Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.mft
File:                     4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.mft (raw, json)
Hash identifier:          bdeMom4viBWKN13KuVupxgQZNPQDWKHzb7buDXOvKwA=
Subject key identifier:   F5:A2:26:35:4E:37:BC:1E:4B:B7:6C:E9:C3:FF:6D:91:CA:FE:74:D3
Authority key identifier: E0:89:45:D1:FC:7B:47:0E:68:73:65:5F:75:59:30:0E:09:7A:65:E8
Certificate issuer:       /CN=e08945d1fc7b470e6873655f7559300e097a65e8
Certificate serial:       01A0C22017B8832525C949F4C76A458B2A15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.mft
Manifest number:          1A67
Signing time:             Mon 21 Sep 2026 04:01:18 +0000
Manifest this update:     Mon 21 Sep 2026 04:01:18 +0000
Manifest next update:     Tue 22 Sep 2026 04:01:18 +0000
Files and hashes:         1: 4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.crl (hash: arg/u+3GEcIBO0sUykZNwf/0mOB5aZf4ANj+btk3gW4=)
                          2: Tixj9aaXyoxnN9Im74ziDdIZ_Zo.roa (hash: a1BJKfn6mW/dx8FDsu8a6wmd/TNTkHkzXAOJRfIddFg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c2:20:17:b8:83:25:25:c9:49:f4:c7:6a:45:8b:2a:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e08945d1fc7b470e6873655f7559300e097a65e8
        Validity
            Not Before: Sep 21 04:01:18 2026 GMT
            Not After : Sep 22 04:01:18 2026 GMT
        Subject: CN=f5a226354e37bc1e4bb76ce9c3ff6d91cafe74d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b9:9a:c4:67:e4:22:90:66:9f:32:82:51:99:
                    ac:9e:79:57:df:16:dd:07:e1:b3:df:07:f5:4c:6a:
                    fb:a7:16:4d:0f:9b:11:0b:dc:e5:16:69:fb:8d:e6:
                    07:e4:30:ce:80:16:86:73:5e:bc:55:16:e4:8d:5f:
                    b5:c5:f3:7a:ac:4a:91:a3:ac:88:70:f2:a0:f9:15:
                    60:45:89:d3:6d:64:1e:63:62:47:38:ba:84:ff:3e:
                    8d:49:30:da:4b:70:52:e0:cb:3d:11:b8:4d:89:df:
                    b0:52:5b:a9:2e:c5:83:34:ad:aa:f8:4e:8f:bd:33:
                    48:ee:91:a6:a9:50:c4:fa:b6:04:fd:70:0b:2f:a9:
                    62:d9:c8:74:29:91:3c:8f:e1:76:0d:97:1f:d1:ae:
                    88:33:34:e7:27:eb:c0:90:fd:ab:2b:30:bb:a4:28:
                    2f:d6:6a:55:97:5a:67:66:0a:8d:68:ff:15:45:95:
                    b4:dc:7c:df:f9:e8:86:22:e2:6c:0c:17:f8:4f:5d:
                    0f:76:7b:7d:d7:dc:ea:d7:f0:e9:53:13:47:d1:2e:
                    2d:e1:f9:e2:96:e7:64:54:4f:94:8e:55:b1:5c:46:
                    f3:89:f2:1e:72:61:8d:7f:7f:1d:66:09:1b:dc:dc:
                    28:79:c6:99:3a:4b:16:68:13:e6:83:5f:67:47:d6:
                    b7:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:A2:26:35:4E:37:BC:1E:4B:B7:6C:E9:C3:FF:6D:91:CA:FE:74:D3
            X509v3 Authority Key Identifier:
                keyid:E0:89:45:D1:FC:7B:47:0E:68:73:65:5F:75:59:30:0E:09:7A:65:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:a1:ed:6b:ba:45:ff:36:de:95:b7:31:b6:83:5f:88:66:93:
         06:ae:7c:22:b4:f0:72:f6:46:67:05:7c:c6:f4:86:4c:46:8c:
         ba:19:c3:2b:0c:01:ea:a1:b0:24:f8:82:56:14:a6:f0:92:e5:
         da:d2:f6:84:96:e1:7d:bb:02:85:8b:f1:47:45:3c:33:54:ae:
         79:89:9f:48:50:54:40:02:1c:46:4a:da:c1:f0:85:8c:ea:ae:
         79:e5:ee:b1:0b:a7:ba:83:53:72:a2:a2:8f:de:a7:dc:7c:82:
         2f:2c:7b:c0:1e:0d:85:2f:36:00:87:79:96:b4:bd:a6:6c:6d:
         e8:a7:f6:95:4d:84:8f:5d:48:97:b2:95:73:7a:2e:e3:01:72:
         62:a8:c5:36:72:0a:4f:1c:78:1f:1b:ff:fe:2a:f5:48:10:49:
         7a:9d:a6:13:3a:73:c8:a6:ba:af:d5:86:a7:f2:81:86:10:7c:
         b5:e9:da:de:48:03:a2:8a:40:f2:3b:c7:41:30:51:90:69:02:
         73:b9:17:54:de:e6:6a:c1:4b:18:26:89:8c:23:7b:92:dc:b1:
         af:c2:c2:d7:26:7e:43:1e:98:a0:de:f3:53:ef:17:3c:57:b6:
         38:fe:a2:4f:7a:23:2d:69:63:0b:56:12:29:75:fe:bb:93:8c:
         14:92:c4:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:05:14 2026 by rpki-client