Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft
File:                     AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft (raw, json)
Hash identifier:          UK+TIgIVcLCjrPYOD61ecIIUoLZlVBMwEeVEfKiovz8=
Subject key identifier:   25:F3:13:93:65:F3:7E:E8:D4:F2:63:B3:8E:EA:D6:8C:F0:14:3C:5F
Authority key identifier: 01:F3:EF:3E:0E:A9:5A:97:55:37:D5:C2:5D:93:CB:76:AF:68:72:34
Certificate issuer:       /CN=01f3ef3e0ea95a975537d5c25d93cb76af687234
Certificate serial:       01A0CFDAC2020CA1B01597D62421AA794F48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft
Manifest number:          1A8D
Signing time:             Wed 23 Sep 2026 20:00:15 +0000
Manifest this update:     Wed 23 Sep 2026 20:00:15 +0000
Manifest next update:     Thu 24 Sep 2026 20:00:15 +0000
Files and hashes:         1: 3lE-OFcZg5HBfiXy0gupENM3iyk.roa (hash: bLLbFDCXQ+hwG1ZI2hchMxCwkBA94qpajMIUIPVAa8Q=)
                          2: 3yN1WaImxLytELQ8orv8zRs2JTc.roa (hash: xMQ9DHu/OHk2/N1Hs4FxQtyh2D3+E7jpj/gCToK104o=)
                          3: 6tH2d7DuA0R1l2Pidcpu6hElWDI.roa (hash: CfNi98riUNvkPkY0puJ/adG9NQhrM30w+euigtAJ/Sw=)
                          4: AfPvPg6pWpdVN9XCXZPLdq9ocjQ.crl (hash: 1fS53/zdnwTx3+IUioUf4aBlFAYTvkkVP0zzLDt8gMQ=)
                          5: TzbPsDZ-cxzqjv8-LwUqnZiNDVA.roa (hash: Fw/wCqm5ct+1+LFhxRHPMU/lUojt4L4OVaEyFt+zO+s=)
                          6: ddUJNLSqBtnSmNldI4m1ICrrXaA.roa (hash: 3+OVO0aN+wd5+fw851/RNy2HHQdglPinsg8QGb8dxQo=)
                          7: eJhW9z5ku9_qhNiO6iw_ATXoEHw.roa (hash: EPkgNIk6bKUUZeeYQssHTaftEyd1+IqUJt3qVX40j0g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 20:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cf:da:c2:02:0c:a1:b0:15:97:d6:24:21:aa:79:4f:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01f3ef3e0ea95a975537d5c25d93cb76af687234
        Validity
            Not Before: Sep 23 20:00:15 2026 GMT
            Not After : Sep 24 20:00:15 2026 GMT
        Subject: CN=25f3139365f37ee8d4f263b38eead68cf0143c5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fd:8e:69:62:53:65:88:f3:4a:e9:06:a7:ea:
                    89:1c:d3:0d:b6:1f:f6:2f:dd:0a:89:a8:b8:c9:c3:
                    d0:17:ab:cd:aa:35:a0:8a:a3:d4:a0:63:fa:03:10:
                    26:ca:78:0b:b5:04:cb:06:76:08:a6:51:5b:91:40:
                    87:33:2a:cd:be:5b:3a:f9:f2:ca:b7:86:b0:82:ef:
                    68:af:96:55:f8:ed:76:9e:2a:e8:77:62:06:c0:1e:
                    7f:96:8f:ba:cd:79:78:38:4a:83:f2:53:2a:4e:3f:
                    37:dc:dd:50:80:16:5d:ad:ea:0c:7c:28:83:96:1c:
                    09:ac:1e:8d:ad:98:ef:47:a8:69:48:f2:67:6e:79:
                    27:a6:ba:76:fc:2a:cf:17:32:c7:9b:a7:a6:f5:cb:
                    e9:78:29:e9:b9:25:9e:71:90:91:ff:a5:57:59:a9:
                    49:a1:e4:4f:4c:cf:7c:09:d8:a4:36:fe:45:63:c5:
                    7f:51:07:1b:c5:5e:b5:da:c7:74:7f:3a:4c:fd:01:
                    e9:e8:55:e9:9e:b5:cf:3a:d2:e3:ce:85:44:ed:40:
                    7e:c8:5f:e2:2a:29:e4:01:28:4f:b8:86:51:6c:7b:
                    65:27:6d:71:6f:09:ca:ca:6f:26:08:be:a5:3e:a3:
                    7c:32:0b:84:9c:f7:43:c1:46:a6:06:28:ec:cc:52:
                    c8:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:F3:13:93:65:F3:7E:E8:D4:F2:63:B3:8E:EA:D6:8C:F0:14:3C:5F
            X509v3 Authority Key Identifier:
                keyid:01:F3:EF:3E:0E:A9:5A:97:55:37:D5:C2:5D:93:CB:76:AF:68:72:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:5a:6e:d1:f3:e0:83:79:5d:9e:bb:dc:a2:fb:12:08:4a:48:
         69:dc:7b:1c:c3:8c:e3:69:58:cc:59:ce:5c:d1:12:48:64:91:
         bc:16:d5:5a:d6:b1:05:7d:73:18:8b:74:7b:f5:31:22:f5:44:
         d9:5e:1e:e3:fc:a8:4e:98:e6:0a:f2:e9:f8:bc:dd:63:cd:7b:
         b2:11:d3:8c:ec:1d:ae:cd:d8:d0:f6:f7:7b:00:4b:bf:67:bd:
         5c:54:e2:49:09:0c:49:26:fc:82:d3:c5:8a:be:b7:f6:08:98:
         1e:c0:12:e1:03:11:b1:72:df:9a:e0:26:a4:52:d5:5e:cc:1c:
         bb:37:ca:65:ea:0d:f3:f1:ae:d3:2d:f7:8f:29:a5:25:37:d5:
         c5:8a:65:90:f3:63:c1:1a:af:7d:4d:84:21:61:7c:5e:34:cf:
         86:39:ae:ab:2a:30:fb:98:9a:d7:4d:1f:83:79:5d:c9:05:76:
         d1:8b:26:15:71:4e:4d:0a:b3:71:71:28:54:c3:d0:a0:a4:b7:
         3f:df:74:24:a9:24:34:e8:71:25:11:1e:50:9a:d5:ae:60:f2:
         05:3f:dd:4c:60:4f:42:91:e3:f0:b5:3a:92:48:1e:7b:a5:ef:
         df:8f:f2:fc:e9:26:d4:4f:11:04:40:27:d0:05:55:cf:44:26:
         cb:9f:52:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:30:28 2026 by rpki-client