Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/4g-H2rlrUPdu6kmxgeqU0mogUyc.mft
File:                     4g-H2rlrUPdu6kmxgeqU0mogUyc.mft (raw, json)
Hash identifier:          pEAhF+jFfzbwgeBeP2rzu0V/cTHd/Kvbai8dfh27DBA=
Subject key identifier:   35:F1:B3:3A:9E:E6:AA:AD:AD:C4:39:A2:ED:96:02:9B:DA:9C:22:88
Authority key identifier: E2:0F:87:DA:B9:6B:50:F7:6E:EA:49:B1:81:EA:94:D2:6A:20:53:27
Certificate issuer:       /CN=e20f87dab96b50f76eea49b181ea94d26a205327
Certificate serial:       01A0CAEB600854370F5783923455E444F195
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4g-H2rlrUPdu6kmxgeqU0mogUyc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/4g-H2rlrUPdu6kmxgeqU0mogUyc.mft
Manifest number:          1A6B
Signing time:             Tue 22 Sep 2026 21:00:18 +0000
Manifest this update:     Tue 22 Sep 2026 21:00:18 +0000
Manifest next update:     Wed 23 Sep 2026 21:00:18 +0000
Files and hashes:         1: 4g-H2rlrUPdu6kmxgeqU0mogUyc.crl (hash: dHL82cNO1vE7kwW8Dgud0MehQioP3iBUufrgLPoJcgc=)
                          2: FvV4UNNN1I3u5_f_mw8uvFShvcA.roa (hash: qoCza9pR6RXvspT8eRTV0uWK0mL3e+fmf3gOpC7a0Ko=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/4g-H2rlrUPdu6kmxgeqU0mogUyc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/4g-H2rlrUPdu6kmxgeqU0mogUyc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4g-H2rlrUPdu6kmxgeqU0mogUyc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ca:eb:60:08:54:37:0f:57:83:92:34:55:e4:44:f1:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e20f87dab96b50f76eea49b181ea94d26a205327
        Validity
            Not Before: Sep 22 21:00:18 2026 GMT
            Not After : Sep 23 21:00:18 2026 GMT
        Subject: CN=35f1b33a9ee6aaadadc439a2ed96029bda9c2288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ed:20:39:ee:54:1c:49:2d:69:58:6c:14:18:
                    2e:69:66:eb:83:d1:64:88:df:77:57:1d:46:7f:2e:
                    8a:88:c4:4d:99:8c:c9:ca:17:8f:4f:c9:89:98:44:
                    84:77:e3:f2:94:75:d0:bc:7b:4f:4d:17:2a:51:96:
                    0d:08:09:a0:5d:0f:39:29:1c:18:a4:aa:b6:00:7b:
                    6a:88:6a:e0:cc:f6:dd:01:98:7a:92:72:41:35:aa:
                    4c:4b:8b:50:47:56:2f:76:6e:45:c1:8e:b1:28:78:
                    44:f8:a2:e6:26:41:cb:f7:2d:a6:91:60:dd:aa:de:
                    e3:7b:d2:f1:4d:bb:a5:89:f2:47:e8:df:9f:13:3f:
                    a0:32:f7:a6:92:34:00:2c:0e:ec:e3:13:21:0b:99:
                    5f:ab:80:76:10:b7:62:f8:6c:60:05:5c:10:c7:d1:
                    a3:ef:61:04:9c:72:c7:a9:e3:c0:0c:b1:e5:9a:dc:
                    7f:97:b7:28:13:6c:c9:28:56:29:86:fe:ee:c0:62:
                    9a:0a:1e:b3:3a:b6:e0:b8:ce:92:ec:1a:83:bd:4d:
                    49:f5:85:18:f8:12:2f:7b:d0:74:fd:66:7c:23:50:
                    9c:0d:81:7e:54:47:ee:cd:32:d5:a6:41:ea:1f:d9:
                    bc:2f:9a:86:d2:81:90:ce:fb:fb:44:ba:30:b3:42:
                    df:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:F1:B3:3A:9E:E6:AA:AD:AD:C4:39:A2:ED:96:02:9B:DA:9C:22:88
            X509v3 Authority Key Identifier:
                keyid:E2:0F:87:DA:B9:6B:50:F7:6E:EA:49:B1:81:EA:94:D2:6A:20:53:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4g-H2rlrUPdu6kmxgeqU0mogUyc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/4g-H2rlrUPdu6kmxgeqU0mogUyc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/4g-H2rlrUPdu6kmxgeqU0mogUyc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:e4:22:de:b4:55:e8:f8:b5:95:fb:f9:a0:d2:b6:67:11:2e:
         86:63:9c:7c:14:ee:58:6c:eb:d9:da:5f:3b:99:38:2c:ae:83:
         fa:82:b0:a2:22:04:5b:f8:f1:0a:08:bf:b4:a8:19:c6:49:59:
         fb:93:61:83:02:e0:6e:4d:87:ad:08:bc:c6:69:d5:50:0f:5b:
         b5:91:3f:7a:25:ed:eb:ee:36:05:89:76:53:95:1c:f1:be:14:
         44:e0:6d:13:37:e5:bb:74:fa:94:19:a6:64:df:22:0e:d4:a3:
         9e:33:06:46:54:86:56:96:af:71:e5:30:f7:75:d5:ba:0d:9d:
         39:67:8f:c2:38:4e:18:4a:4b:b2:a0:70:c0:02:71:e1:3f:e7:
         a6:e7:ab:5d:0a:93:c2:85:91:5c:d6:52:f0:ef:23:6c:ba:7b:
         84:3b:1a:e6:55:53:5c:fa:fb:eb:12:d6:c5:7b:75:ff:9c:ac:
         cb:26:61:84:aa:ef:47:2c:08:08:59:6c:7a:4e:09:23:d5:12:
         88:d0:bf:b7:af:07:8b:21:5a:2f:75:9e:df:fe:20:99:b7:f8:
         0b:b0:7e:9f:fd:08:38:41:2e:c4:ff:3c:96:32:d7:16:63:3d:
         c8:03:70:b2:a8:00:c2:40:48:d9:d9:ca:1f:54:c1:f0:67:d7:
         16:a4:b0:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 04:20:22 2026 by rpki-client