Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.mft
File:                     adXUUqjtU1KH_rNlFLyHwCI1WkM.mft (raw, json)
Hash identifier:          Pjr1I3Hkmc0Bq4UUguL8XorGYDCCcebJ2SYdQtxHy1c=
Subject key identifier:   C2:6C:56:C6:90:6E:87:E7:4E:6A:06:05:6C:E8:95:B1:AE:BC:B6:ED
Authority key identifier: 69:D5:D4:52:A8:ED:53:52:87:FE:B3:65:14:BC:87:C0:22:35:5A:43
Certificate issuer:       /CN=69d5d452a8ed535287feb36514bc87c022355a43
Certificate serial:       01A0EB536EDBE2E52D48D6F2D938AA5D7C21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/adXUUqjtU1KH_rNlFLyHwCI1WkM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.mft
Manifest number:          1A7B
Signing time:             Tue 29 Sep 2026 04:01:48 +0000
Manifest this update:     Tue 29 Sep 2026 04:01:48 +0000
Manifest next update:     Wed 30 Sep 2026 04:01:48 +0000
Files and hashes:         1: adXUUqjtU1KH_rNlFLyHwCI1WkM.crl (hash: 2gTrDG05ICs2mMtH1LzKwc7+RogKda/MGu8Chnrhbx0=)
                          2: c7nHfsLGVr2Hpf16MebsVtcpfOw.roa (hash: E4vHcrI652reSIpSis98/0RensPsP0hINBPiLEQ2aFI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/adXUUqjtU1KH_rNlFLyHwCI1WkM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 04:01:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:eb:53:6e:db:e2:e5:2d:48:d6:f2:d9:38:aa:5d:7c:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69d5d452a8ed535287feb36514bc87c022355a43
        Validity
            Not Before: Sep 29 04:01:48 2026 GMT
            Not After : Sep 30 04:01:48 2026 GMT
        Subject: CN=c26c56c6906e87e74e6a06056ce895b1aebcb6ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a0:1d:b5:71:77:05:25:6a:8b:ef:8c:1f:13:
                    9f:36:41:e3:f6:0f:66:8a:9d:e9:2c:73:c8:92:ed:
                    b4:37:cd:63:4f:7f:40:a9:4f:75:67:7f:f1:a2:c3:
                    19:41:5c:d4:b9:bc:eb:12:85:f8:78:40:86:d6:02:
                    c0:13:5f:a5:29:ae:04:80:30:17:e3:f0:20:df:d2:
                    b9:39:cb:a0:0a:dc:66:a8:16:15:e2:da:50:03:21:
                    40:e6:f8:cf:30:f5:10:b0:68:0d:50:83:c9:b8:b3:
                    5d:c6:f6:1c:61:e5:2f:ff:af:51:1e:51:cb:7d:ea:
                    72:6d:82:f4:e3:e4:b9:8f:ee:17:fe:65:22:de:73:
                    45:85:f0:20:c1:d4:13:69:05:7f:fe:58:57:38:7d:
                    c9:3d:28:25:21:f3:12:39:7f:43:1e:69:be:61:e0:
                    d0:70:27:18:40:14:b0:ce:b3:2f:31:fc:c6:38:da:
                    e3:bd:1d:c4:7e:f1:61:cb:96:73:2d:4e:1e:ec:05:
                    ed:63:bd:bb:e2:fa:30:f9:c1:ec:0f:14:6c:0e:c7:
                    00:20:82:48:ca:b8:ac:c1:f0:4c:fd:74:56:de:2d:
                    14:94:4d:9b:f7:bb:76:81:94:4c:0e:1b:89:a3:47:
                    29:22:64:9e:d5:76:54:fe:88:69:f6:56:a3:31:4b:
                    03:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:6C:56:C6:90:6E:87:E7:4E:6A:06:05:6C:E8:95:B1:AE:BC:B6:ED
            X509v3 Authority Key Identifier:
                keyid:69:D5:D4:52:A8:ED:53:52:87:FE:B3:65:14:BC:87:C0:22:35:5A:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/adXUUqjtU1KH_rNlFLyHwCI1WkM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:f0:b5:5e:f9:42:c1:da:69:41:b9:cf:38:e3:3d:84:42:db:
         a2:c0:7f:0d:7f:67:c8:d6:56:38:35:0f:4d:03:fd:cd:db:e8:
         76:be:48:7e:8f:34:ee:39:bc:49:54:3d:9f:46:ff:fe:14:3b:
         23:dd:fb:13:35:7a:09:3f:11:bf:d3:51:39:1e:6d:5e:ad:fd:
         2f:15:96:a0:b5:6e:d9:1a:44:1e:68:62:60:b1:60:e2:38:c6:
         26:29:5d:c7:f0:ce:c7:44:f7:eb:9f:e0:2a:bc:3b:2b:d7:b8:
         e0:ea:76:e6:41:e0:29:11:11:e7:f3:a7:0f:1d:47:bb:4e:e7:
         a2:43:e8:d7:ab:c1:ab:54:72:76:1c:ba:0c:8d:78:7e:38:60:
         f7:4c:23:07:22:ba:46:6e:22:1c:82:69:ca:12:06:e9:00:e8:
         34:79:55:98:0b:fd:a9:d6:13:31:cb:01:36:c6:a8:73:3f:f1:
         64:37:b9:68:aa:0b:8b:7f:84:7b:55:1b:56:60:63:55:0d:d8:
         f6:1a:5a:fb:ee:d3:a9:7e:8e:3c:c4:8e:f0:99:4f:e4:8b:82:
         d3:32:24:2e:d4:02:af:78:78:cb:ad:c3:0e:71:90:43:d4:82:
         df:57:60:a1:ed:90:79:fe:57:94:ba:01:69:ad:fc:fb:34:80:
         2a:22:05:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 12:54:05 2026 by rpki-client