Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.mft
File:                     l4kxgrFnGJg7wAjI0If43co9hhQ.mft (raw, json)
Hash identifier:          rSPlOajlpPfEOdfYredRHYWGsfS7bmxweE6XIhjdGpA=
Subject key identifier:   3C:4B:3D:30:B4:A8:DD:61:4C:E8:64:8B:A4:21:E0:ED:45:80:AC:D5
Authority key identifier: 97:89:31:82:B1:67:18:98:3B:C0:08:C8:D0:87:F8:DD:CA:3D:86:14
Certificate issuer:       /CN=97893182b16718983bc008c8d087f8ddca3d8614
Certificate serial:       01A1114E1530DC833524CD9FA6D053A8D810
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l4kxgrFnGJg7wAjI0If43co9hhQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.mft
Manifest number:          1A90
Signing time:             Tue 06 Oct 2026 13:01:32 +0000
Manifest this update:     Tue 06 Oct 2026 13:01:32 +0000
Manifest next update:     Wed 07 Oct 2026 13:01:32 +0000
Files and hashes:         1: 1-AA_Ym6EX8oobe6NeXk7HWy7rN8.roa (hash: 5t3UXfHRI3FdEzMfG7EasqVmyGfPVOTBzPUk3KiG+pQ=)
                          2: 4I6IeKRFTHTfCk6P0VsgUhk8zic.roa (hash: 0XVLTIXxWYyeiCe3iIXGikBSA8t/yImgovN3r1Pbd5A=)
                          3: Br6fq_1p0sOiKlI1DRwR_EbfW2E.roa (hash: WR8ZmHp+6ZanBZA6Ty89Up4dRZVpCdfJ23KhCqCS8TI=)
                          4: PT_eHk2Dy_Wh2XHSZ-ZM2UoqOTc.roa (hash: /7aQ7+RwkclmuJNtVK87g/73oEQXo6yAkx6IMmNGLuU=)
                          5: hjLY93sTfKVGtH04a9-qkylCHmE.roa (hash: /mrPE+eKM9yKGu2TBD1xblJ2DuTRrBr+lNyxB56PAiE=)
                          6: l4kxgrFnGJg7wAjI0If43co9hhQ.crl (hash: 0lgAU0GaQlhTZ3PsZjafouSSwdClFu6Ocq7r3pWF9OU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l4kxgrFnGJg7wAjI0If43co9hhQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Oct 2026 13:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:11:4e:15:30:dc:83:35:24:cd:9f:a6:d0:53:a8:d8:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97893182b16718983bc008c8d087f8ddca3d8614
        Validity
            Not Before: Oct  6 13:01:32 2026 GMT
            Not After : Oct  7 13:01:32 2026 GMT
        Subject: CN=3c4b3d30b4a8dd614ce8648ba421e0ed4580acd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:b8:0d:9d:41:0f:eb:45:20:0b:63:1e:7c:21:
                    39:85:a5:d6:2b:a2:18:bd:8f:ea:78:89:f1:fc:fe:
                    e4:9e:aa:a7:10:89:5d:97:11:cb:c8:cb:14:b0:6b:
                    a6:1a:26:c1:18:1b:e3:76:20:2c:0b:14:5d:40:76:
                    a3:f7:44:75:7a:a6:d5:8e:7d:b2:a8:03:c7:be:58:
                    21:8d:45:47:61:6b:df:ae:c9:83:5b:37:39:46:61:
                    dd:d6:bd:25:b9:8d:39:7f:9b:3d:23:8c:25:82:03:
                    c7:e3:42:a5:d9:50:4c:b0:0f:62:dd:1c:c5:ec:0e:
                    54:da:c0:aa:24:37:8c:4f:c8:41:89:02:e1:62:2f:
                    51:82:18:2e:b3:01:2a:7f:7e:41:a8:2b:df:b2:7c:
                    c2:58:74:dc:ce:8e:fc:55:4c:e2:0b:39:81:f0:f9:
                    e5:87:68:ef:3b:f3:5b:9e:10:2f:e3:1c:66:c9:4e:
                    14:02:84:40:5c:fa:be:22:92:ab:9e:bd:ed:dc:33:
                    25:78:dd:0a:a7:32:ab:fc:86:5d:7f:11:42:4e:8d:
                    4b:60:b7:6d:74:5f:01:4e:70:38:27:97:c4:36:96:
                    c1:3b:ff:96:4a:d7:00:14:11:c1:83:e0:c5:88:fd:
                    b1:8c:32:39:05:00:92:e0:de:71:e4:7e:da:50:12:
                    61:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:4B:3D:30:B4:A8:DD:61:4C:E8:64:8B:A4:21:E0:ED:45:80:AC:D5
            X509v3 Authority Key Identifier:
                keyid:97:89:31:82:B1:67:18:98:3B:C0:08:C8:D0:87:F8:DD:CA:3D:86:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4kxgrFnGJg7wAjI0If43co9hhQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:c5:b6:cb:03:06:95:8b:ba:ce:64:57:a9:0a:f0:ad:ac:0a:
         8d:af:3b:54:0d:10:08:d6:de:b8:4a:bc:0f:e6:43:14:dc:b0:
         17:d9:46:48:46:3f:d3:95:f3:41:0d:f0:06:8a:b4:b9:22:dc:
         fc:da:71:5e:c7:fd:ac:b7:f6:1a:0d:2c:d1:9d:8e:af:86:08:
         a5:05:b4:af:80:81:7e:8e:cd:49:62:7c:25:97:9e:93:5a:fd:
         a1:64:17:d3:dd:e5:8d:15:7b:98:ab:a2:ef:0d:f0:5f:51:14:
         d6:69:ef:71:28:23:7f:04:7a:4e:70:87:9b:f5:9d:0c:04:35:
         94:9d:28:6c:a3:25:27:5c:f0:06:d8:9d:f8:85:1f:94:c9:9c:
         12:d3:8c:03:bb:6c:cc:6d:8f:0a:f6:aa:f9:fc:11:8d:a5:aa:
         c2:f4:15:2d:59:9b:3c:78:a7:e7:fe:a6:f5:48:1c:a0:02:c8:
         d5:94:a0:7c:07:2b:e8:55:16:7b:ed:a0:90:ee:1d:bd:ec:01:
         8c:6a:de:20:67:0d:10:97:1a:73:0b:44:05:24:fc:2d:10:59:
         e3:05:06:05:dc:b5:2f:ee:e6:3a:18:da:29:9b:6d:2d:a8:10:
         a0:43:12:99:48:0a:cc:a0:24:0a:54:b3:b1:1f:7e:78:2e:5c:
         b7:2b:53:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 23:41:02 2026 by rpki-client