Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/f906d5-63d8-41fa-a2cf-5c37ca7a57a5/1/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.mft
File:                     P4sNy3n-CuSLqDJp7BKDhHDK6Qo.mft (raw, json)
Hash identifier:          wxxecWhhakKIW1dsucyWioEQoXfRH1g48SbZggcCzwc=
Subject key identifier:   39:62:CD:E7:55:D6:6F:F7:E6:92:C1:BC:3C:91:BD:3F:75:9C:CA:EF
Authority key identifier: 3F:8B:0D:CB:79:FE:0A:E4:8B:A8:32:69:EC:12:83:84:70:CA:E9:0A
Certificate issuer:       /CN=3f8b0dcb79fe0ae48ba83269ec12838470cae90a
Certificate serial:       01A0D3EF8C6821CA195E255E01D4B45F2447
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/f906d5-63d8-41fa-a2cf-5c37ca7a57a5/1/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.mft
Manifest number:          0262
Signing time:             Thu 24 Sep 2026 15:01:26 +0000
Manifest this update:     Thu 24 Sep 2026 15:01:26 +0000
Manifest next update:     Fri 25 Sep 2026 15:01:26 +0000
Files and hashes:         1: P4sNy3n-CuSLqDJp7BKDhHDK6Qo.crl (hash: +H5g1CyW6hjmcUd0/aXLCeMJgJOu4oqr8Oj9vLJ/oIc=)
                          2: Z2hi7ItQ4ePG-89oC3NsOmcwohk.roa (hash: hpOgQ0YBy/9da8UmbyZyoarOicwd5QMZEwe4cjjhqvg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/f906d5-63d8-41fa-a2cf-5c37ca7a57a5/1/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/f906d5-63d8-41fa-a2cf-5c37ca7a57a5/1/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 15:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d3:ef:8c:68:21:ca:19:5e:25:5e:01:d4:b4:5f:24:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8b0dcb79fe0ae48ba83269ec12838470cae90a
        Validity
            Not Before: Sep 24 15:01:26 2026 GMT
            Not After : Sep 25 15:01:26 2026 GMT
        Subject: CN=3962cde755d66ff7e692c1bc3c91bd3f759ccaef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:21:c1:01:54:9b:55:63:58:81:7d:10:d2:ce:
                    72:27:6e:9d:6e:26:2f:f2:ba:08:e7:84:d6:23:48:
                    30:31:11:66:fb:9d:7f:8d:55:57:73:cc:57:cd:03:
                    5b:ef:89:cc:4b:14:19:d4:e3:45:a0:f2:2a:0a:2d:
                    38:34:f9:e0:28:88:17:23:c2:65:29:e8:8e:ab:0e:
                    32:3d:9d:e9:4d:84:9c:11:82:19:fa:7d:8c:ca:54:
                    cc:5e:f5:c2:9d:bc:d2:f6:a8:25:16:00:6a:10:6d:
                    66:2e:c8:c6:a9:83:fa:60:9c:51:51:74:90:f0:e7:
                    d9:9f:39:43:38:56:7d:0a:fb:ca:61:ab:f4:bf:32:
                    37:91:2f:93:35:8a:cb:8a:ca:c7:85:a7:11:07:97:
                    ec:4b:14:85:d3:5c:ad:3c:01:a3:09:c9:a6:8f:29:
                    2a:bd:45:4f:c9:a8:27:fd:d7:c4:db:2e:bd:3c:de:
                    01:3f:bd:9c:de:3d:07:0a:47:b7:cb:07:d6:93:90:
                    6a:25:fc:63:96:20:16:2e:86:4a:97:58:e1:99:d2:
                    2a:e2:41:46:eb:6f:11:be:a6:11:e4:6e:ce:6b:ec:
                    17:a4:67:8a:72:80:89:e0:8b:62:9d:69:59:e2:34:
                    1c:28:24:4e:7a:d7:7d:bc:09:54:43:f3:76:13:1c:
                    c4:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:62:CD:E7:55:D6:6F:F7:E6:92:C1:BC:3C:91:BD:3F:75:9C:CA:EF
            X509v3 Authority Key Identifier:
                keyid:3F:8B:0D:CB:79:FE:0A:E4:8B:A8:32:69:EC:12:83:84:70:CA:E9:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f906d5-63d8-41fa-a2cf-5c37ca7a57a5/1/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f906d5-63d8-41fa-a2cf-5c37ca7a57a5/1/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:7f:b1:21:30:b8:e8:f7:09:bc:69:3f:50:af:f4:08:f8:ab:
         68:0c:f3:83:c3:38:d7:2c:0f:8e:a4:0b:b5:24:7a:3e:02:b0:
         71:3f:a3:45:ce:45:b6:85:4a:b4:10:d5:d9:7c:83:69:88:4b:
         47:87:c3:20:72:57:10:5c:55:ad:76:22:fe:a2:2f:c9:2b:62:
         9d:4b:19:93:7b:38:01:0a:24:19:52:6c:c1:1f:4a:5e:8a:c5:
         cc:ac:7d:48:13:0d:7d:b6:e3:0e:82:7d:03:2b:91:c6:2e:02:
         44:da:7d:3c:1f:7c:dd:7a:b6:15:bd:d4:e7:d4:70:fb:52:e5:
         8e:40:56:10:bc:f6:a3:97:e3:79:33:d3:85:19:23:68:cd:e4:
         54:8b:3b:50:ea:89:27:ae:7a:2b:01:9a:5d:77:43:8c:b9:07:
         53:2a:42:c8:de:45:c0:33:3e:0b:a3:ab:de:ae:db:93:2a:b1:
         8c:a0:70:67:f7:d7:4a:99:e0:ac:54:ca:a4:29:b7:7c:3e:0f:
         60:65:41:72:4b:97:d7:2d:08:e2:02:47:37:3e:a3:f8:fb:5b:
         f4:bc:d3:bc:3f:3b:59:68:74:a6:76:1c:06:1b:7c:e2:cc:9e:
         85:ff:f2:26:ee:a8:96:c0:ee:b7:24:e2:75:e6:de:3b:6d:61:
         7e:45:67:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:49:52 2026 by rpki-client