Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/c5f9d5-7f4a-4e2f-ba4e-738886fd4edd/1/_utSjKSLH0R1gsVMz27XgHUbUdU.mft
File:                     _utSjKSLH0R1gsVMz27XgHUbUdU.mft (raw, json)
Hash identifier:          kjNCHFaGLJnaxV/Lx2+EkowHvNiLGrFTsUS2PJy4a6U=
Subject key identifier:   C7:8A:49:D0:91:92:FE:F1:8B:39:96:4E:B1:6D:AA:B7:D2:BE:A0:0A
Authority key identifier: FE:EB:52:8C:A4:8B:1F:44:75:82:C5:4C:CF:6E:D7:80:75:1B:51:D5
Certificate issuer:       /CN=feeb528ca48b1f447582c54ccf6ed780751b51d5
Certificate serial:       01A0D1926CC8374D0FC13A2B895237390724
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_utSjKSLH0R1gsVMz27XgHUbUdU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/c5f9d5-7f4a-4e2f-ba4e-738886fd4edd/1/_utSjKSLH0R1gsVMz27XgHUbUdU.mft
Manifest number:          0A3D
Signing time:             Thu 24 Sep 2026 04:00:29 +0000
Manifest this update:     Thu 24 Sep 2026 04:00:29 +0000
Manifest next update:     Fri 25 Sep 2026 04:00:29 +0000
Files and hashes:         1: 7_rG0Ys6N4MGKrUhbuLLuJOKJEE.roa (hash: Ak2EaVXWEuisf+jOK9GcgBrIGLgB4b6VE6wIZKk5k7w=)
                          2: H2qjaqkpwL5u41T0q_WKY3L5TkY.roa (hash: p+2kMb78SWk8CqMJN3/d8JhczlAwZKrwDn4bucPWqNw=)
                          3: S26hfP1BT8O4C447UhaCygwPQWI.roa (hash: +53cRX698lifV/VIJ2tyQ5f4Lx93epMoKg9qTm5GnSA=)
                          4: _utSjKSLH0R1gsVMz27XgHUbUdU.crl (hash: 8LI8pVhNzs5faSJQFn6Snusbdy6tsPloqTB+P/S5pe8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/c5f9d5-7f4a-4e2f-ba4e-738886fd4edd/1/_utSjKSLH0R1gsVMz27XgHUbUdU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/c5f9d5-7f4a-4e2f-ba4e-738886fd4edd/1/_utSjKSLH0R1gsVMz27XgHUbUdU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_utSjKSLH0R1gsVMz27XgHUbUdU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 04:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:92:6c:c8:37:4d:0f:c1:3a:2b:89:52:37:39:07:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=feeb528ca48b1f447582c54ccf6ed780751b51d5
        Validity
            Not Before: Sep 24 04:00:29 2026 GMT
            Not After : Sep 25 04:00:29 2026 GMT
        Subject: CN=c78a49d09192fef18b39964eb16daab7d2bea00a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a3:f9:c8:b3:0e:bb:c3:11:c2:e4:8e:c7:3f:
                    25:68:b7:e3:14:f7:79:d4:0f:11:a0:7c:1e:64:cd:
                    6a:f9:67:a5:f4:5f:52:4e:b1:c6:11:ea:58:45:41:
                    ed:39:37:ba:9e:c0:99:76:e4:f1:c4:0f:76:1d:a8:
                    38:c9:6a:5c:b6:db:6b:fb:27:eb:ef:9c:fd:8c:06:
                    9c:14:f9:87:18:d4:64:ab:a0:26:d3:ac:55:03:81:
                    a0:7a:e6:55:9c:07:10:42:f0:32:f0:81:52:0f:76:
                    4f:5e:15:2d:ea:d1:0b:eb:28:83:cd:74:20:a7:05:
                    f1:8d:bf:be:46:35:7b:1c:85:77:f5:89:84:7c:0a:
                    6f:4c:a2:8e:8b:69:2c:41:32:ba:3e:85:bb:f0:fe:
                    b8:08:5a:d5:ce:82:7f:01:9f:1c:19:c2:8f:13:c7:
                    13:76:64:8c:8c:fa:46:9d:3b:91:2d:67:87:4b:30:
                    68:0e:d3:d1:e4:7c:18:0d:2b:10:75:f4:75:5d:ac:
                    fe:e2:66:26:21:22:5c:72:76:aa:a9:08:d3:44:4b:
                    ec:3f:81:10:82:d2:5b:a2:d8:a0:57:8c:d2:16:47:
                    11:03:65:1e:57:e7:06:1f:fa:7c:1d:77:bc:c8:f8:
                    3f:1a:a2:fe:b3:a9:eb:27:d5:c1:37:6a:f1:54:65:
                    8a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:8A:49:D0:91:92:FE:F1:8B:39:96:4E:B1:6D:AA:B7:D2:BE:A0:0A
            X509v3 Authority Key Identifier:
                keyid:FE:EB:52:8C:A4:8B:1F:44:75:82:C5:4C:CF:6E:D7:80:75:1B:51:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_utSjKSLH0R1gsVMz27XgHUbUdU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c5f9d5-7f4a-4e2f-ba4e-738886fd4edd/1/_utSjKSLH0R1gsVMz27XgHUbUdU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c5f9d5-7f4a-4e2f-ba4e-738886fd4edd/1/_utSjKSLH0R1gsVMz27XgHUbUdU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:46:80:b3:dc:0e:d4:db:69:55:69:a5:12:8a:4f:7f:c3:7a:
         ad:b6:85:d4:4d:43:59:93:bd:0a:21:d4:12:98:08:bc:60:e8:
         d9:78:bd:5d:4c:8e:b7:8f:76:ae:f2:7f:2f:3a:35:51:7d:c6:
         a2:26:48:1a:d4:16:90:39:6c:97:bd:66:6e:4c:5d:28:20:05:
         2d:96:6e:bb:77:0f:da:9a:a0:80:22:b0:3a:23:b6:09:95:d5:
         a8:58:fb:f3:a5:fd:27:0f:6b:63:7b:9f:fa:5e:9a:54:74:f2:
         5d:2f:08:a0:2f:51:47:69:d8:01:7c:7d:9e:be:31:a6:d0:11:
         67:47:46:04:57:d9:f7:e4:46:c1:5e:01:17:92:36:57:a2:85:
         2b:8d:bf:d1:1e:83:19:a7:ff:61:23:a9:5d:2a:41:aa:32:f6:
         c8:76:eb:41:c7:7b:43:06:48:ff:54:b6:11:62:5f:b7:ef:ee:
         8a:d8:3c:5b:45:7a:67:a6:1b:d7:30:28:97:11:e8:01:ac:70:
         d7:7f:61:81:da:72:6b:a6:48:d3:b8:9b:f7:85:58:98:6e:fb:
         5b:6e:50:e9:89:cf:45:ac:f8:43:39:4f:28:20:f8:d7:17:95:
         cb:a6:3f:45:ce:c4:9e:8a:79:24:43:50:d3:a5:7f:ad:46:5b:
         d1:7b:17:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:46:22 2026 by rpki-client