Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.mft
File:                     Rs_EGkGae71tjoxO5oVZW2pAufE.mft (raw, json)
Hash identifier:          ksiJ2amp+tgFEj9+yy+AgH5sZjndaxSYXl1ZSIBb3ms=
Subject key identifier:   AE:56:AF:07:09:BB:BC:08:D9:14:56:00:02:85:0D:E8:AD:CA:86:E9
Authority key identifier: 46:CF:C4:1A:41:9A:7B:BD:6D:8E:8C:4E:E6:85:59:5B:6A:40:B9:F1
Certificate issuer:       /CN=46cfc41a419a7bbd6d8e8c4ee685595b6a40b9f1
Certificate serial:       01A0C8C69FD19D4C291608F1F154F6398571
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rs_EGkGae71tjoxO5oVZW2pAufE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.mft
Manifest number:          1A67
Signing time:             Tue 22 Sep 2026 11:00:55 +0000
Manifest this update:     Tue 22 Sep 2026 11:00:55 +0000
Manifest next update:     Wed 23 Sep 2026 11:00:55 +0000
Files and hashes:         1: PHd3RlGosSCiiJlgByr5DyGNERo.roa (hash: H4E9jAo8k6ZvIudithlFluMLgtGMVfZdqBunaDN8nQM=)
                          2: Rs_EGkGae71tjoxO5oVZW2pAufE.crl (hash: xYlCVyddtt/1A7601M5Z3HD2dNzsE+iXSzXrDf6oPxk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rs_EGkGae71tjoxO5oVZW2pAufE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 11:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c8:c6:9f:d1:9d:4c:29:16:08:f1:f1:54:f6:39:85:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46cfc41a419a7bbd6d8e8c4ee685595b6a40b9f1
        Validity
            Not Before: Sep 22 11:00:55 2026 GMT
            Not After : Sep 23 11:00:55 2026 GMT
        Subject: CN=ae56af0709bbbc08d914560002850de8adca86e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f9:e5:c0:b7:42:83:0b:88:af:65:7c:58:de:
                    6b:6a:22:a4:b6:d9:b1:5c:2c:98:e6:2f:e6:74:a1:
                    89:20:92:63:f1:67:e1:44:7a:e9:a2:f2:92:37:8e:
                    c8:5c:93:bb:5f:93:4d:82:63:67:2f:31:84:51:2c:
                    84:26:15:eb:d9:75:3f:9a:af:11:25:b5:f9:ea:4f:
                    9f:e8:c4:c3:99:bd:1a:7a:93:6b:b3:12:c5:d0:f9:
                    ef:d3:61:11:77:3a:60:d1:7e:a0:6b:98:5b:26:65:
                    84:12:1c:73:37:3a:b9:8a:33:5d:90:08:cf:cd:23:
                    44:85:fb:85:33:bf:be:08:30:ea:ac:11:95:09:e8:
                    ab:b4:99:b6:d7:64:e4:27:29:06:c1:15:3a:26:4f:
                    08:55:f5:5a:61:d6:9c:27:bb:c3:3e:19:00:9d:66:
                    d7:5b:02:b3:b6:d6:d5:9c:83:21:b8:8b:ad:eb:1f:
                    b7:01:65:dd:bc:c0:93:97:a9:e0:ba:82:f6:68:4d:
                    c1:1a:95:50:70:64:84:47:33:07:2e:b9:5d:71:f2:
                    58:88:2e:2f:12:b9:3c:e8:d1:2a:ae:96:60:19:da:
                    2e:c1:79:99:af:77:cb:e5:00:1a:56:65:c7:25:d6:
                    aa:b5:57:f2:f1:51:11:92:9d:b7:77:e5:51:9e:ad:
                    90:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:56:AF:07:09:BB:BC:08:D9:14:56:00:02:85:0D:E8:AD:CA:86:E9
            X509v3 Authority Key Identifier:
                keyid:46:CF:C4:1A:41:9A:7B:BD:6D:8E:8C:4E:E6:85:59:5B:6A:40:B9:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rs_EGkGae71tjoxO5oVZW2pAufE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:39:70:e8:f9:58:ca:cd:d0:24:ec:ee:03:00:19:31:50:ff:
         a0:26:2c:30:0e:23:e3:ac:5e:73:a9:0c:f3:0f:bc:31:3d:d9:
         b1:4f:19:9c:32:56:63:84:85:73:e8:fc:7f:cc:eb:30:57:b0:
         f9:3a:4f:52:99:05:6c:ff:f2:ab:e7:c5:3e:78:17:9b:2e:06:
         19:95:e6:61:a1:bf:d1:dc:ca:2e:64:5a:9e:61:28:f3:f5:6c:
         61:a5:d7:be:32:ae:02:6b:f2:42:ce:09:5e:74:82:e0:2a:5d:
         ba:a0:92:f0:75:4d:3b:04:44:82:a2:6b:10:e0:2d:e1:9d:3d:
         a6:de:b7:f4:46:11:32:b6:16:04:89:2b:ce:a4:28:cb:70:b8:
         0e:c6:ca:de:0f:4c:e7:d7:4c:28:e6:52:cf:77:6a:30:95:9b:
         a5:3f:b8:67:81:8a:dd:d1:57:31:78:e7:63:8c:e3:dd:41:7a:
         10:70:a2:26:0d:6e:19:d2:20:3d:08:cf:aa:85:b2:b1:04:cf:
         74:46:c3:ca:10:a2:2d:ab:2d:e8:3e:a4:09:83:76:4f:b6:f2:
         24:fd:77:ba:28:16:4e:ac:60:db:e8:36:68:b1:0d:5b:88:67:
         c5:23:48:fa:aa:e2:49:f9:0f:e1:77:e6:f3:96:8c:5c:d2:87:
         66:e0:fe:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:21:48 2026 by rpki-client