Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.mft
File:                     _rhNn4-eMxVliaXr9yIgOomeClE.mft (raw, json)
Hash identifier:          Ou65FSCSO6N/R5AN5tq1EbBAjSTuYYzDKow/70dJwxg=
Subject key identifier:   A2:66:F8:66:33:8F:51:DA:1A:AB:3B:A4:C2:95:88:26:33:09:5C:80
Authority key identifier: FE:B8:4D:9F:8F:9E:33:15:65:89:A5:EB:F7:22:20:3A:89:9E:0A:51
Certificate issuer:       /CN=feb84d9f8f9e33156589a5ebf722203a899e0a51
Certificate serial:       01A0CE91593552D46E8BA165BCBAB95A11E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.mft
Manifest number:          142F
Signing time:             Wed 23 Sep 2026 14:00:27 +0000
Manifest this update:     Wed 23 Sep 2026 14:00:27 +0000
Manifest next update:     Thu 24 Sep 2026 14:00:27 +0000
Files and hashes:         1: 1-s2FwRU1cILMfQySWQfwcbHn_7o.roa (hash: UgSoVXkhi39b02jH0/DTm5YU1hz+Ulacw53OQOOrWw0=)
                          2: 2IHxfDPgXpqFUuW2HHMtTesRlVk.roa (hash: 6i0KTZ22dHSsBD0sAIXWyUQ8dif7FeqnVvrlTF59RFs=)
                          3: 4QIYNLjhyvhK4DwD1cHr9Pj0R58.roa (hash: XPr5OKAgKFKe1eZm26Sq5h71zoMCowi3Bq7tv1xOx7I=)
                          4: IxunR-Pdcuvk1jm6CIfNmD9FR0A.roa (hash: /ZeIN8hMhU2WBWfg67KgPG/YjL9Vb0bRB9lW2bQsIk8=)
                          5: _rhNn4-eMxVliaXr9yIgOomeClE.crl (hash: uNC0ZHwB3tRH3IuSswLYuRbC1z/YanPnb82+0mrm9PA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:91:59:35:52:d4:6e:8b:a1:65:bc:ba:b9:5a:11:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=feb84d9f8f9e33156589a5ebf722203a899e0a51
        Validity
            Not Before: Sep 23 14:00:27 2026 GMT
            Not After : Sep 24 14:00:27 2026 GMT
        Subject: CN=a266f866338f51da1aab3ba4c295882633095c80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f4:84:0b:25:d0:8d:81:a2:08:02:cd:61:a0:
                    b1:06:d8:19:4a:cd:15:02:9a:f3:ca:e2:cc:d9:79:
                    54:cf:9f:04:24:35:fb:6a:4e:f0:16:fb:fd:8a:dc:
                    e7:fd:b4:2d:ac:47:e7:a0:ac:3f:72:88:29:8d:83:
                    06:a7:11:06:31:e9:e9:21:7b:f8:22:1e:4a:2c:f6:
                    dd:e4:26:5d:6d:bf:dc:fa:7b:5e:20:8a:25:3a:7d:
                    01:ca:17:f1:ca:cd:40:62:f3:d0:e8:a7:0c:42:6c:
                    18:2e:d2:6c:54:37:de:56:20:31:02:3c:3d:2e:1f:
                    df:ba:dd:7c:be:db:de:95:c4:32:04:e5:70:b4:72:
                    3f:af:78:6b:d5:c1:85:94:fa:2b:ba:19:7b:c9:1a:
                    c9:bc:e7:1b:b3:e3:dd:b3:9c:f5:11:99:1a:72:ce:
                    06:10:70:2d:ca:d9:45:fa:3c:d0:0e:3f:29:4e:b2:
                    3e:8e:fe:e0:ad:51:74:84:d2:7b:6a:21:45:8a:03:
                    65:a9:fc:44:42:ee:f0:4a:ec:34:90:80:22:37:11:
                    64:b3:b0:d9:11:05:9a:36:32:14:3e:fa:6f:25:f3:
                    d8:8e:62:01:3e:9d:87:fd:25:44:2c:e2:b4:a3:1f:
                    4d:0a:dc:f4:3a:13:7a:00:30:8d:b4:96:5a:04:c5:
                    be:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:66:F8:66:33:8F:51:DA:1A:AB:3B:A4:C2:95:88:26:33:09:5C:80
            X509v3 Authority Key Identifier:
                keyid:FE:B8:4D:9F:8F:9E:33:15:65:89:A5:EB:F7:22:20:3A:89:9E:0A:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:a5:10:d7:be:2c:ea:05:48:a7:9f:4b:6b:08:f0:3e:f3:22:
         3e:d4:17:ae:8d:c6:89:0a:6f:cc:8b:c9:54:9f:4b:6e:22:eb:
         e8:79:be:f2:48:52:26:71:65:8e:16:1c:e9:f0:da:18:ff:86:
         b3:c5:40:e9:76:bf:fd:92:c7:43:ce:22:62:a5:13:8f:b9:45:
         f8:a8:ad:da:07:69:b4:ea:c1:56:b8:3b:c2:bc:2e:74:bf:9b:
         36:a5:eb:c8:53:07:76:ad:3f:d9:98:c9:42:2d:d2:12:52:7d:
         29:57:24:27:41:89:88:51:5b:35:43:8f:b2:a2:08:59:2b:f9:
         94:ce:14:c8:a1:e8:da:5e:70:7e:91:63:55:d9:fc:85:16:aa:
         c7:ee:dd:79:fc:f4:4d:69:42:58:e3:05:7e:fb:db:20:12:4d:
         9b:75:cd:81:6e:45:97:a3:a9:4d:07:cf:33:da:98:b1:4a:3b:
         15:20:fa:99:e4:c8:ff:c9:46:fe:ba:52:b3:e5:45:6a:fe:6b:
         9e:1e:8b:52:03:3e:e8:14:5d:d2:9b:fc:ee:37:7c:9a:19:b8:
         9d:ae:75:64:c7:00:33:fa:4a:85:29:28:2f:52:5c:c0:21:d2:
         92:54:26:89:11:3a:0f:df:ac:df:a2:2f:3c:7c:c7:62:bd:39:
         d0:6a:af:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:49:19 2026 by rpki-client