Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.mft
File:                     A39TL6Ji9ca9lhW8151u3UPy4HU.mft (raw, json)
Hash identifier:          SkN4fgB0Cng2ARPwS6aHF5R5aekAMRojITJKOvakUPg=
Subject key identifier:   A7:EA:28:50:AE:20:A7:BF:12:D9:32:CC:76:44:48:45:2F:E7:6F:38
Authority key identifier: 03:7F:53:2F:A2:62:F5:C6:BD:96:15:BC:D7:9D:6E:DD:43:F2:E0:75
Certificate issuer:       /CN=037f532fa262f5c6bd9615bcd79d6edd43f2e075
Certificate serial:       01A0D72755846B7CF2C4F4809D5A6678C021
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A39TL6Ji9ca9lhW8151u3UPy4HU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.mft
Manifest number:          1A70
Signing time:             Fri 25 Sep 2026 06:01:14 +0000
Manifest this update:     Fri 25 Sep 2026 06:01:14 +0000
Manifest next update:     Sat 26 Sep 2026 06:01:14 +0000
Files and hashes:         1: 0kDLFicUYCSnk5qezsAnlqD_YsQ.roa (hash: nPUI+tPRgC8/2WDdTR0OhIepUfEAFxE9m9YTijKjEm8=)
                          2: 5S_7thf2DaNAtWCpIaM3S8JGyIw.roa (hash: gFO7mmA7nFE7H8OIcfxRMIamOyG5pl0gNHLu/ghYBzU=)
                          3: A39TL6Ji9ca9lhW8151u3UPy4HU.crl (hash: eWk6IITEsPx/94ikXEu4lwjb58Gj1X+8xupHPXxaAKE=)
                          4: okyJ_dyqGcdnFwHJe7BtYHyXka8.roa (hash: 4dVv/6YLlqIKpJZjxm1+2Z9rbJ0osG+l17eURfhyO4s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A39TL6Ji9ca9lhW8151u3UPy4HU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 23:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d7:27:55:84:6b:7c:f2:c4:f4:80:9d:5a:66:78:c0:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=037f532fa262f5c6bd9615bcd79d6edd43f2e075
        Validity
            Not Before: Sep 25 06:01:14 2026 GMT
            Not After : Sep 26 06:01:14 2026 GMT
        Subject: CN=a7ea2850ae20a7bf12d932cc764448452fe76f38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:95:70:d8:15:3e:cf:34:ca:32:9c:c2:d6:bc:
                    99:c7:d6:0e:33:d2:e6:1b:67:9e:95:5b:a2:91:5c:
                    66:d8:ed:91:6a:70:90:2c:6e:17:7c:46:7b:36:d9:
                    bc:3d:d4:55:5a:66:25:54:9f:ba:f4:90:aa:44:74:
                    67:1e:e9:2e:60:58:38:d2:dd:9c:d9:6d:19:92:84:
                    6a:16:c6:cb:a1:92:e3:b0:01:f1:19:cb:f8:7a:46:
                    70:53:f2:1d:bb:4a:0f:97:75:75:5d:ad:4b:be:4d:
                    e8:0a:57:e1:21:21:3d:42:4f:e5:53:2b:3e:c4:80:
                    62:4e:d6:bb:c7:c8:98:fc:fd:6a:bc:ac:1a:25:ca:
                    c4:2c:ca:22:62:67:19:4f:23:f4:ec:95:b1:cb:af:
                    45:cc:e6:5e:9e:c8:cf:7f:96:a7:23:5b:0d:b1:21:
                    9e:f7:14:1f:c5:86:55:0c:39:da:f1:99:f6:b7:ac:
                    ae:2c:92:31:d0:48:f7:e5:02:5a:d3:0b:f2:ee:22:
                    5b:69:28:02:84:1f:e9:6f:0e:bb:f7:52:c9:a7:a0:
                    d4:f8:35:ec:88:09:36:55:61:59:29:e4:05:c8:55:
                    5d:45:39:2d:01:55:c0:52:30:a0:7e:87:b7:7b:4e:
                    61:5c:32:75:ad:29:0d:9e:92:74:13:d2:f9:db:6f:
                    ce:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:EA:28:50:AE:20:A7:BF:12:D9:32:CC:76:44:48:45:2F:E7:6F:38
            X509v3 Authority Key Identifier:
                keyid:03:7F:53:2F:A2:62:F5:C6:BD:96:15:BC:D7:9D:6E:DD:43:F2:E0:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A39TL6Ji9ca9lhW8151u3UPy4HU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:d9:88:94:c2:eb:4c:07:9a:c8:b4:64:23:25:0d:d0:ed:79:
         78:24:ad:b5:15:b9:96:b9:7c:7c:3f:ee:ed:10:c1:35:e8:83:
         83:5e:1d:55:6b:4c:42:cc:b5:38:cf:c1:66:81:c3:49:d9:2e:
         4a:b4:63:ce:a2:28:91:3e:da:b4:05:a2:a9:f5:a3:f0:b2:4f:
         f9:f3:a7:6b:d7:fe:72:39:25:0d:f5:57:64:94:21:74:50:3e:
         d8:f9:f9:04:bd:44:17:46:84:5d:d5:26:7f:84:b7:d8:4b:35:
         31:61:6e:0c:15:0f:9b:f8:ac:e1:09:30:aa:ed:47:e8:5e:b3:
         a7:63:5e:5a:06:96:48:79:b3:54:16:69:05:11:8a:4c:10:b5:
         a6:f6:cc:46:60:06:ae:07:49:07:93:59:19:a6:fb:d2:80:ab:
         78:28:74:1e:76:3d:03:12:68:4c:a1:b4:8c:0d:6d:12:25:73:
         e9:e0:3f:ff:f3:82:dd:d7:59:77:81:c2:33:06:3d:05:0b:88:
         b1:31:01:e6:a0:9f:27:67:0c:ff:c0:06:8a:42:ea:ce:6a:3f:
         97:8b:db:1c:f0:d7:6d:07:ed:3c:3d:14:5c:25:e0:44:dd:77:
         e5:89:ca:f2:4b:98:0d:9f:60:19:45:a7:d4:48:ac:54:f8:9a:
         20:17:5d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:40:54 2026 by rpki-client