Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/7983fc-2019-47b3-a6c3-d99c8c25dbc8/1/au3YfPvkKOnEKzDCLhlh9xfx20k.mft
File:                     au3YfPvkKOnEKzDCLhlh9xfx20k.mft (raw, json)
Hash identifier:          0yyd8VEv6N3eEGmaKfWiU5YKJZLtKDIXRCC4gX5csos=
Subject key identifier:   53:DC:F4:D3:0D:79:91:5A:45:FE:1B:09:27:A0:70:61:93:19:AA:08
Authority key identifier: 6A:ED:D8:7C:FB:E4:28:E9:C4:2B:30:C2:2E:19:61:F7:17:F1:DB:49
Certificate issuer:       /CN=6aedd87cfbe428e9c42b30c22e1961f717f1db49
Certificate serial:       01A0D3836669C1077D65E4FE8A7CC2604FD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/au3YfPvkKOnEKzDCLhlh9xfx20k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/7983fc-2019-47b3-a6c3-d99c8c25dbc8/1/au3YfPvkKOnEKzDCLhlh9xfx20k.mft
Manifest number:          0285
Signing time:             Thu 24 Sep 2026 13:03:19 +0000
Manifest this update:     Thu 24 Sep 2026 13:03:19 +0000
Manifest next update:     Fri 25 Sep 2026 13:03:19 +0000
Files and hashes:         1: au3YfPvkKOnEKzDCLhlh9xfx20k.crl (hash: nS1yAYK/N3vKzLqNXEVseHQNJpq7cYS9QZ4o+IOcE5c=)
                          2: vWjIW1eikUSm_cPtDhI_f3EodY4.roa (hash: PyLkHRQBEvUL9Bk7Ermj8JEaYKhwlYCHxtYPNjdnGVg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/7983fc-2019-47b3-a6c3-d99c8c25dbc8/1/au3YfPvkKOnEKzDCLhlh9xfx20k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/7983fc-2019-47b3-a6c3-d99c8c25dbc8/1/au3YfPvkKOnEKzDCLhlh9xfx20k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/au3YfPvkKOnEKzDCLhlh9xfx20k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 13:03:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d3:83:66:69:c1:07:7d:65:e4:fe:8a:7c:c2:60:4f:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6aedd87cfbe428e9c42b30c22e1961f717f1db49
        Validity
            Not Before: Sep 24 13:03:19 2026 GMT
            Not After : Sep 25 13:03:19 2026 GMT
        Subject: CN=53dcf4d30d79915a45fe1b0927a070619319aa08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:14:f9:d8:20:dd:f9:bd:17:3b:35:6f:e1:da:
                    86:53:ba:d1:53:96:9e:70:be:3c:a8:08:30:c6:32:
                    d1:28:c7:37:d4:e2:f9:75:26:7e:7c:1f:40:cb:a4:
                    46:69:ae:49:88:ac:ef:9b:63:4d:53:5d:f5:5d:29:
                    15:25:3c:ee:69:e9:c7:94:f9:6a:68:07:3d:2b:70:
                    84:92:fb:87:5c:c0:86:bf:b9:12:30:67:c5:dd:7c:
                    30:a7:40:a7:29:03:18:b2:40:6f:39:26:f5:7a:7f:
                    86:a5:3b:a8:49:28:04:10:a1:81:3e:47:4a:15:26:
                    35:a5:0c:c5:03:4e:62:0e:18:66:6d:76:e2:51:16:
                    ff:e4:4d:2b:59:f7:f9:02:38:60:36:aa:46:b0:05:
                    0f:a7:84:7f:08:c0:af:ff:82:41:d1:f8:0e:1b:08:
                    43:49:85:e8:dd:e4:48:b7:1c:13:66:9a:d4:5d:b7:
                    b9:f4:cd:88:a7:8c:af:73:c0:d1:dd:75:bc:7a:aa:
                    b8:83:d2:74:e0:7e:75:f1:68:cb:9e:d0:86:7c:0e:
                    4e:2e:0c:7f:4c:4b:da:cb:27:3e:72:26:99:e2:1f:
                    74:87:6b:66:b6:7e:32:47:6b:1e:82:50:e9:fb:af:
                    b4:ec:bc:9b:b9:c8:7a:16:b8:80:1c:94:2b:4a:b5:
                    b9:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:DC:F4:D3:0D:79:91:5A:45:FE:1B:09:27:A0:70:61:93:19:AA:08
            X509v3 Authority Key Identifier:
                keyid:6A:ED:D8:7C:FB:E4:28:E9:C4:2B:30:C2:2E:19:61:F7:17:F1:DB:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/au3YfPvkKOnEKzDCLhlh9xfx20k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7983fc-2019-47b3-a6c3-d99c8c25dbc8/1/au3YfPvkKOnEKzDCLhlh9xfx20k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7983fc-2019-47b3-a6c3-d99c8c25dbc8/1/au3YfPvkKOnEKzDCLhlh9xfx20k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:1a:c7:41:bd:13:d1:9d:73:52:dc:ae:6b:62:63:89:b9:9c:
         3f:05:bc:ca:5e:92:2b:dc:eb:a1:83:a7:c5:de:06:a9:21:fc:
         03:d8:ef:a7:55:11:40:3f:01:93:15:8a:92:e4:3d:5b:96:b2:
         29:5e:ff:95:80:91:00:84:bc:b6:18:e2:bf:a3:b7:5f:a7:32:
         bd:4a:02:72:69:42:6b:f5:e6:0c:ad:77:32:a8:1d:03:f1:5c:
         40:5c:b6:aa:74:54:d4:e4:db:ee:eb:0f:ab:e5:4f:c2:0d:0d:
         bc:4b:26:24:52:75:b8:b8:34:4b:49:a2:6a:b6:48:a9:d0:bd:
         d2:a0:d9:e0:98:a9:98:d9:6c:46:b5:b6:1b:83:21:cd:be:48:
         6d:aa:af:ae:cc:8d:28:d2:81:e4:41:64:86:35:65:4e:47:91:
         88:e3:51:fb:c0:98:06:e7:32:1e:5b:14:bc:84:7c:b2:1d:cb:
         a3:54:b4:69:61:d9:18:e7:b6:5e:8b:0e:e2:bd:63:89:85:a0:
         36:be:e6:67:5d:8f:ac:f8:7f:b0:86:01:58:50:aa:b7:ea:8b:
         ba:df:34:fb:a5:ed:5a:b0:65:d4:db:a2:a4:bb:51:b9:e8:83:
         37:ed:24:c4:f3:a0:3b:c5:0e:59:4a:88:0e:28:5c:a6:6f:8e:
         a1:3a:d7:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:07:00 2026 by rpki-client