:a0:38:3e:63:83:
         45:b7:74:d8:24:f9:af:24:66:b4:98:a4:7c:cb:36:d7:30:ea:
         f2:ed:b6:97:15:71:fb:a6:2f:e4:84:85:34:5a:26:ea:cd:be:
         89:92:09:e8:70:8f:dd:91:c3:8b:fb:ec:3e:05:35:ef:20:9d:
         ac:e6:b6:a2:b9:70:ca:de:5d:e9:28:bd:7a:c5:6e:ce:81:74:
         52:7e:f4:a4:ff:48:77:32:4e:a3:ee:15:31:a5:c4:7a:2f:5f:
         0a:be:87:90:7f:71:41:13:87:74:e4:d1:81:56:7d:9c:54:1a:
         88:56:3c:2d:1d:cb:f5:2d:2b:b2:74:0d:2d:48:3c:51:98:7f:
         58:8e:13:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 17:42:28 2026 by rpki-client