Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/52f5ad-850d-4a7e-9946-3b745dd8e21e/1/tAI8jFGPpCn_yiWXe2qPhD-PDEo.mft
File:                     tAI8jFGPpCn_yiWXe2qPhD-PDEo.mft (raw, json)
Hash identifier:          0CaAcxHNa715KdbUVuoCfmu79MqgG0KfNdfzRq0yLe4=
Subject key identifier:   45:6D:A6:56:FD:AA:0D:36:A6:D4:00:C6:43:09:E2:84:33:BF:B4:49
Authority key identifier: B4:02:3C:8C:51:8F:A4:29:FF:CA:25:97:7B:6A:8F:84:3F:8F:0C:4A
Certificate issuer:       /CN=b4023c8c518fa429ffca25977b6a8f843f8f0c4a
Certificate serial:       01A0D8DEA3257D9C17464CBE3E21AA3D483C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tAI8jFGPpCn_yiWXe2qPhD-PDEo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/52f5ad-850d-4a7e-9946-3b745dd8e21e/1/tAI8jFGPpCn_yiWXe2qPhD-PDEo.mft
Manifest number:          1A6E
Signing time:             Fri 25 Sep 2026 14:01:04 +0000
Manifest this update:     Fri 25 Sep 2026 14:01:04 +0000
Manifest next update:     Sat 26 Sep 2026 14:01:04 +0000
Files and hashes:         1: 7S2yeHR4bFiFyxZbbPP_sYHQp2w.roa (hash: VNevD8nKtYDVh3U0iiaGr0TdZvD9DviTbw2gv5/lGDA=)
                          2: tAI8jFGPpCn_yiWXe2qPhD-PDEo.crl (hash: Ki/o7RAfEjyqCN4NxEgTNZR5bQtk/tN5BixZicLk3yY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/52f5ad-850d-4a7e-9946-3b745dd8e21e/1/tAI8jFGPpCn_yiWXe2qPhD-PDEo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/52f5ad-850d-4a7e-9946-3b745dd8e21e/1/tAI8jFGPpCn_yiWXe2qPhD-PDEo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tAI8jFGPpCn_yiWXe2qPhD-PDEo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d8:de:a3:25:7d:9c:17:46:4c:be:3e:21:aa:3d:48:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4023c8c518fa429ffca25977b6a8f843f8f0c4a
        Validity
            Not Before: Sep 25 14:01:04 2026 GMT
            Not After : Sep 26 14:01:04 2026 GMT
        Subject: CN=456da656fdaa0d36a6d400c64309e28433bfb449
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:2c:ac:e0:fc:9c:70:36:00:50:cd:75:8f:45:
                    62:45:00:44:63:91:73:39:09:7e:eb:1b:25:ea:cf:
                    55:28:db:fd:73:24:5d:4d:06:8f:c3:ab:d1:cb:07:
                    76:95:35:ea:a1:b6:fa:8d:d9:fc:7a:8a:51:d5:17:
                    dc:24:99:57:8d:3c:e0:65:96:57:25:35:56:b5:56:
                    42:b3:a5:bd:5b:d6:d7:ff:1a:bd:2c:71:dd:96:95:
                    b3:06:d3:e2:00:38:21:53:f5:86:16:8d:43:ef:e0:
                    14:29:d9:dd:e6:d6:2e:75:12:86:cf:bb:b3:a0:f9:
                    ec:6d:2c:20:9b:19:36:9e:3a:a7:dc:94:72:20:d0:
                    d1:44:d0:d7:52:f5:e8:db:16:67:8a:08:32:6f:95:
                    95:1a:64:4d:83:98:29:25:11:5e:0a:07:b9:75:94:
                    f0:4c:39:61:6a:85:63:da:53:48:28:26:0e:0c:06:
                    1f:fd:a6:db:16:8d:c3:c7:c8:d4:13:ff:44:2c:8a:
                    f4:88:04:52:34:a3:11:a2:0c:b9:06:ce:d2:02:1f:
                    d4:48:df:8e:de:01:bf:b6:f6:34:5e:11:04:bb:a9:
                    3a:18:5a:51:a4:97:9e:37:9a:a7:54:af:4c:fc:2c:
                    18:a2:82:16:36:f1:7b:aa:f1:4d:1e:54:d0:f7:71:
                    7f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:6D:A6:56:FD:AA:0D:36:A6:D4:00:C6:43:09:E2:84:33:BF:B4:49
            X509v3 Authority Key Identifier:
                keyid:B4:02:3C:8C:51:8F:A4:29:FF:CA:25:97:7B:6A:8F:84:3F:8F:0C:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tAI8jFGPpCn_yiWXe2qPhD-PDEo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/52f5ad-850d-4a7e-9946-3b745dd8e21e/1/tAI8jFGPpCn_yiWXe2qPhD-PDEo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/52f5ad-850d-4a7e-9946-3b745dd8e21e/1/tAI8jFGPpCn_yiWXe2qPhD-PDEo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:1e:a5:12:84:88:e1:7d:cc:bc:19:a2:d4:e7:b2:87:d1:6d:
         2a:de:fa:a6:63:89:96:b3:9c:85:8a:97:b2:2b:a8:87:ee:21:
         ef:d4:5a:45:48:3e:24:44:d8:5b:c3:47:b4:be:43:d6:83:1e:
         ab:72:23:d4:87:29:bd:56:e2:21:de:c9:0a:17:5e:61:0a:c8:
         da:f6:3b:64:4f:2a:59:16:7c:af:40:02:6c:15:71:74:52:cb:
         82:53:04:ba:79:9c:bc:f8:1a:a2:fc:19:1a:2e:1d:66:a7:60:
         76:28:a0:6c:e2:d3:ff:f4:f9:00:fc:45:7d:ec:a2:5e:d2:db:
         8b:2f:db:e9:4a:6f:e1:3d:cd:5a:96:8b:97:92:0a:83:7b:bc:
         c4:f9:ac:19:7b:62:95:10:a1:bf:cc:ed:47:c0:ba:65:7a:16:
         76:51:a4:66:68:29:11:bd:ad:5d:01:32:35:a9:bf:ea:12:c3:
         40:fa:27:47:a3:37:72:dd:a7:5c:21:f9:b4:8d:33:2e:19:92:
         05:ce:63:04:e5:0a:5c:3b:aa:50:7e:bd:eb:8e:b7:67:24:5f:
         ee:ea:ce:a0:d8:3d:95:04:2e:ef:ae:17:78:8d:6b:64:9e:c4:
         17:f4:92:a0:e0:75:a3:53:42:28:02:10:65:b0:29:04:0e:46:
         0e:18:43:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:08:53 2026 by rpki-client