Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/rpPMjMqB-gDcU-e4B46RtcEbou8.mft
File:                     rpPMjMqB-gDcU-e4B46RtcEbou8.mft (raw, json)
Hash identifier:          Pd4PzaP190dZ8Nj/hbfxTZa23AVeiJnbGoH+MXHqbtg=
Subject key identifier:   75:0D:BB:46:21:72:34:A8:F8:41:AC:B9:C6:A2:54:43:3E:85:AF:FA
Authority key identifier: AE:93:CC:8C:CA:81:FA:00:DC:53:E7:B8:07:8E:91:B5:C1:1B:A2:EF
Certificate issuer:       /CN=ae93cc8cca81fa00dc53e7b8078e91b5c11ba2ef
Certificate serial:       01A0E13CF2E95417B7DC86CE1569DD66D9CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rpPMjMqB-gDcU-e4B46RtcEbou8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/rpPMjMqB-gDcU-e4B46RtcEbou8.mft
Manifest number:          157D
Signing time:             Sun 27 Sep 2026 05:01:02 +0000
Manifest this update:     Sun 27 Sep 2026 05:01:02 +0000
Manifest next update:     Mon 28 Sep 2026 05:01:02 +0000
Files and hashes:         1: YinM9FZ7tYvDuQZElbcHdEksbHw.roa (hash: 8pZ2RgiQMW7t4pyoRKcJqD0BNRo6lf7CbatwYv4YjtM=)
                          2: rpPMjMqB-gDcU-e4B46RtcEbou8.crl (hash: 1y3bBIUfXLIp41yvVLPVd+J4w2MQjQ43d+JaIITLBhY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/rpPMjMqB-gDcU-e4B46RtcEbou8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/rpPMjMqB-gDcU-e4B46RtcEbou8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rpPMjMqB-gDcU-e4B46RtcEbou8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 04:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e1:3c:f2:e9:54:17:b7:dc:86:ce:15:69:dd:66:d9:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae93cc8cca81fa00dc53e7b8078e91b5c11ba2ef
        Validity
            Not Before: Sep 27 05:01:02 2026 GMT
            Not After : Sep 28 05:01:02 2026 GMT
        Subject: CN=750dbb46217234a8f841acb9c6a254433e85affa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:5a:a3:1a:a4:40:19:aa:93:70:4e:ea:9a:69:
                    4d:42:a8:ad:78:db:69:06:90:dc:ca:6c:3f:52:f5:
                    9e:0e:0d:1b:8c:bc:1c:ea:57:33:70:14:05:b6:07:
                    bf:8e:e7:9b:0c:3f:48:a6:b0:a0:29:5e:fc:a7:7f:
                    51:a3:9d:b6:b0:3a:ae:c7:77:b0:1f:a6:1b:f0:7e:
                    1c:3c:0a:d5:98:8f:14:02:ea:c0:46:ce:ee:76:98:
                    a6:e6:1e:6e:8e:73:ce:ff:f9:f4:78:fa:cc:10:0c:
                    08:89:72:89:86:ea:47:62:56:dd:b7:c4:f9:da:f6:
                    2a:cf:32:f1:2b:fa:7c:42:10:e2:0b:97:08:d9:0f:
                    49:cd:e0:cc:2c:d9:f6:43:4e:da:32:bf:56:80:88:
                    b9:ca:de:95:90:12:8d:70:b1:14:05:ac:1a:cb:ac:
                    e5:1e:d4:45:4c:d8:19:e3:0e:a2:e2:35:7e:e6:cd:
                    86:36:5b:77:26:dd:8a:9f:01:cc:5f:46:0c:39:9a:
                    6a:5f:4b:fd:83:89:a2:ea:64:67:d8:99:19:a8:40:
                    8a:a8:92:08:bf:26:45:f3:e6:87:7b:24:8b:a4:e3:
                    82:81:87:e9:1f:6a:f7:6b:28:ab:f7:ac:41:54:91:
                    5b:5e:95:3b:47:76:f7:ae:cd:e3:fb:c8:81:f6:76:
                    f4:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:0D:BB:46:21:72:34:A8:F8:41:AC:B9:C6:A2:54:43:3E:85:AF:FA
            X509v3 Authority Key Identifier:
                keyid:AE:93:CC:8C:CA:81:FA:00:DC:53:E7:B8:07:8E:91:B5:C1:1B:A2:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rpPMjMqB-gDcU-e4B46RtcEbou8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/rpPMjMqB-gDcU-e4B46RtcEbou8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/rpPMjMqB-gDcU-e4B46RtcEbou8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:83:23:66:4b:60:f5:04:ea:9f:30:9b:4c:77:6f:36:cd:b1:
         98:45:a2:78:fe:e4:74:1a:e4:29:44:d1:76:f4:f8:f8:32:07:
         1f:d0:69:c6:7f:6f:d8:c4:e5:8e:fc:57:21:75:0f:ed:89:42:
         8f:d2:e4:0b:1f:c7:91:d7:00:42:82:97:2b:f2:d0:f5:65:c8:
         04:a3:bd:7d:3e:b8:21:24:63:d5:18:02:b8:ca:1c:fd:7f:2e:
         ff:2c:5d:45:98:d6:15:84:b8:50:85:c3:c8:f7:24:a5:44:24:
         f8:66:d0:02:9b:10:1e:4e:27:1a:12:58:53:bb:1c:6d:f6:ac:
         97:df:b3:75:30:19:18:49:93:28:b4:24:01:8a:ea:f4:26:2a:
         65:e9:ee:7b:be:91:ff:59:7a:65:fe:15:f4:d9:a7:4e:86:a7:
         35:e4:d9:5f:85:91:d7:fc:5f:e6:b0:fc:d1:49:cb:35:64:ad:
         1a:a5:62:e3:6c:04:3c:ac:e4:c6:55:3b:a0:f0:f7:0a:99:d9:
         e3:96:88:b4:19:6b:34:54:1c:18:c9:a8:74:3b:02:4e:05:ce:
         37:f8:84:94:05:10:aa:d8:7a:fc:02:2d:0d:c0:29:cc:26:e7:
         d0:a9:f4:b2:42:d4:6b:d3:ef:4b:97:b1:c6:d4:00:0f:9e:69:
         c0:f9:7f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:22:47 2026 by rpki-client