Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/ce838a-d1d5-4707-821e-29c473386a90/1/RHV8jQr1Y0rhQTfVIUAKL6yWKi4.mft
File:                     RHV8jQr1Y0rhQTfVIUAKL6yWKi4.mft (raw, json)
Hash identifier:          mQrg/Csz1VNB8a1Q+5WO/bJVeJjN0CsFo3ErX4FKH8Y=
Subject key identifier:   88:79:D8:A1:40:A8:2D:67:A5:73:B0:1E:84:58:BA:70:D8:CA:7C:5C
Authority key identifier: 44:75:7C:8D:0A:F5:63:4A:E1:41:37:D5:21:40:0A:2F:AC:96:2A:2E
Certificate issuer:       /CN=44757c8d0af5634ae14137d521400a2fac962a2e
Certificate serial:       01A0E51A362BCF8B70B19361CD7BA9AAFC41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RHV8jQr1Y0rhQTfVIUAKL6yWKi4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/ce838a-d1d5-4707-821e-29c473386a90/1/RHV8jQr1Y0rhQTfVIUAKL6yWKi4.mft
Manifest number:          0B
Signing time:             Sun 27 Sep 2026 23:01:35 +0000
Manifest this update:     Sun 27 Sep 2026 23:01:35 +0000
Manifest next update:     Mon 28 Sep 2026 23:01:35 +0000
Files and hashes:         1: G4UKp7_RGWS2eYNH1DVAyjr8YBM.roa (hash: r3jrCU9hKuBbcVfgFcmR3GrcrKrdMbHwwMc4+q5VzlE=)
                          2: RHV8jQr1Y0rhQTfVIUAKL6yWKi4.crl (hash: VJVvkAzCxKSCoFa2l9XxUdifgKjjICfpER09Jw9JqMk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/ce838a-d1d5-4707-821e-29c473386a90/1/RHV8jQr1Y0rhQTfVIUAKL6yWKi4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/ce838a-d1d5-4707-821e-29c473386a90/1/RHV8jQr1Y0rhQTfVIUAKL6yWKi4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RHV8jQr1Y0rhQTfVIUAKL6yWKi4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 19:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e5:1a:36:2b:cf:8b:70:b1:93:61:cd:7b:a9:aa:fc:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44757c8d0af5634ae14137d521400a2fac962a2e
        Validity
            Not Before: Sep 27 23:01:35 2026 GMT
            Not After : Sep 28 23:01:35 2026 GMT
        Subject: CN=8879d8a140a82d67a573b01e8458ba70d8ca7c5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:4d:7a:88:40:5e:28:93:53:a8:b5:3b:03:9f:
                    ad:15:5d:3f:dd:95:ee:d3:3a:8d:2a:be:dd:8d:b9:
                    30:12:84:99:83:34:01:f4:59:e7:4f:54:1f:a0:35:
                    89:be:e3:b1:e9:ed:b1:4b:2c:a2:0b:06:8f:b5:bb:
                    e1:be:ac:8a:c2:ce:75:66:a3:3a:16:86:b1:54:87:
                    b3:ee:8c:eb:d4:fb:91:91:90:94:45:55:7a:57:0d:
                    ba:bd:15:6c:49:9f:c0:51:55:05:6c:73:83:59:5e:
                    bb:96:3b:1e:36:ac:15:08:3e:15:5e:75:19:9c:b3:
                    7e:aa:cb:bc:8d:0d:29:ea:d3:ff:59:4f:2d:d1:c6:
                    91:9b:a2:a3:90:c3:76:08:c6:63:de:26:be:44:3e:
                    55:b3:8e:bc:d2:fe:82:cf:3e:8c:aa:78:03:bf:0f:
                    82:82:7f:cf:f2:d4:c3:93:6a:c1:7c:7e:13:8e:3e:
                    fc:04:73:f0:bf:de:9d:a9:4f:2e:da:86:21:de:fd:
                    30:a8:fa:32:8e:e6:d0:1b:e7:b6:aa:d2:a3:6b:46:
                    64:c0:23:2b:cb:e5:1d:ac:ca:5b:49:e4:1f:5c:93:
                    73:57:70:87:f6:bf:e0:f0:86:49:ba:30:2d:12:c0:
                    b1:70:32:09:46:04:08:fe:eb:94:ea:09:8a:fd:6b:
                    f7:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:79:D8:A1:40:A8:2D:67:A5:73:B0:1E:84:58:BA:70:D8:CA:7C:5C
            X509v3 Authority Key Identifier:
                keyid:44:75:7C:8D:0A:F5:63:4A:E1:41:37:D5:21:40:0A:2F:AC:96:2A:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHV8jQr1Y0rhQTfVIUAKL6yWKi4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ce838a-d1d5-4707-821e-29c473386a90/1/RHV8jQr1Y0rhQTfVIUAKL6yWKi4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ce838a-d1d5-4707-821e-29c473386a90/1/RHV8jQr1Y0rhQTfVIUAKL6yWKi4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:a9:86:48:d4:b7:98:94:43:53:de:8d:6b:c4:de:5e:a0:5c:
         67:75:b0:04:ae:87:11:7b:9c:61:c2:62:ea:1e:98:98:1d:f6:
         3b:a0:4c:9b:b0:8b:f6:da:c0:8c:4d:04:8d:95:3b:d7:f3:05:
         49:6c:f6:ba:0c:14:25:25:9c:d4:dc:d8:22:79:45:e3:c6:f3:
         75:8b:fd:cd:84:87:27:13:35:0d:ae:8a:fa:ef:70:30:18:87:
         c9:0c:81:a7:be:58:b7:3c:bb:6f:d2:03:2c:2d:28:2d:fb:6d:
         4e:8b:23:38:08:1d:e3:ad:3c:1b:c5:5b:4d:7a:55:fa:0d:2b:
         2d:8d:95:2e:f5:ce:eb:5e:0d:e8:09:7d:ce:b7:35:22:97:50:
         e5:07:31:5a:6b:91:c2:a4:06:27:bc:d8:79:4a:5f:fc:d7:ce:
         62:a0:4f:63:b7:03:4d:08:2c:e1:9d:06:73:d7:9b:dc:40:cb:
         00:6b:88:6b:95:97:54:9e:10:b4:c1:17:18:cf:62:17:05:8e:
         fb:c2:56:aa:f6:2e:81:59:c5:ca:b5:57:73:cf:f5:d4:7b:d4:
         c2:6b:a9:15:bd:d7:45:5b:94:ec:d0:dd:e4:da:0f:4e:26:e7:
         04:09:38:e7:bb:c6:d2:f7:c1:75:19:0f:62:8b:bb:bf:0e:1c:
         cd:8d:b3:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 06:56:37 2026 by rpki-client