Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft
File:                     AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft (raw, json)
Hash identifier:          sWFCSd+/oUnV/ulpEeULjDg0N1r0UetU48eC+oAzE0A=
Subject key identifier:   EF:9B:6C:EB:81:4E:03:DB:26:2D:3C:0B:9C:05:97:F7:31:EC:A2:11
Authority key identifier: 02:64:0B:CC:B7:17:1F:19:9C:43:A0:A9:74:CA:B8:27:ED:18:E7:50
Certificate issuer:       /CN=02640bccb7171f199c43a0a974cab827ed18e750
Certificate serial:       01A0CE91BD4878134B34079FC8DBB9ECEF55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft
Manifest number:          1A6B
Signing time:             Wed 23 Sep 2026 14:00:52 +0000
Manifest this update:     Wed 23 Sep 2026 14:00:52 +0000
Manifest next update:     Thu 24 Sep 2026 14:00:52 +0000
Files and hashes:         1: 3_0WZ7tcEt9l7JCeqM_XLJKrQAI.roa (hash: 7OfgraftH18MfCmboAvi66Dsa4X9nEMWe7jgzn7VuiE=)
                          2: AmQLzLcXHxmcQ6CpdMq4J-0Y51A.crl (hash: iBO54JVyykxfeftiA0EObZOlD8DqOEaNnMTOo3Cip+I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:91:bd:48:78:13:4b:34:07:9f:c8:db:b9:ec:ef:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02640bccb7171f199c43a0a974cab827ed18e750
        Validity
            Not Before: Sep 23 14:00:52 2026 GMT
            Not After : Sep 24 14:00:52 2026 GMT
        Subject: CN=ef9b6ceb814e03db262d3c0b9c0597f731eca211
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:3b:02:c2:cd:9a:ce:89:7a:45:b3:d1:e3:3a:
                    82:a6:ca:5d:ec:7c:bf:4f:f6:b2:60:07:b8:a5:0e:
                    88:64:b7:c7:13:2d:3d:37:71:f3:10:b4:b9:7f:80:
                    81:23:05:e6:63:79:e7:35:5d:c1:25:e6:44:19:c4:
                    cd:34:24:f2:f5:2d:6f:93:95:0d:3c:c4:1a:ac:31:
                    4b:52:ea:7d:74:4d:36:c7:55:4f:48:eb:59:09:52:
                    fa:76:d9:01:c9:54:c9:4c:02:2f:55:e4:c4:a1:4b:
                    4c:6b:09:17:13:9b:41:97:00:1c:45:be:40:f3:07:
                    3f:0d:c3:96:46:54:64:f7:50:c4:88:0b:2b:a0:e7:
                    a6:01:ba:06:1d:ef:58:db:e0:cb:83:3c:0f:42:3b:
                    cf:c0:26:bf:db:4c:2b:08:05:2c:15:d9:18:49:59:
                    7e:3d:fd:e0:b3:f9:9e:3c:ca:50:d0:99:e0:d0:b6:
                    3f:87:ec:d6:b1:a6:f4:b2:3e:a9:1a:23:c7:eb:fe:
                    1c:8c:64:bb:8e:e6:60:3b:84:fe:9a:c6:d7:29:f4:
                    90:06:14:88:21:74:3f:82:e9:08:25:d1:fa:4e:a5:
                    d0:86:7f:42:40:87:b2:80:34:f4:c7:a1:9a:78:db:
                    99:22:c5:bd:16:30:17:7b:a0:63:d7:fa:52:b7:75:
                    6b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:9B:6C:EB:81:4E:03:DB:26:2D:3C:0B:9C:05:97:F7:31:EC:A2:11
            X509v3 Authority Key Identifier:
                keyid:02:64:0B:CC:B7:17:1F:19:9C:43:A0:A9:74:CA:B8:27:ED:18:E7:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:3a:3f:94:23:ea:8f:3f:21:d0:70:18:4d:79:75:81:5b:1f:
         6e:9b:f3:39:b7:72:8e:9e:a7:ad:8d:97:52:a2:de:a1:f5:9e:
         64:95:6c:9c:d6:98:80:00:b4:6b:02:c1:23:96:56:9b:1d:d7:
         5b:c8:75:82:fb:48:74:7a:a1:91:5d:b3:e3:52:4d:72:74:a4:
         df:f5:10:b9:77:32:29:99:e4:5b:aa:d7:f3:fe:21:23:ae:5c:
         78:86:57:36:c2:1d:a0:4c:0e:35:b3:d0:66:7c:70:4f:27:6c:
         db:1f:80:c8:80:5e:c6:77:74:47:02:59:f1:70:2e:eb:68:77:
         15:cd:49:7a:47:38:d0:85:b9:b5:38:f3:57:c9:b4:35:09:8c:
         37:a5:d8:c1:5a:71:2c:6b:8a:12:15:94:e6:b0:87:73:5c:52:
         81:95:19:b0:08:20:0f:c8:5f:3a:97:38:88:cc:78:74:5f:4c:
         13:1b:8f:3d:08:30:bc:9c:e2:5d:9c:c5:11:c3:53:98:3c:f8:
         fc:6d:91:ea:39:35:c0:95:12:1c:2e:4a:f2:90:e8:a5:78:f8:
         3c:ee:c0:73:eb:d4:69:d9:59:f3:fd:48:0b:8b:79:de:8e:1a:
         82:92:d1:95:84:08:b1:c6:08:61:3c:2f:07:71:fb:53:e2:8d:
         be:e6:57:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:05:57 2026 by rpki-client