Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft
File:                     rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft (raw, json)
Hash identifier:          FMYnDYNlunvQIIdfOsjR2l4zufugo+Qq6+C4/WgQc1g=
Subject key identifier:   CE:3D:31:7A:9A:22:51:7D:4C:03:95:7A:15:1D:C9:8E:FA:38:9E:B7
Authority key identifier: AF:12:1C:D6:E1:1D:A0:95:F8:56:D7:9D:EE:C4:69:D0:C6:35:84:94
Certificate issuer:       /CN=af121cd6e11da095f856d79deec469d0c6358494
Certificate serial:       01A0D2DECB3509C5D07E670F2162755CFD82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rxIc1uEdoJX4Vted7sRp0MY1hJQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft
Manifest number:          15B3
Signing time:             Thu 24 Sep 2026 10:03:31 +0000
Manifest this update:     Thu 24 Sep 2026 10:03:31 +0000
Manifest next update:     Fri 25 Sep 2026 10:03:31 +0000
Files and hashes:         1: Kt3WssTVExomZWHJCqXl8pbqTeI.roa (hash: sMdfEY5PN8jhtfsylFmunzan1olQaOOSvuDOe68g4ws=)
                          2: KzmoITHkJpLOR4Tlul5pobyRKM4.roa (hash: AsqRiFYDTCnKZFcWZmiW079vgPj+Gpml9bimn7NxEjY=)
                          3: LeESlSzWIvuQdTBNS-mk1tTyv7E.roa (hash: WD96tCmI2Z4zPrVkF6yX9hz40ljCQT+UIo7XuVxQtwE=)
                          4: rXLsHixYlq3Kcw9EvhZkSV4zLvI.roa (hash: xL1IzYaCYhuM2YhqoZfpmf/cRlZ3zbvhm0l28fnKcTk=)
                          5: rxIc1uEdoJX4Vted7sRp0MY1hJQ.crl (hash: 2jpe7WcOeBKRE51T1Xnk+G+0W+cZIZKBUfEDNZCGUM4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rxIc1uEdoJX4Vted7sRp0MY1hJQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 10:03:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d2:de:cb:35:09:c5:d0:7e:67:0f:21:62:75:5c:fd:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af121cd6e11da095f856d79deec469d0c6358494
        Validity
            Not Before: Sep 24 10:03:31 2026 GMT
            Not After : Sep 25 10:03:31 2026 GMT
        Subject: CN=ce3d317a9a22517d4c03957a151dc98efa389eb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e9:ce:9c:48:5e:ff:96:b5:fc:21:47:bc:ca:
                    f7:68:30:42:7c:03:f6:14:4d:fc:06:5c:47:2e:1a:
                    10:ce:6d:83:93:2c:a1:e2:7f:e2:99:45:fd:e9:46:
                    8f:0b:6a:c7:8b:49:07:1c:00:8f:34:55:fe:a0:21:
                    d8:d7:4d:cc:fb:b8:11:02:b3:0a:6b:e8:b4:b8:53:
                    10:da:3c:31:1e:55:08:c1:7c:13:82:9d:ef:ec:ab:
                    12:c5:8d:75:c9:53:ae:3e:62:a2:73:9e:55:b4:9e:
                    83:56:b3:54:86:8b:c8:47:7c:2f:aa:9a:68:7f:4c:
                    06:6e:7f:28:2f:b5:e8:67:ec:6a:37:79:5b:06:ed:
                    c5:14:0b:8c:4e:89:09:22:d1:7f:ee:ae:5d:35:9c:
                    3a:71:05:d2:99:17:e5:01:ec:0c:56:6e:71:21:1e:
                    3b:b1:ae:d7:f5:b6:9d:df:3b:05:62:a6:d0:7d:0c:
                    e8:84:55:68:c0:83:ff:89:75:30:ce:2c:ea:b6:91:
                    ef:c5:9f:38:0a:06:7c:bf:c2:e6:45:2c:e8:8b:0a:
                    44:54:4b:9d:53:2a:bb:69:89:6d:67:bc:ea:cb:3e:
                    fb:46:a9:c3:8c:61:29:83:ee:e2:66:40:f7:85:b7:
                    82:59:e2:ff:bc:fc:29:71:32:de:38:93:77:c7:e2:
                    08:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:3D:31:7A:9A:22:51:7D:4C:03:95:7A:15:1D:C9:8E:FA:38:9E:B7
            X509v3 Authority Key Identifier:
                keyid:AF:12:1C:D6:E1:1D:A0:95:F8:56:D7:9D:EE:C4:69:D0:C6:35:84:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rxIc1uEdoJX4Vted7sRp0MY1hJQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:4d:41:65:67:2c:8e:4e:a2:c1:80:09:a6:fc:93:e0:e7:f3:
         6b:9d:a5:a0:b2:95:be:2e:3e:5f:fa:b8:cc:3f:5b:bd:f6:79:
         7a:05:62:b6:7f:13:aa:85:6f:3c:14:e8:f6:ed:24:da:71:b6:
         1a:3e:d8:91:8e:d0:88:2f:05:27:92:09:31:09:5f:3f:f7:00:
         c0:2b:39:bc:f5:54:e5:82:18:6c:fc:43:14:af:f2:76:6c:f8:
         c5:2f:23:13:96:76:8e:26:b7:83:b0:4f:dc:2c:5e:94:93:70:
         ac:a4:7a:ef:13:53:6b:eb:8d:3d:f5:4c:e3:bf:87:dc:d2:9e:
         41:ba:bd:01:01:07:46:d2:bb:1b:86:0f:2a:60:39:27:07:93:
         06:c4:a8:1d:44:40:b3:6e:06:25:5e:d6:57:f9:00:b3:c1:08:
         5d:6c:33:c2:bc:86:d5:4b:25:ba:e0:32:78:2f:77:c6:a3:9b:
         45:25:6c:9c:24:fc:dd:95:ab:ee:e3:41:7f:5c:e0:d0:de:c3:
         a6:cb:50:13:28:9e:18:60:c3:78:62:95:60:cd:5f:e5:ef:a0:
         f8:c7:95:71:f5:06:ad:2c:f4:cb:06:d0:aa:fd:03:65:00:61:
         89:97:e0:25:26:57:3d:a4:77:32:07:52:8d:94:fe:d8:0a:9f:
         59:e7:45:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:52:19 2026 by rpki-client