Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft
File:                     CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft (raw, json)
Hash identifier:          S/QnFy1FTJEjZcDFLqLUazFAE3AelLtAg/GDvlyAqqY=
Subject key identifier:   86:FF:71:1D:48:25:94:B7:C9:5E:A6:41:FA:C7:63:29:53:8B:6D:C8
Authority key identifier: 08:21:00:F0:B1:99:1D:80:A4:64:21:D9:FE:51:47:F2:D5:5A:C9:30
Certificate issuer:       /CN=082100f0b1991d80a46421d9fe5147f2d55ac930
Certificate serial:       01A0DACD94A6C35BA9CDB75184F7601E4DC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CCEA8LGZHYCkZCHZ_lFH8tVayTA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft
Manifest number:          0662
Signing time:             Fri 25 Sep 2026 23:01:40 +0000
Manifest this update:     Fri 25 Sep 2026 23:01:40 +0000
Manifest next update:     Sat 26 Sep 2026 23:01:40 +0000
Files and hashes:         1: 1-oF-we2cmHSHaID5tDY175ejYyc.roa (hash: dJ5RifzmXnjb10Iv95+voBaC+89de9KOSKWwWpiVAmQ=)
                          2: CCEA8LGZHYCkZCHZ_lFH8tVayTA.crl (hash: dnxPJMm8NtO/bV9P7wLOuOfMgID64vjTsZAvU09FqcY=)
                          3: tSi7rgFlmfh1P4HXVwQwVPU47ak.roa (hash: a+hi0S0VRR6DQeW+YfoSxvunfpCb33mxDCeififJ5+A=)
                          4: wOsJVEziUaOvFA1iNE3ry9kPQfE.roa (hash: FAa7Ewjlb7OE+5koslUqaQRcv1OSsbCB7gnK+sa/8FI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CCEA8LGZHYCkZCHZ_lFH8tVayTA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 23:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:da:cd:94:a6:c3:5b:a9:cd:b7:51:84:f7:60:1e:4d:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=082100f0b1991d80a46421d9fe5147f2d55ac930
        Validity
            Not Before: Sep 25 23:01:40 2026 GMT
            Not After : Sep 26 23:01:40 2026 GMT
        Subject: CN=86ff711d482594b7c95ea641fac76329538b6dc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ae:79:2f:4b:73:b2:c9:66:0d:96:59:cb:a1:
                    6f:67:18:ac:bd:4f:51:9f:cd:b2:6f:d7:06:01:73:
                    67:f1:7d:9b:b4:d0:81:58:c6:0e:cf:31:dc:bf:66:
                    63:66:11:01:48:0c:4f:a7:42:1b:de:42:15:a8:cd:
                    0c:1c:fc:24:b4:9d:1c:49:ec:95:af:60:06:c9:b7:
                    c6:c9:28:cb:ca:61:41:d1:08:d0:98:f5:91:b1:f2:
                    be:8a:be:57:c9:4c:9a:ca:95:b4:0f:ac:78:e3:a1:
                    9a:21:ee:7d:b0:cf:39:4f:fa:e9:84:65:9e:f7:e5:
                    da:af:53:e9:69:32:63:da:e6:e2:ae:ee:38:2c:93:
                    e9:1b:f8:24:fb:31:8f:7d:4a:31:d6:0f:c2:a0:63:
                    4a:03:51:03:3c:f3:3c:3e:0d:5d:a3:de:f1:e6:e8:
                    06:ad:ac:b3:0d:a9:69:62:0a:dd:38:78:a0:f6:e0:
                    7d:83:30:55:59:e8:a0:29:9f:b8:58:ec:df:ee:c9:
                    06:13:13:b8:ac:d2:91:95:6a:38:59:07:93:82:4f:
                    cb:57:16:0c:63:14:83:e6:c7:db:3d:c2:f5:7b:63:
                    0b:45:7e:12:08:fb:8a:d8:dd:cc:42:b1:b0:21:6c:
                    71:5e:da:46:7e:b9:9b:6e:c8:d9:c4:9e:98:aa:40:
                    6c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:FF:71:1D:48:25:94:B7:C9:5E:A6:41:FA:C7:63:29:53:8B:6D:C8
            X509v3 Authority Key Identifier:
                keyid:08:21:00:F0:B1:99:1D:80:A4:64:21:D9:FE:51:47:F2:D5:5A:C9:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCEA8LGZHYCkZCHZ_lFH8tVayTA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:50:e5:ba:45:cf:bb:1b:26:51:99:e5:d6:3b:ee:2a:a9:e6:
         d7:00:30:db:9c:07:2f:cd:0d:b1:a9:3a:0b:39:07:5c:b5:3e:
         20:0c:94:ab:4a:2d:10:0f:44:8d:ce:a8:3a:51:d8:d4:1f:46:
         bd:4e:76:07:f5:85:76:01:71:93:d8:97:d2:ce:72:a1:11:90:
         cf:1b:1a:ee:cf:8d:f0:ff:59:db:14:07:36:2f:16:c2:31:1b:
         59:6f:24:88:81:82:3a:b2:3a:3e:a6:ce:e9:7b:29:48:c4:f6:
         f5:5d:d0:06:83:b7:a5:00:5c:ee:0c:f1:56:0b:55:4b:ff:fb:
         0a:23:f5:61:e8:38:a1:77:77:a4:ce:06:6f:0f:49:33:ed:b7:
         84:98:a6:a7:37:6b:2e:d4:2a:26:67:f1:ae:79:12:31:4f:00:
         d3:dc:a4:90:53:fd:76:32:ed:ba:51:1b:82:f7:9e:ce:b0:9b:
         6d:ae:6e:ab:13:b5:2b:51:17:ea:bc:77:57:15:41:ca:6b:d3:
         bb:22:e2:09:99:cc:6d:2d:63:d9:4e:7b:7d:55:70:6b:cb:46:
         3d:f1:3c:6b:45:17:a1:5e:7d:ed:13:5a:db:dc:3c:9b:76:5b:
         c7:69:9d:f5:3c:73:84:3e:68:c6:17:76:17:1a:23:ad:4a:0a:
         f9:ee:93:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:50:19 2026 by rpki-client