Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft
File:                     RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft (raw, json)
Hash identifier:          4qSWHztk/rqHDo1wXi9s9R8cezh7kkwYsWxmAiVRdyc=
Subject key identifier:   94:1F:FA:5B:93:A7:8A:D6:82:5C:DC:69:4D:10:0E:9E:DE:02:99:D1
Authority key identifier: 46:12:58:F5:E3:B6:B9:4E:39:16:DD:2B:5D:16:E3:42:FD:60:59:66
Certificate issuer:       /CN=461258f5e3b6b94e3916dd2b5d16e342fd605966
Certificate serial:       01A0D5700D0D5D048220531851AEFE3C9180
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RhJY9eO2uU45Ft0rXRbjQv1gWWY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft
Manifest number:          19B6
Signing time:             Thu 24 Sep 2026 22:01:25 +0000
Manifest this update:     Thu 24 Sep 2026 22:01:25 +0000
Manifest next update:     Fri 25 Sep 2026 22:01:25 +0000
Files and hashes:         1: RhJY9eO2uU45Ft0rXRbjQv1gWWY.crl (hash: uuXjFcMLO8vyVTCn+fdIPG8AKRCjOpH5v79RrTLkivE=)
                          2: cyldzaN5uMb66fkP-hiffFjw-IE.roa (hash: Gj1kHwBLzSGp/dgWtzh7IJONH/VWApAr2xjaYZ7+1iY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RhJY9eO2uU45Ft0rXRbjQv1gWWY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d5:70:0d:0d:5d:04:82:20:53:18:51:ae:fe:3c:91:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=461258f5e3b6b94e3916dd2b5d16e342fd605966
        Validity
            Not Before: Sep 24 22:01:25 2026 GMT
            Not After : Sep 25 22:01:25 2026 GMT
        Subject: CN=941ffa5b93a78ad6825cdc694d100e9ede0299d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f3:b0:63:f4:2f:45:40:5f:1a:90:35:d6:e3:
                    7d:13:69:7d:d9:57:c7:7b:73:91:9e:55:b5:4e:f4:
                    af:df:3c:68:1c:11:20:2f:94:72:23:84:9b:2a:67:
                    37:ae:77:52:f8:28:a8:0c:fe:a6:4b:2c:38:15:e1:
                    81:3b:1e:5c:8b:64:43:c4:40:bf:3c:01:58:5a:51:
                    b3:17:da:ca:bb:00:53:64:62:51:40:1d:1f:e3:1d:
                    44:1b:cf:f0:eb:3e:63:17:ca:5c:14:aa:d4:aa:4f:
                    73:ab:ad:bd:09:71:d5:a2:68:48:1f:0e:52:f7:ea:
                    3e:7f:34:5a:d8:7c:2a:83:3c:db:61:fe:fe:1f:89:
                    be:8d:fb:1c:a0:75:57:18:cc:81:98:84:2b:b5:44:
                    b7:e3:4a:28:06:c9:07:2a:ff:47:af:b6:ab:e7:aa:
                    49:d3:fe:9c:ab:54:11:31:a8:92:f8:82:9e:d0:d7:
                    d4:69:f1:3f:33:ce:ca:4a:a8:19:0a:9f:e9:e8:01:
                    e9:cc:46:e0:6b:92:bb:ab:9e:84:86:77:7f:41:88:
                    59:1a:68:ef:58:aa:fa:2c:4b:64:b9:be:af:6b:35:
                    aa:62:c7:a9:ff:78:f2:f6:e7:60:78:8a:0e:1f:8b:
                    74:c1:35:0e:1b:11:49:6e:b1:28:c4:53:a7:9a:35:
                    f2:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:1F:FA:5B:93:A7:8A:D6:82:5C:DC:69:4D:10:0E:9E:DE:02:99:D1
            X509v3 Authority Key Identifier:
                keyid:46:12:58:F5:E3:B6:B9:4E:39:16:DD:2B:5D:16:E3:42:FD:60:59:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RhJY9eO2uU45Ft0rXRbjQv1gWWY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:be:f1:9d:e6:f9:ab:0a:f4:bf:de:86:0e:45:60:32:a3:42:
         52:bd:07:3e:60:0e:95:d2:a0:63:a7:67:ee:31:a0:c2:6f:75:
         c5:76:ec:7a:91:00:0c:33:cc:c4:25:ff:2b:44:d3:c8:01:da:
         ed:a3:85:30:7c:53:1a:d5:6c:fb:ed:82:f2:a4:ab:49:c5:26:
         34:7f:08:c2:06:f1:8d:5a:1f:0c:0f:d2:c1:f1:58:e9:ab:55:
         49:81:e4:27:58:af:87:ec:e7:f0:9e:48:14:f5:52:35:06:29:
         d6:37:b1:5b:2e:89:98:cc:5f:9b:ca:87:f5:bd:43:f5:55:40:
         d0:da:cb:62:59:db:e6:d2:70:9c:83:3a:16:34:99:30:ea:80:
         a4:73:16:c4:fe:a2:fc:6a:30:93:ad:a1:79:e3:6b:dd:ac:40:
         c7:74:da:39:ef:d7:2e:2e:15:28:4d:79:4f:2b:27:83:3a:fe:
         5a:b8:4c:64:a1:e8:65:60:98:a4:f9:2a:41:a2:44:5a:d0:5a:
         db:82:e4:2d:84:7f:ca:d5:ea:fb:3e:cb:85:42:28:3c:cf:d2:
         42:4e:4f:ba:9b:ba:0a:32:f4:fe:db:8a:e2:3e:53:35:92:57:
         0b:d3:a5:f2:df:94:1b:8a:96:96:43:4f:97:49:76:59:2b:4a:
         b9:8a:11:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 01:51:38 2026 by rpki-client