Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.mft
File:                     R6guVXeaHqTvmWf4IdXMBbe9mek.mft (raw, json)
Hash identifier:          cHzWnA+zsmmMsjY7ntFtEze2o7+Yt3oU5ACSr1uIl5M=
Subject key identifier:   45:83:72:2D:FD:28:B2:30:94:06:E3:EF:BF:3C:C5:65:49:0B:13:3B
Authority key identifier: 47:A8:2E:55:77:9A:1E:A4:EF:99:67:F8:21:D5:CC:05:B7:BD:99:E9
Certificate issuer:       /CN=47a82e55779a1ea4ef9967f821d5cc05b7bd99e9
Certificate serial:       01A0D080049704358927DA0209F73DD18C92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R6guVXeaHqTvmWf4IdXMBbe9mek.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.mft
Manifest number:          1A6B
Signing time:             Wed 23 Sep 2026 23:00:45 +0000
Manifest this update:     Wed 23 Sep 2026 23:00:45 +0000
Manifest next update:     Thu 24 Sep 2026 23:00:45 +0000
Files and hashes:         1: Nq9p6JOG9d1MPZ5qd-sAijdFSJ0.roa (hash: yO2lwMxsUQ5IOFH/LC6sgXWOkjPeUa5h0hHMk+SpB7A=)
                          2: R6guVXeaHqTvmWf4IdXMBbe9mek.crl (hash: HZRWsxXM/OjOHkfVuiAPHsn8sP2IIIxkWhdOtDE00qs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R6guVXeaHqTvmWf4IdXMBbe9mek.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 18:27:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:80:04:97:04:35:89:27:da:02:09:f7:3d:d1:8c:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47a82e55779a1ea4ef9967f821d5cc05b7bd99e9
        Validity
            Not Before: Sep 23 23:00:45 2026 GMT
            Not After : Sep 24 23:00:45 2026 GMT
        Subject: CN=4583722dfd28b2309406e3efbf3cc565490b133b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:07:a5:58:2f:1f:56:68:9a:63:9e:be:52:94:
                    ba:d9:10:61:29:0d:e2:a9:60:a1:f2:9b:62:a8:d4:
                    f9:1e:66:c5:76:cc:6d:f1:e9:40:70:65:87:ca:66:
                    7b:4e:65:e3:3e:b5:28:0e:a8:2b:2c:61:be:7c:b2:
                    ac:b0:66:fe:91:bf:7c:37:8f:ad:47:09:7d:6a:70:
                    77:f5:17:55:9f:91:5a:15:8c:3f:e0:6a:d9:fe:bf:
                    40:c8:1f:b5:62:0f:71:6f:69:65:a7:4a:f3:e3:f5:
                    9d:fa:41:9e:c2:0c:0b:f5:fd:9b:ce:c4:61:91:d6:
                    1f:61:a4:76:43:db:11:86:0d:61:b0:25:50:2e:43:
                    cb:f2:83:3b:40:5b:5b:2d:0f:a8:e4:fb:b2:4f:cf:
                    69:23:a8:49:71:94:ce:0f:f6:35:18:00:0a:99:7d:
                    01:e3:e4:6c:dc:fd:b2:3a:85:59:eb:7f:24:26:3d:
                    bb:20:ac:cc:ab:e8:30:e0:0d:da:8e:6d:48:7b:5c:
                    54:10:7f:31:03:4b:5b:37:30:fa:48:37:9b:e4:01:
                    c3:6b:1f:f1:1b:af:23:94:80:c5:0c:ea:af:90:7f:
                    6c:9c:45:eb:1a:56:96:3a:8b:b8:66:7b:76:23:3c:
                    c4:cb:e8:cd:33:5e:ec:50:4c:f2:0e:90:f7:88:55:
                    92:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:83:72:2D:FD:28:B2:30:94:06:E3:EF:BF:3C:C5:65:49:0B:13:3B
            X509v3 Authority Key Identifier:
                keyid:47:A8:2E:55:77:9A:1E:A4:EF:99:67:F8:21:D5:CC:05:B7:BD:99:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R6guVXeaHqTvmWf4IdXMBbe9mek.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:8c:47:2e:b4:10:8b:9c:24:34:48:63:08:55:33:2e:71:3e:
         93:70:d6:45:de:e1:63:c5:7a:c3:6c:67:4d:91:f2:94:f6:34:
         d9:92:44:37:72:f9:f2:24:73:0a:25:60:83:f5:0f:22:a1:4f:
         76:56:57:79:15:88:18:cb:96:c9:87:44:0c:35:06:2a:3c:4d:
         ae:a0:29:dd:ea:51:e8:3d:32:5f:10:d8:5f:81:55:e9:a2:3d:
         52:86:8f:d7:e9:01:c1:bc:3d:a6:cb:ec:aa:de:0f:56:72:c5:
         e6:9d:e7:22:82:e5:9e:a6:99:bc:bc:3e:37:7d:fb:fd:a9:8b:
         85:38:32:bf:5a:3c:c7:c6:9c:86:0d:8f:6b:84:6d:13:2e:b0:
         21:77:70:39:96:ac:96:e8:1c:e0:b3:47:16:a1:25:3b:d1:3d:
         ac:7d:fb:8a:06:f0:81:19:8e:f4:0c:cd:80:d1:63:15:37:7d:
         2e:72:d7:46:65:d1:66:26:da:62:f2:a8:56:8a:ef:b9:6a:4e:
         37:0d:67:ff:92:f7:c2:dc:89:99:33:13:34:88:c3:c0:fb:29:
         03:b3:f5:31:90:8b:41:5d:ce:22:ea:2d:25:41:98:84:dd:8b:
         82:1b:63:b2:19:77:e5:cd:95:60:bb:18:2e:68:ae:ed:fd:7c:
         b9:a7:d7:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 05:04:47 2026 by rpki-client