Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/ACQ0xzoO6iLG5EEHLpPbd8foovE.mft
File:                     ACQ0xzoO6iLG5EEHLpPbd8foovE.mft (raw, json)
Hash identifier:          SBOUH5DFe/xUAFuIajPflJH5iKdh3LdlVIJe6wlmdls=
Subject key identifier:   4D:18:DF:3B:49:01:8B:D6:DD:17:4A:0F:6A:66:8D:63:3C:3E:1C:B1
Authority key identifier: 00:24:34:C7:3A:0E:EA:22:C6:E4:41:07:2E:93:DB:77:C7:E8:A2:F1
Certificate issuer:       /CN=002434c73a0eea22c6e441072e93db77c7e8a2f1
Certificate serial:       01A0D236F37E92AFA75F4B16F96449136FB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ACQ0xzoO6iLG5EEHLpPbd8foovE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/ACQ0xzoO6iLG5EEHLpPbd8foovE.mft
Manifest number:          1A6F
Signing time:             Thu 24 Sep 2026 07:00:11 +0000
Manifest this update:     Thu 24 Sep 2026 07:00:11 +0000
Manifest next update:     Fri 25 Sep 2026 07:00:11 +0000
Files and hashes:         1: ACQ0xzoO6iLG5EEHLpPbd8foovE.crl (hash: Tp07jmcajmnWyOBWGY5osm9uAmkEzaRImzIULGLViQg=)
                          2: HJenp_klGpUWyTtWkBHoP0hBZl0.roa (hash: I9ysN1ab+ypo8mIN52NnKabn+0AbPiYv+58+rJNvAU0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/ACQ0xzoO6iLG5EEHLpPbd8foovE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/ACQ0xzoO6iLG5EEHLpPbd8foovE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ACQ0xzoO6iLG5EEHLpPbd8foovE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d2:36:f3:7e:92:af:a7:5f:4b:16:f9:64:49:13:6f:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=002434c73a0eea22c6e441072e93db77c7e8a2f1
        Validity
            Not Before: Sep 24 07:00:11 2026 GMT
            Not After : Sep 25 07:00:11 2026 GMT
        Subject: CN=4d18df3b49018bd6dd174a0f6a668d633c3e1cb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a2:9d:d9:d6:ae:0d:74:8a:8d:c3:78:c4:13:
                    05:c1:ae:58:cc:a7:f4:76:f5:be:ec:52:19:04:d2:
                    be:21:d4:4b:b3:b5:46:75:ff:1f:2b:7e:10:a0:24:
                    00:e7:41:70:e8:70:41:7d:2b:4a:24:83:61:49:61:
                    04:eb:16:4f:76:12:02:59:c2:46:c8:d8:b4:12:f1:
                    ec:36:69:59:01:02:4b:8a:cd:42:4d:6c:e8:68:c6:
                    c4:f5:9b:93:74:08:db:f8:3e:ec:49:9e:e7:64:9c:
                    08:65:b3:ef:2b:7b:56:6c:92:c9:53:20:64:82:4c:
                    79:01:43:23:ca:34:0e:be:80:85:d2:75:5c:ef:d5:
                    17:cd:e9:bd:20:46:e5:70:ca:dd:5f:f7:9a:6d:e1:
                    6f:c8:3b:e0:85:ab:78:34:af:d2:ea:a6:69:21:69:
                    f5:02:d2:f2:ab:13:68:8d:22:7d:f7:a8:69:7d:47:
                    ae:06:e3:b1:88:93:62:86:ee:2f:92:21:ab:c3:94:
                    69:8e:ed:2e:eb:a0:01:e9:35:6e:13:f7:f2:6b:31:
                    03:5b:bc:7d:fb:e2:46:88:ac:b9:7f:13:75:a5:b9:
                    c3:f9:46:dc:4b:25:4d:4a:b2:96:9a:ae:6e:f1:7f:
                    a2:57:e9:8f:a3:b0:17:c2:9a:c6:1a:ec:ba:44:6a:
                    23:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:18:DF:3B:49:01:8B:D6:DD:17:4A:0F:6A:66:8D:63:3C:3E:1C:B1
            X509v3 Authority Key Identifier:
                keyid:00:24:34:C7:3A:0E:EA:22:C6:E4:41:07:2E:93:DB:77:C7:E8:A2:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACQ0xzoO6iLG5EEHLpPbd8foovE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/ACQ0xzoO6iLG5EEHLpPbd8foovE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/ACQ0xzoO6iLG5EEHLpPbd8foovE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:86:4d:6d:ab:c0:11:97:53:f7:bb:0b:fc:ce:d8:1a:bd:9f:
         ba:8b:40:74:1f:65:19:f6:f4:cd:d4:6e:e3:75:7b:d7:c2:a3:
         6d:25:d5:b9:2b:7b:1f:45:9f:6f:c1:5a:67:4f:7d:77:8b:8b:
         fe:8b:ca:75:c3:7b:5d:bc:e2:87:01:16:e3:da:0c:27:b5:2e:
         3f:a2:97:0a:12:f1:43:b6:6d:90:1e:87:e1:03:28:99:86:a6:
         82:ad:76:c5:a8:45:26:40:e7:e3:db:6d:84:12:54:47:62:c9:
         c2:b7:41:21:f2:6b:1d:d8:e4:f2:08:0b:d6:12:56:6f:f9:f7:
         67:b3:94:9d:3f:3a:31:65:a1:94:af:63:4d:61:8b:85:5d:e1:
         1f:5d:50:f2:2e:b6:0b:bc:ee:59:6d:bc:a5:90:38:b7:a5:84:
         d8:0a:f6:70:40:66:77:8b:a1:ed:ce:b4:e0:c2:d8:7a:54:42:
         1e:83:75:e8:77:1b:66:e3:9e:49:f6:c0:b2:73:fc:be:ee:24:
         f6:80:89:94:63:3b:da:56:94:f6:4f:b5:f4:cc:1d:0c:8b:a5:
         68:f3:78:4c:9c:56:51:93:fb:2c:37:1d:05:f3:c6:95:d4:08:
         d9:62:ef:8a:5f:5a:2c:a2:14:9d:ff:1f:de:eb:91:dd:63:ed:
         0c:7f:9b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:22:38 2026 by rpki-client