Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/5aa284-2414-4558-beb6-7d4be068c9a5/1/A6XpWruR1k1zuRSMCq9Zs68_Tmo.mft
File:                     A6XpWruR1k1zuRSMCq9Zs68_Tmo.mft (raw, json)
Hash identifier:          uNTvRlW0dPF8+7/WtZ+iHvGkxlnoilaSJ8ofwfr+R4Q=
Subject key identifier:   9D:F2:C8:98:50:15:51:26:58:54:B4:1A:D4:94:1D:69:56:94:AE:50
Authority key identifier: 03:A5:E9:5A:BB:91:D6:4D:73:B9:14:8C:0A:AF:59:B3:AF:3F:4E:6A
Certificate issuer:       /CN=03a5e95abb91d64d73b9148c0aaf59b3af3f4e6a
Certificate serial:       01A0D124D8E2DDC76E22A20A360B72BDB90A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A6XpWruR1k1zuRSMCq9Zs68_Tmo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/5aa284-2414-4558-beb6-7d4be068c9a5/1/A6XpWruR1k1zuRSMCq9Zs68_Tmo.mft
Manifest number:          19FF
Signing time:             Thu 24 Sep 2026 02:00:47 +0000
Manifest this update:     Thu 24 Sep 2026 02:00:47 +0000
Manifest next update:     Fri 25 Sep 2026 02:00:47 +0000
Files and hashes:         1: A6XpWruR1k1zuRSMCq9Zs68_Tmo.crl (hash: lHc8lToQRVi7dViESjxSmtuuqju/LnioBlBxpnvFLCs=)
                          2: NblPR7Tg9qXyBwDpSLn1IRwnl3c.roa (hash: zusdcQ311HfrHxRGstvqvW1zRRtHoFAfhONB+l4PRMU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/5aa284-2414-4558-beb6-7d4be068c9a5/1/A6XpWruR1k1zuRSMCq9Zs68_Tmo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/5aa284-2414-4558-beb6-7d4be068c9a5/1/A6XpWruR1k1zuRSMCq9Zs68_Tmo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A6XpWruR1k1zuRSMCq9Zs68_Tmo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 18:27:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:24:d8:e2:dd:c7:6e:22:a2:0a:36:0b:72:bd:b9:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03a5e95abb91d64d73b9148c0aaf59b3af3f4e6a
        Validity
            Not Before: Sep 24 02:00:47 2026 GMT
            Not After : Sep 25 02:00:47 2026 GMT
        Subject: CN=9df2c898501551265854b41ad4941d695694ae50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2f:61:64:59:25:0f:53:44:f1:04:db:72:13:
                    93:c0:7f:94:97:c9:ed:5e:20:ab:12:01:a5:b0:de:
                    bc:57:20:7a:9a:72:e0:3f:23:b1:ff:97:f4:17:ce:
                    8d:ce:0a:37:0e:a6:4f:4f:ff:b7:a7:71:00:8e:b8:
                    29:8f:2b:5f:f9:11:20:5b:9c:d1:4c:b9:e9:73:92:
                    ed:e8:1f:32:ce:37:f0:99:03:8d:f1:31:16:ea:9e:
                    25:b7:14:9d:53:64:90:89:7d:45:7c:90:fd:9b:1b:
                    be:ad:ba:59:c8:c8:e1:a4:99:1d:b5:68:63:80:ee:
                    ec:d5:9e:ac:1d:8c:4d:21:3b:dc:b0:67:ad:30:9d:
                    2d:ae:50:b1:1f:f9:dd:71:41:52:d2:d0:64:ba:74:
                    37:62:01:e4:8a:70:48:51:42:89:5d:f7:99:82:56:
                    76:73:87:0a:bb:72:59:45:00:4d:bd:ee:84:df:d4:
                    88:39:2e:01:1e:4e:39:81:bd:fa:04:c7:01:50:9d:
                    0b:99:e2:20:ee:8b:45:29:a8:81:9b:6b:86:4a:d2:
                    61:43:1e:11:bf:6a:9a:76:c7:ab:cd:2f:7c:dc:4a:
                    24:77:6b:a7:e6:b5:83:cd:14:98:44:24:c0:8e:8a:
                    72:58:74:4a:dc:61:0d:ec:18:65:b9:08:58:dd:3b:
                    3d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:F2:C8:98:50:15:51:26:58:54:B4:1A:D4:94:1D:69:56:94:AE:50
            X509v3 Authority Key Identifier:
                keyid:03:A5:E9:5A:BB:91:D6:4D:73:B9:14:8C:0A:AF:59:B3:AF:3F:4E:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A6XpWruR1k1zuRSMCq9Zs68_Tmo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/5aa284-2414-4558-beb6-7d4be068c9a5/1/A6XpWruR1k1zuRSMCq9Zs68_Tmo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/5aa284-2414-4558-beb6-7d4be068c9a5/1/A6XpWruR1k1zuRSMCq9Zs68_Tmo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:8d:20:b1:3a:77:34:77:3f:47:af:88:39:6e:bc:37:2c:ca:
         ba:08:f9:e7:9b:a8:f2:ce:b5:ac:8d:f2:85:3e:32:b6:99:79:
         4c:a5:cc:db:11:b7:fb:b8:a2:82:bb:04:df:7e:83:c3:a5:52:
         4a:4d:c6:03:26:7d:a1:ee:ae:2b:b3:87:81:d6:d0:6b:68:73:
         85:7e:09:8d:39:e9:2f:d6:de:d7:e1:04:1b:70:25:48:8a:69:
         ae:39:24:b0:e7:b8:1d:c2:1c:8a:3d:72:7c:37:a4:da:27:26:
         03:30:f4:90:1e:27:a7:46:ef:4e:9b:df:dd:1e:d3:c9:49:62:
         38:45:4a:a8:2b:b0:02:cc:a2:e6:8e:27:a4:e1:17:22:f4:5c:
         5d:15:73:ac:8f:ed:6c:a7:3f:09:ea:3d:80:ab:82:6e:66:69:
         86:d7:ec:9a:1a:41:12:83:bb:4b:ec:b7:0d:9a:a7:ed:d1:43:
         82:97:89:99:0b:61:d7:56:b7:a0:0e:c8:01:08:eb:84:a8:23:
         86:f3:4f:cf:d1:ee:cb:61:e5:cc:76:be:5c:d8:c8:11:1b:9a:
         62:83:ab:4e:0e:d5:cb:6c:10:ed:26:be:4c:e7:c8:8f:fa:69:
         95:d6:4c:be:44:6a:2a:2e:f1:be:67:6b:d3:04:5f:f7:5a:22:
         72:73:a5:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 05:31:29 2026 by rpki-client