Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.mft
File:                     B4Huhp0uHCAP-MaX4tN-qkKUCjY.mft (raw, json)
Hash identifier:          5L0i5+zEYRTe+1bdTBoiNVjzOrfWkqHVF08M7/qlGoA=
Subject key identifier:   FD:B8:4D:BE:B8:C5:73:59:A8:37:2C:BC:3F:D9:6F:3D:4C:15:1F:63
Authority key identifier: 07:81:EE:86:9D:2E:1C:20:0F:F8:C6:97:E2:D3:7E:AA:42:94:0A:36
Certificate issuer:       /CN=0781ee869d2e1c200ff8c697e2d37eaa42940a36
Certificate serial:       01A0CDECF05EDC8F6BB14FC4FB2F97EE1613
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B4Huhp0uHCAP-MaX4tN-qkKUCjY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.mft
Manifest number:          1569
Signing time:             Wed 23 Sep 2026 11:00:52 +0000
Manifest this update:     Wed 23 Sep 2026 11:00:52 +0000
Manifest next update:     Thu 24 Sep 2026 11:00:52 +0000
Files and hashes:         1: B4Huhp0uHCAP-MaX4tN-qkKUCjY.crl (hash: JeMlvZg5ds1xk0TQuulmLADsdlQsoCu4BW3oC1EuA9A=)
                          2: DUkKAgihVQLx-9lRs9kP656LAqs.roa (hash: Q209pcJqFgT3dRAcDq1sFjsPW/cttABhC0fxm9KWWRE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B4Huhp0uHCAP-MaX4tN-qkKUCjY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 11:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cd:ec:f0:5e:dc:8f:6b:b1:4f:c4:fb:2f:97:ee:16:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0781ee869d2e1c200ff8c697e2d37eaa42940a36
        Validity
            Not Before: Sep 23 11:00:52 2026 GMT
            Not After : Sep 24 11:00:52 2026 GMT
        Subject: CN=fdb84dbeb8c57359a8372cbc3fd96f3d4c151f63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:44:60:26:e1:14:ad:90:6d:89:f6:40:3a:22:
                    b1:d1:ea:80:9f:7d:ff:26:af:22:6c:b7:9e:46:83:
                    f3:27:33:59:3a:42:b7:64:4b:01:1a:b5:3c:3d:d5:
                    87:c9:8f:a3:94:1c:50:ac:29:a8:1d:4d:13:98:e3:
                    b6:cd:ef:e1:5a:76:27:fa:71:32:0a:ec:23:28:54:
                    32:3f:15:68:15:a6:49:dd:13:be:5d:13:5e:e7:89:
                    00:9c:16:ca:0e:5e:e6:5b:1c:d6:01:cc:db:29:ce:
                    86:8d:de:31:c1:ca:1e:c4:32:46:98:97:29:0a:31:
                    39:31:46:71:10:a4:80:e5:ca:f4:3e:43:d5:87:75:
                    44:57:a9:1e:3d:83:a7:fd:54:f9:71:a1:11:ec:60:
                    02:c7:5d:d6:5c:62:a6:6b:20:e7:0f:b1:86:9c:ff:
                    2f:1a:5e:8d:7e:20:71:57:45:c3:c7:9e:f6:b7:bd:
                    4c:66:04:8f:5a:18:1c:bf:0f:c2:84:be:79:1a:34:
                    4a:b7:7b:06:10:21:04:25:fd:b8:57:a8:47:1e:d1:
                    eb:df:91:12:16:c2:2b:46:58:d5:d5:69:30:74:aa:
                    8b:bf:c1:49:9f:cd:41:54:a7:34:14:ed:97:a8:dd:
                    77:4a:df:1f:79:57:02:d4:a1:80:37:e6:8f:8f:ed:
                    81:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:B8:4D:BE:B8:C5:73:59:A8:37:2C:BC:3F:D9:6F:3D:4C:15:1F:63
            X509v3 Authority Key Identifier:
                keyid:07:81:EE:86:9D:2E:1C:20:0F:F8:C6:97:E2:D3:7E:AA:42:94:0A:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B4Huhp0uHCAP-MaX4tN-qkKUCjY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:b3:f4:ad:83:98:ee:a3:2d:bb:2f:35:97:fc:98:de:51:8b:
         09:f8:76:ec:80:78:ef:fc:ad:6d:4f:e4:08:31:f1:90:2e:6a:
         5b:56:82:6e:24:66:07:c9:9d:1c:ac:16:2a:45:24:c0:d3:92:
         e7:9a:81:8a:91:63:10:da:0a:35:67:46:d1:8e:e0:d6:72:3c:
         e4:d4:71:b6:74:80:33:9e:69:ca:df:14:26:e4:23:05:cf:4d:
         52:56:a0:c1:25:1a:30:f4:2f:85:12:78:dd:10:52:2e:dd:bf:
         00:b6:5c:75:21:2b:23:f0:59:e3:14:68:3c:be:1d:ac:29:e9:
         61:ca:4c:5b:93:b9:45:de:8b:55:9d:71:9f:0a:b6:0c:92:71:
         2e:92:6d:59:72:17:01:d2:00:ca:c7:c3:76:32:f7:02:21:18:
         fd:14:12:a2:03:44:f3:67:67:3e:a7:ec:2b:df:72:71:5c:7c:
         8a:09:7d:53:f2:a8:32:fd:43:cf:9e:d5:61:4c:b6:2c:4d:0d:
         8b:e8:cd:62:55:a2:a0:9d:ab:87:1d:67:81:b4:d1:5b:43:76:
         b0:06:21:23:32:31:2f:84:c1:49:a4:18:10:bb:8d:c2:2e:20:
         39:98:ed:f4:33:f4:5d:80:81:98:2b:73:64:f4:62:1d:09:9b:
         5c:b2:80:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:39:18 2026 by rpki-client