Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/57092c-9de8-46e1-aa43-91cd8c936924/1/A8rxExkhh6RIXy4twOzIt2ZCSU8.mft
File:                     A8rxExkhh6RIXy4twOzIt2ZCSU8.mft (raw, json)
Hash identifier:          pjftxPhuXpFA1wNid5GiYzrWuxt5HOsWgGEnOrQ5Glw=
Subject key identifier:   D6:AE:9A:59:7B:71:C8:A0:E1:3E:68:02:B5:4C:81:8B:6C:20:C2:5C
Authority key identifier: 03:CA:F1:13:19:21:87:A4:48:5F:2E:2D:C0:EC:C8:B7:66:42:49:4F
Certificate issuer:       /CN=03caf113192187a4485f2e2dc0ecc8b76642494f
Certificate serial:       01A0CDECF07F65CD29409A97AB4725FF1F66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A8rxExkhh6RIXy4twOzIt2ZCSU8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/57092c-9de8-46e1-aa43-91cd8c936924/1/A8rxExkhh6RIXy4twOzIt2ZCSU8.mft
Manifest number:          E4
Signing time:             Wed 23 Sep 2026 11:00:52 +0000
Manifest this update:     Wed 23 Sep 2026 11:00:52 +0000
Manifest next update:     Thu 24 Sep 2026 11:00:52 +0000
Files and hashes:         1: A8rxExkhh6RIXy4twOzIt2ZCSU8.crl (hash: F8NASX7U7pncQ3MAIfBxYKtRUfX28KKh1spELsziS4w=)
                          2: BG9Hu9jLmCjA4BBi3hGmd-3DS2w.asa (hash: uSyPZI0IqhvZuKQPYBOk/ziXElw5bf8paV7OKILbWQo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/57092c-9de8-46e1-aa43-91cd8c936924/1/A8rxExkhh6RIXy4twOzIt2ZCSU8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/57092c-9de8-46e1-aa43-91cd8c936924/1/A8rxExkhh6RIXy4twOzIt2ZCSU8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A8rxExkhh6RIXy4twOzIt2ZCSU8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 08:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cd:ec:f0:7f:65:cd:29:40:9a:97:ab:47:25:ff:1f:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03caf113192187a4485f2e2dc0ecc8b76642494f
        Validity
            Not Before: Sep 23 11:00:52 2026 GMT
            Not After : Sep 24 11:00:52 2026 GMT
        Subject: CN=d6ae9a597b71c8a0e13e6802b54c818b6c20c25c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a0:bd:44:06:1d:ea:9c:88:65:f6:a8:f2:d7:
                    b3:ea:19:f3:65:03:4b:67:75:62:1f:60:ea:68:50:
                    b4:10:ed:e1:8f:ae:6e:71:12:12:99:f5:b9:df:7c:
                    a3:27:b1:19:34:7b:7e:39:42:a6:0f:33:53:6b:ee:
                    76:12:12:85:58:e0:b6:fa:66:2c:23:94:16:98:47:
                    79:47:aa:64:b6:86:15:e5:5f:a8:3e:36:63:dd:3b:
                    df:4d:e9:fb:18:bc:70:7e:7a:7b:ae:0e:f8:ce:37:
                    f4:e2:fb:6b:8b:7e:8c:c3:1a:66:62:1b:4e:f8:fc:
                    0b:80:0e:64:4b:12:0a:5c:8f:da:47:90:25:04:51:
                    41:b5:fd:01:c1:48:c0:e9:49:d4:6c:3a:2b:79:2d:
                    3e:d7:77:6e:22:e5:45:45:7d:d8:f0:4a:22:56:70:
                    ea:78:2f:bd:ec:86:24:17:13:69:c2:b2:80:6f:b6:
                    22:cd:90:4e:ca:ed:62:34:32:58:60:3c:f3:11:3a:
                    17:68:ea:44:c3:bf:64:06:cc:95:54:a1:31:a7:de:
                    f8:39:68:d1:38:a3:5e:22:1f:7c:08:3f:14:14:2d:
                    d3:e6:d1:1b:1f:23:6a:28:62:f6:74:5e:38:62:02:
                    d5:1b:cc:6c:19:21:64:4d:a3:57:6d:45:9f:64:2e:
                    3f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:AE:9A:59:7B:71:C8:A0:E1:3E:68:02:B5:4C:81:8B:6C:20:C2:5C
            X509v3 Authority Key Identifier:
                keyid:03:CA:F1:13:19:21:87:A4:48:5F:2E:2D:C0:EC:C8:B7:66:42:49:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8rxExkhh6RIXy4twOzIt2ZCSU8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/57092c-9de8-46e1-aa43-91cd8c936924/1/A8rxExkhh6RIXy4twOzIt2ZCSU8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/57092c-9de8-46e1-aa43-91cd8c936924/1/A8rxExkhh6RIXy4twOzIt2ZCSU8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:67:76:9b:f3:87:8f:33:f8:05:26:1d:4a:80:ab:19:f4:38:
         30:bc:a2:52:98:07:8a:38:b0:ba:41:dc:84:42:c6:ef:58:2e:
         4f:a5:45:aa:5e:54:14:df:b6:e8:67:d0:13:d9:9c:41:c3:58:
         4b:4e:f0:97:c5:24:41:d2:24:0d:2b:25:36:3a:0d:21:5b:19:
         21:68:12:2d:fa:a0:e0:1e:48:47:b9:61:c1:38:ec:85:04:47:
         28:c9:07:fe:7e:ad:82:a7:c1:af:50:30:7e:b1:a2:0f:7e:65:
         9d:da:2d:6e:8e:13:e2:52:59:42:1e:2a:cf:fb:31:4a:52:1d:
         97:04:3d:75:70:d2:1b:e8:c0:3d:5e:98:ef:75:eb:51:ad:7b:
         49:0d:03:5a:17:da:21:a2:b6:5a:d7:d3:fd:78:a8:ea:2a:1d:
         d2:a3:34:8b:d6:0c:66:dc:37:01:e0:67:51:e7:07:61:32:01:
         bf:94:02:e9:e4:a6:7c:e9:8d:fe:45:06:81:b9:dd:2d:12:dd:
         9e:ed:e8:b7:17:bb:3d:fc:2f:23:ae:9a:35:cf:3b:58:d0:22:
         9d:9a:ef:55:56:43:43:a9:e6:a7:1a:01:7a:16:d6:b7:6a:ce:
         6e:78:6d:0e:c5:b0:c1:34:ad:3f:a8:01:21:4c:5b:d0:cc:7b:
         8b:77:60:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:55:35 2026 by rpki-client