Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.mft
File:                     rAmEUBCEpHIgxczPVHi4l8KCLH8.mft (raw, json)
Hash identifier:          JMbfNuPL+vSSeBBorA01P7TASzkj6nBRgpj74HDCp/U=
Subject key identifier:   E5:40:60:F3:6A:50:32:84:72:54:10:C9:41:4A:62:D5:FB:09:CE:15
Authority key identifier: AC:09:84:50:10:84:A4:72:20:C5:CC:CF:54:78:B8:97:C2:82:2C:7F
Certificate issuer:       /CN=ac0984501084a47220c5cccf5478b897c2822c7f
Certificate serial:       01A0D5DE8DF99F2FD018F1CE9AA1ED3EE972
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rAmEUBCEpHIgxczPVHi4l8KCLH8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.mft
Manifest number:          1A6E
Signing time:             Fri 25 Sep 2026 00:02:07 +0000
Manifest this update:     Fri 25 Sep 2026 00:02:07 +0000
Manifest next update:     Sat 26 Sep 2026 00:02:07 +0000
Files and hashes:         1: IgFQrerKfVP7wy44zfUDO_Ryu40.roa (hash: d+QkU0y4pn6BlJ50YCAOplUfwVp1JgVys4D+BWQE0Ss=)
                          2: eIsRP9-R0B5y8Q9SMASC2fuIFUo.roa (hash: Sf1KzRutRQ8Om6lChpX9qp6C7pNo5SKRUwiV8EG2Y1Y=)
                          3: rAmEUBCEpHIgxczPVHi4l8KCLH8.crl (hash: 92kMoA6QAXoMr5jCy3ttycw4nby6Rc26uv31196a+bw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rAmEUBCEpHIgxczPVHi4l8KCLH8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 23:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d5:de:8d:f9:9f:2f:d0:18:f1:ce:9a:a1:ed:3e:e9:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac0984501084a47220c5cccf5478b897c2822c7f
        Validity
            Not Before: Sep 25 00:02:07 2026 GMT
            Not After : Sep 26 00:02:07 2026 GMT
        Subject: CN=e54060f36a503284725410c9414a62d5fb09ce15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1f:00:62:d9:97:0a:65:f1:dd:45:32:fd:1c:
                    bb:14:48:19:ff:0d:f0:1c:c9:dc:cb:19:d5:1e:54:
                    d7:30:6b:dc:3e:c1:9f:8f:14:7f:f0:95:d5:48:02:
                    bf:d9:e4:e5:25:2a:e2:b1:80:27:0f:54:4d:91:71:
                    1b:19:2f:e0:2b:9d:f6:51:f1:3f:ef:4c:0f:24:bb:
                    f4:08:b0:af:ec:56:18:17:67:ae:77:bb:60:e0:62:
                    71:a8:b1:6e:03:e7:78:c4:aa:17:68:99:7e:1c:21:
                    cc:f2:73:be:99:87:97:2c:c7:fa:37:9b:af:29:a2:
                    06:e0:71:15:48:f8:e9:3e:09:b7:5a:73:3c:3d:5b:
                    0a:f1:13:99:b8:80:a1:48:55:73:17:0b:32:46:2a:
                    b8:75:14:1f:cd:8b:d1:bf:3c:ad:b9:fc:ea:18:56:
                    62:ee:8a:37:cc:60:2e:b9:4b:03:eb:b9:ea:17:28:
                    d4:13:87:98:41:eb:ca:41:cc:8b:a7:3b:4a:2f:93:
                    03:db:21:ee:04:fc:a8:98:8d:47:d3:b8:f1:1f:e6:
                    98:18:90:cb:3e:bd:8b:cc:0c:bf:8b:21:22:58:d3:
                    19:e7:3d:fb:25:50:cc:2e:7f:f4:95:18:a7:de:19:
                    d2:50:90:f6:88:bf:43:25:e6:f1:b8:2b:9a:86:c0:
                    b7:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:40:60:F3:6A:50:32:84:72:54:10:C9:41:4A:62:D5:FB:09:CE:15
            X509v3 Authority Key Identifier:
                keyid:AC:09:84:50:10:84:A4:72:20:C5:CC:CF:54:78:B8:97:C2:82:2C:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAmEUBCEpHIgxczPVHi4l8KCLH8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:9f:be:6c:28:3c:d4:d4:bc:10:7c:f0:22:26:40:22:a9:ab:
         c5:82:1b:44:e0:af:56:2e:23:54:3a:13:55:3c:1c:39:37:05:
         48:ee:69:a2:d9:12:26:87:99:3e:33:88:6a:e8:c3:a9:05:39:
         d0:71:19:e0:9b:58:fb:a9:42:c3:77:16:a8:5c:aa:da:3f:18:
         32:32:c5:05:5c:74:7a:84:29:02:48:77:df:b7:73:d1:e1:31:
         94:b3:a2:70:4a:bc:a1:ba:12:84:f9:6c:4f:c1:c5:d1:85:cb:
         7d:de:31:e7:8a:8a:80:4d:a4:98:5b:53:f4:7a:0f:ff:5b:76:
         e8:96:77:20:27:2d:77:29:a5:8b:22:8e:bb:3e:54:5c:15:87:
         73:39:5b:4e:31:31:fe:df:cc:1d:e0:c1:eb:19:d1:10:21:5b:
         a3:f7:75:40:b0:92:1b:7c:6c:fa:50:1f:a4:cc:0d:aa:8a:53:
         fa:b7:f1:9d:4a:5f:02:8b:9a:2d:9a:23:10:41:0d:31:ce:f6:
         79:47:cf:e4:42:0d:6c:40:1e:c0:f0:d7:a8:26:a1:dd:e3:ed:
         a4:b9:1d:ad:63:a7:d0:de:ac:ef:35:f5:9a:a2:a3:e0:24:cc:
         17:00:0f:80:ac:57:ff:80:82:aa:5a:4b:80:a4:94:c6:d4:30:
         46:8f:3f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:13:13 2026 by rpki-client