Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.mft
File:                     RtmgpLV6Dux8TlKhGdtLHGVvTbQ.mft (raw, json)
Hash identifier:          pGDiYtvDMkB29SCEmdSCCUF1L/x7Tae05ixJfel1uxY=
Subject key identifier:   DD:03:89:59:AE:17:FE:B1:C1:20:7E:8B:BE:31:36:90:CE:E1:98:B1
Authority key identifier: 46:D9:A0:A4:B5:7A:0E:EC:7C:4E:52:A1:19:DB:4B:1C:65:6F:4D:B4
Certificate issuer:       /CN=46d9a0a4b57a0eec7c4e52a119db4b1c656f4db4
Certificate serial:       01A0E3D0DDEF04920E5ECF13C6FDAEE2C7FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.mft
Manifest number:          1A78
Signing time:             Sun 27 Sep 2026 17:01:51 +0000
Manifest this update:     Sun 27 Sep 2026 17:01:51 +0000
Manifest next update:     Mon 28 Sep 2026 17:01:51 +0000
Files and hashes:         1: 1-gvD7al892cvZ4RIDuyKy9oaP8E.roa (hash: 3YuUrQDhY5WtE8QXyn7md8vc7m27H9qU1hbbb54ZWaY=)
                          2: 5Lz9w0B7jrAzPI5acoujGxqoJpE.roa (hash: MZNW6RIYVz1iqV9FFYEQ74EZU6o1FnMQFNeyud+QFNQ=)
                          3: RtmgpLV6Dux8TlKhGdtLHGVvTbQ.crl (hash: 9B3xIWOXdqV91shDTiv47wOsmqxQcTyIXCffCfmmyyA=)
                          4: U7F_EGMPuOTUwMrEIvZDG6D8FL0.roa (hash: Msu3UEjWnFS+f8ETYG9dtK80xmHaVMz/zqoRDxDt/JM=)
                          5: Zd_S7TX7KyLf91f92bM72Q5m1hg.roa (hash: cE/CxwAeAo553C8FvYX71S7+9eLctivX+ScLAuru1fI=)
                          6: m2jS2YkNTUHRPi6h3Lkhe67p9k0.roa (hash: +y6I9Y8FOJyplIOWWLmZd1y7Nvbup46rof3V4cdi8+s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e3:d0:dd:ef:04:92:0e:5e:cf:13:c6:fd:ae:e2:c7:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46d9a0a4b57a0eec7c4e52a119db4b1c656f4db4
        Validity
            Not Before: Sep 27 17:01:51 2026 GMT
            Not After : Sep 28 17:01:51 2026 GMT
        Subject: CN=dd038959ae17feb1c1207e8bbe313690cee198b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:4d:69:fb:40:20:5f:7e:82:95:71:ee:62:6f:
                    d0:6f:66:cc:c6:b2:bf:14:21:20:8d:22:ca:f3:96:
                    33:db:5b:da:ff:dc:84:17:1f:5e:0d:ee:96:7f:23:
                    18:81:aa:8a:88:af:ac:35:4f:0f:ef:a8:7a:19:cf:
                    a2:ff:1d:b9:11:69:84:37:b8:e6:b6:ed:45:82:d4:
                    a1:5b:37:e2:59:bb:bd:a6:19:10:05:29:38:e5:8b:
                    0a:b1:d0:12:ec:d8:f5:33:2c:ee:5f:e2:1b:43:34:
                    f9:57:de:b6:20:cb:0e:30:06:af:49:31:52:31:d7:
                    d1:f2:72:30:60:3f:83:77:3f:5c:d5:6b:9c:26:37:
                    86:47:2e:56:de:a5:17:c3:6c:42:c1:52:15:17:38:
                    ba:a6:65:0c:c0:3f:16:30:d1:08:8b:7e:29:25:3e:
                    0f:ac:ed:50:a6:81:76:4d:ad:54:43:26:5f:44:cb:
                    c9:5e:b1:93:43:ae:54:bd:92:e9:73:c9:28:1e:8a:
                    f0:a5:25:c4:27:2e:28:fe:7e:d3:48:9d:57:16:d4:
                    42:d5:ab:df:d7:87:66:48:40:f6:04:88:e5:a9:d3:
                    de:54:5c:17:e9:77:d8:79:3e:bf:1a:5f:ef:48:dc:
                    8a:8c:fc:14:ad:4b:c8:53:b9:00:17:e1:f8:af:ad:
                    ad:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:03:89:59:AE:17:FE:B1:C1:20:7E:8B:BE:31:36:90:CE:E1:98:B1
            X509v3 Authority Key Identifier:
                keyid:46:D9:A0:A4:B5:7A:0E:EC:7C:4E:52:A1:19:DB:4B:1C:65:6F:4D:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:33:39:e8:d8:39:fa:f2:0d:61:42:a0:ac:63:84:60:7f:73:
         5f:f5:34:49:e8:1f:4b:8e:02:41:df:19:36:20:b4:6d:9c:87:
         10:3c:51:cc:f9:f6:64:11:13:76:52:ef:58:3f:1a:f7:d9:99:
         32:60:3e:07:65:97:fb:0f:68:e6:97:de:bf:17:ba:a9:54:65:
         3e:3f:a0:7f:db:92:27:58:bf:65:1e:f0:fe:a0:08:a7:9e:db:
         26:4a:a2:ac:30:80:3c:5c:78:ac:2f:c7:f1:dc:13:47:bc:74:
         7b:c3:d4:22:9f:66:2b:fc:3f:d2:b3:a8:aa:f9:a1:ec:e0:9f:
         4b:1c:aa:61:62:cf:2b:87:b4:01:53:0a:d2:3c:ae:f5:06:83:
         f3:b0:63:0f:fe:d6:c9:2c:df:29:e0:e6:f6:1e:2e:43:22:86:
         57:37:93:13:db:8d:c7:3d:50:c6:05:66:e5:35:af:4c:f8:03:
         ff:4d:b2:a6:55:30:6a:f2:b8:49:54:6a:21:b3:e4:ca:ca:de:
         64:cc:86:a7:9e:57:5d:43:90:07:24:2c:e5:c6:04:97:f1:80:
         53:b9:ad:54:29:0d:f7:48:11:16:29:f2:9f:76:6d:f7:bc:76:
         6c:29:72:8c:38:4c:86:c2:ae:1d:0e:17:97:bb:b1:62:ba:90:
         27:27:79:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:31:36 2026 by rpki-client