Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.mft
File:                     Se4RlL2B0ZRsOfEPf9_fItGgMRI.mft (raw, json)
Hash identifier:          UckGiyBkj6HMFfXTFwy/auH/JQ3eplx6J7VkC4z+kr8=
Subject key identifier:   F5:5B:A0:0C:35:07:03:C2:25:98:BC:38:99:E2:3F:5F:66:28:48:50
Authority key identifier: 49:EE:11:94:BD:81:D1:94:6C:39:F1:0F:7F:DF:DF:22:D1:A0:31:12
Certificate issuer:       /CN=49ee1194bd81d1946c39f10f7fdfdf22d1a03112
Certificate serial:       01A0CCA3136280C12462AEEC2B244680079A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Se4RlL2B0ZRsOfEPf9_fItGgMRI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.mft
Manifest number:          19D9
Signing time:             Wed 23 Sep 2026 05:00:34 +0000
Manifest this update:     Wed 23 Sep 2026 05:00:34 +0000
Manifest next update:     Thu 24 Sep 2026 05:00:34 +0000
Files and hashes:         1: 4MLoPrvWwEvlvkXdgMCtTF8VC3E.roa (hash: s0ibJrg3ZFVdVfAiEwCQ+OIFm/y57l65fC2BAHH9VCc=)
                          2: Se4RlL2B0ZRsOfEPf9_fItGgMRI.crl (hash: m2eQ751fk7PJfOxWvTMyO8N1a9SsSNOU5lBPE8NK8Ik=)
                          3: TlmEOt0-y-w49AgNxJOZ0wNCvZ8.roa (hash: 9QB2O9CF6AxN2XHx+5Fgp4F7JBjPl+H/+qk8ZUWd/Og=)
                          4: gJauMi46QPPzyKWqDiA5ddI3Cho.roa (hash: 8cj4UlqGZgB6E6848rUjL+1fRW7cZLYn+yIARbioPjA=)
                          5: hs-AzdnIKl__cAx33Gis1dnFwQw.roa (hash: HkOzeRN5x0MI5F+tRIRhpZumHAlvuvmNzxwstCGaN70=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Se4RlL2B0ZRsOfEPf9_fItGgMRI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cc:a3:13:62:80:c1:24:62:ae:ec:2b:24:46:80:07:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49ee1194bd81d1946c39f10f7fdfdf22d1a03112
        Validity
            Not Before: Sep 23 05:00:34 2026 GMT
            Not After : Sep 24 05:00:34 2026 GMT
        Subject: CN=f55ba00c350703c22598bc3899e23f5f66284850
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:da:58:7e:66:08:6c:f9:41:cc:29:de:9f:bf:
                    e7:11:18:19:45:99:3f:90:1c:fb:5a:bc:a6:39:5a:
                    fb:09:88:69:89:57:f5:92:d3:9a:88:e2:0d:a8:a0:
                    95:9e:c2:b9:3f:94:0c:6a:7d:b9:4e:6f:b0:2f:2f:
                    dd:d7:24:53:43:39:4d:4f:4b:fd:89:46:36:70:61:
                    88:c3:6f:43:c6:e5:49:2a:c8:36:b8:06:d5:43:0e:
                    b3:3a:bb:61:46:3b:de:b4:94:a6:11:a6:44:cc:4e:
                    73:2e:d3:85:d5:ec:74:08:f6:1a:ab:d8:f1:82:35:
                    33:20:4f:82:67:1b:49:ae:8f:15:cd:25:5e:81:f9:
                    74:d1:d8:6c:ef:f4:cb:37:41:d1:ea:cd:95:d5:01:
                    2d:a0:79:d7:3d:a1:2c:a9:d7:be:e2:85:25:31:53:
                    29:3f:f4:4f:f9:b9:3b:99:87:77:c8:f6:b7:b1:ef:
                    27:92:b1:59:7b:69:04:cf:88:d4:ef:1f:b3:4d:fd:
                    ba:2a:fc:05:30:93:7e:fc:8f:d2:c7:5d:74:ec:eb:
                    23:2d:65:00:73:14:5a:0d:a1:2b:13:7f:09:5a:ca:
                    3a:b7:cc:f3:cf:a5:3d:45:66:9c:cd:a5:da:d1:7d:
                    cf:2d:aa:87:47:35:c7:dd:28:3d:d8:f2:e7:ca:8a:
                    bd:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:5B:A0:0C:35:07:03:C2:25:98:BC:38:99:E2:3F:5F:66:28:48:50
            X509v3 Authority Key Identifier:
                keyid:49:EE:11:94:BD:81:D1:94:6C:39:F1:0F:7F:DF:DF:22:D1:A0:31:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Se4RlL2B0ZRsOfEPf9_fItGgMRI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:c8:d7:54:db:95:a3:52:91:11:c6:2b:62:08:a9:92:2c:45:
         72:c3:af:b3:25:65:4d:a7:03:91:5c:7b:43:0e:01:6a:33:25:
         c9:18:79:82:5a:95:dd:67:d9:67:e7:7f:cc:b2:da:1a:47:23:
         da:ba:e8:15:52:07:04:0f:08:95:d3:af:a8:6a:bd:ae:84:9a:
         1a:4d:54:fb:50:c8:e5:d9:d4:be:fc:95:e7:ef:25:8c:e8:2f:
         41:df:af:25:ba:ed:9d:eb:f1:4b:e5:e9:fa:b0:e2:3d:3c:7b:
         ad:e7:0c:74:45:ad:6d:a1:5e:2f:bf:8c:46:26:f4:53:1e:ec:
         35:a0:c2:b4:65:30:67:d3:73:26:58:20:8b:fc:84:34:58:9a:
         4b:0b:c8:c8:7f:91:16:07:56:18:13:7a:ea:85:5b:62:70:7d:
         d0:11:19:2a:fb:86:53:07:99:11:d5:c1:77:34:f0:44:7d:29:
         fe:2c:5a:ef:a8:b7:ed:d5:ea:be:5d:d3:39:dd:35:8c:26:e0:
         1b:e8:ae:60:b6:eb:3e:7d:93:ab:a7:eb:e5:00:e7:05:dc:af:
         02:fd:b4:c6:31:08:39:87:7d:23:51:3f:b5:9d:2a:b1:e0:e3:
         57:f7:0b:80:02:2d:ab:f5:8a:06:3e:d5:ee:7f:88:c0:67:b7:
         44:81:fc:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:02:45 2026 by rpki-client