Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft
File:                     AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft (raw, json)
Hash identifier:          5nlfHlw5HMiPL7CNC2X8Fod6aUiLuwchWdEqJ8mlnqk=
Subject key identifier:   95:D3:06:FA:3D:4F:45:C1:74:BC:CE:74:E9:AA:10:59:B4:FD:05:0B
Authority key identifier: 03:19:6C:89:E5:54:DB:E4:77:45:22:75:99:06:E2:58:1A:17:46:94
Certificate issuer:       /CN=03196c89e554dbe4774522759906e2581a174694
Certificate serial:       01A0CB598EAC7D57C4E168A3E02FEA317E1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft
Manifest number:          1595
Signing time:             Tue 22 Sep 2026 23:00:39 +0000
Manifest this update:     Tue 22 Sep 2026 23:00:39 +0000
Manifest next update:     Wed 23 Sep 2026 23:00:39 +0000
Files and hashes:         1: 25mxXJh2G2nCKlFkslbkjTaimw0.roa (hash: gLUrLyzzoWyt075KRiHPrRM9zqSzPbD5AydPzwej0ts=)
                          2: AxlsieVU2-R3RSJ1mQbiWBoXRpQ.crl (hash: pl/a82iFizblRNlY0PAsFFK3Nma3jDemFzVe7CQHmh4=)
                          3: RYNiV948DLV1Ez8aZtWra-uSAIU.roa (hash: iZJYlFMS/Nvt7xPVWg2S8RzagBzGleb0zYSMcRXDFSg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cb:59:8e:ac:7d:57:c4:e1:68:a3:e0:2f:ea:31:7e:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03196c89e554dbe4774522759906e2581a174694
        Validity
            Not Before: Sep 22 23:00:39 2026 GMT
            Not After : Sep 23 23:00:39 2026 GMT
        Subject: CN=95d306fa3d4f45c174bcce74e9aa1059b4fd050b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:b2:3b:58:48:0b:0d:b1:eb:72:05:85:72:d6:
                    f2:4e:5b:2a:40:6e:ca:d8:2c:56:c9:23:ca:70:30:
                    be:2f:8e:2d:0c:bc:9f:59:48:5c:27:5d:41:bf:ba:
                    8c:c3:43:f1:dc:7e:10:25:10:96:a1:0e:d1:85:33:
                    8e:fe:bc:ce:aa:05:e8:20:99:78:fb:98:82:0d:dd:
                    7f:b2:8e:8b:72:d0:b0:9b:46:66:61:a8:df:7b:ba:
                    5b:60:cd:8f:b4:ae:aa:e4:60:f7:fa:47:f1:8a:6d:
                    07:f5:01:df:8d:79:a9:e3:fa:72:ed:29:01:6c:5b:
                    54:4a:08:12:40:24:b8:35:5c:1b:39:43:a2:27:82:
                    dc:f4:b4:53:00:7b:91:8c:99:4f:c5:a0:4a:5f:10:
                    e3:bb:bc:32:9c:16:54:17:e8:aa:6a:2a:f2:20:8d:
                    d6:42:ad:4e:00:13:9f:3d:90:18:50:b1:9b:ed:e9:
                    b3:93:eb:90:b8:fa:2c:0f:64:2b:af:e9:89:f1:c1:
                    3f:57:e2:00:e6:b0:d7:78:26:da:f8:14:26:d7:f6:
                    cd:68:0b:08:a0:12:bb:02:6a:32:f9:73:c5:ee:9d:
                    ec:0d:8f:cf:37:22:cc:53:21:12:8b:26:f0:b6:72:
                    9a:af:69:27:84:7e:3e:fe:84:89:bd:48:22:bf:43:
                    20:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:D3:06:FA:3D:4F:45:C1:74:BC:CE:74:E9:AA:10:59:B4:FD:05:0B
            X509v3 Authority Key Identifier:
                keyid:03:19:6C:89:E5:54:DB:E4:77:45:22:75:99:06:E2:58:1A:17:46:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:80:68:b8:53:b6:e1:1d:f3:53:99:5c:19:18:45:7a:8c:9a:
         89:07:ce:d5:77:f3:1e:c9:ee:cc:a0:82:13:70:84:a2:70:5a:
         06:fc:70:84:40:91:95:a7:eb:39:d1:71:53:c7:81:d8:0b:f2:
         4f:24:4a:8b:91:ef:c9:3f:c3:cd:b7:c4:3d:73:a6:85:a9:cc:
         c3:31:55:59:17:27:d6:a7:1c:f6:ea:7c:c4:b0:4a:13:20:a0:
         ef:a5:df:89:93:78:b2:ca:92:45:d1:07:55:70:dc:28:b8:61:
         2c:41:1a:29:1e:5b:70:64:76:b3:96:99:76:aa:97:bc:86:6b:
         4c:0b:ae:8b:47:e0:49:b4:f9:ac:12:b1:6f:e9:3c:4e:3b:ad:
         86:6a:af:c7:3a:97:9e:ce:98:43:cc:16:3c:0c:70:d0:0e:91:
         24:c0:3c:73:4e:af:2a:54:1b:f0:51:f4:3a:d0:f6:ea:9e:9d:
         02:58:b2:5c:64:71:27:d5:bd:94:ec:7b:f5:a5:0f:41:59:78:
         ad:bf:33:a9:79:b7:e4:da:4c:a6:4f:96:ba:9b:59:a3:48:a6:
         13:e1:75:56:b0:c1:71:cd:9d:54:fe:69:84:4a:35:e6:8b:de:
         1b:fc:0e:86:fb:fb:36:79:0f:6d:8b:cd:a8:7e:c8:e6:24:11:
         e5:46:92:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:21:22 2026 by rpki-client