Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/61db4e-3efc-462d-ab1f-e590e6b4cd0e/1/4Rzmt92aasCzJLpa2HOwr0ajktQ.mft
File:                     4Rzmt92aasCzJLpa2HOwr0ajktQ.mft (raw, json)
Hash identifier:          MsmHUelTOT6WCbeLkcxWgwU+CtNBNdBZxmy+GoF1wUM=
Subject key identifier:   59:BA:4F:EA:F2:F2:88:8C:B1:B4:50:49:BA:FA:E1:BA:37:15:03:7D
Authority key identifier: E1:1C:E6:B7:DD:9A:6A:C0:B3:24:BA:5A:D8:73:B0:AF:46:A3:92:D4
Certificate issuer:       /CN=e11ce6b7dd9a6ac0b324ba5ad873b0af46a392d4
Certificate serial:       01A0D727636DC5D7B8721CE0F07C6E6DA510
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Rzmt92aasCzJLpa2HOwr0ajktQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/61db4e-3efc-462d-ab1f-e590e6b4cd0e/1/4Rzmt92aasCzJLpa2HOwr0ajktQ.mft
Manifest number:          0484
Signing time:             Fri 25 Sep 2026 06:01:17 +0000
Manifest this update:     Fri 25 Sep 2026 06:01:17 +0000
Manifest next update:     Sat 26 Sep 2026 06:01:17 +0000
Files and hashes:         1: 4Rzmt92aasCzJLpa2HOwr0ajktQ.crl (hash: pFtoSsorL8DvORsOOS7GjvxyDVwVWTRaR+kgSO149Vw=)
                          2: cPYgxpTQJttUViNAAa1x_F8lekM.roa (hash: G9b5p61rO9ZEZmykx4lc6+UnUo8Kn3VRyuxj1NSSYeE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/61db4e-3efc-462d-ab1f-e590e6b4cd0e/1/4Rzmt92aasCzJLpa2HOwr0ajktQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/61db4e-3efc-462d-ab1f-e590e6b4cd0e/1/4Rzmt92aasCzJLpa2HOwr0ajktQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Rzmt92aasCzJLpa2HOwr0ajktQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 06:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d7:27:63:6d:c5:d7:b8:72:1c:e0:f0:7c:6e:6d:a5:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e11ce6b7dd9a6ac0b324ba5ad873b0af46a392d4
        Validity
            Not Before: Sep 25 06:01:17 2026 GMT
            Not After : Sep 26 06:01:17 2026 GMT
        Subject: CN=59ba4feaf2f2888cb1b45049bafae1ba3715037d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:98:51:bd:6f:c8:a7:38:78:c1:90:fa:ad:07:
                    d6:f1:e3:7c:08:63:20:60:50:40:68:48:25:9c:de:
                    3b:5b:5f:d8:22:4d:3e:5a:bf:7e:e4:f8:d9:d5:20:
                    e2:a4:cd:61:7d:74:07:b0:10:0f:cd:9c:39:b0:46:
                    2c:55:fe:98:cc:8a:ec:e8:bf:14:b4:c6:79:03:8c:
                    33:d2:28:ea:3c:a2:65:09:91:4f:e7:62:9d:98:dc:
                    29:23:bc:c7:65:41:80:d2:e2:24:4e:41:07:03:89:
                    2c:c9:99:e5:80:ab:50:82:9a:19:41:7e:08:bd:a5:
                    d6:59:54:c9:bb:73:a5:0a:49:eb:b4:d0:65:07:55:
                    97:f2:2a:d5:94:96:59:3c:53:39:5c:0d:84:51:c6:
                    67:27:0b:62:14:24:7a:f6:25:69:71:64:c0:f9:b6:
                    2a:5c:42:e3:4b:7d:9d:30:a1:a7:eb:73:8f:8a:8d:
                    8c:e3:e9:7a:1b:78:f2:ae:25:f5:76:54:1c:b1:a3:
                    4b:04:ab:9c:6f:7f:eb:60:0a:0b:2b:5a:aa:27:52:
                    fd:c8:f3:76:16:47:73:ec:5e:d3:b9:33:31:e1:c8:
                    c3:69:58:7b:63:39:ea:d1:60:4c:a4:63:fc:b0:86:
                    22:04:04:1e:a5:07:a0:b9:bd:88:9b:85:6a:ef:12:
                    5d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:BA:4F:EA:F2:F2:88:8C:B1:B4:50:49:BA:FA:E1:BA:37:15:03:7D
            X509v3 Authority Key Identifier:
                keyid:E1:1C:E6:B7:DD:9A:6A:C0:B3:24:BA:5A:D8:73:B0:AF:46:A3:92:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Rzmt92aasCzJLpa2HOwr0ajktQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/61db4e-3efc-462d-ab1f-e590e6b4cd0e/1/4Rzmt92aasCzJLpa2HOwr0ajktQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/61db4e-3efc-462d-ab1f-e590e6b4cd0e/1/4Rzmt92aasCzJLpa2HOwr0ajktQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:3b:99:27:74:dc:c4:7a:ad:37:a8:ff:41:16:46:cd:15:d0:
         2a:88:31:23:71:96:c5:80:c1:9e:5a:ca:5b:d5:db:dd:32:d3:
         ac:9b:f7:aa:9e:4e:1c:2b:b9:61:0f:69:70:f7:f6:fc:59:86:
         f2:ec:81:73:3d:08:af:35:55:4a:c5:89:30:0f:0c:1d:5d:35:
         8b:4b:22:bc:0e:0f:95:bd:d8:11:53:ea:57:47:17:d0:e1:50:
         6b:5f:b3:12:ba:a4:e4:58:aa:91:31:90:34:bc:b7:f5:d7:82:
         52:f6:99:cd:45:d8:aa:7c:5e:33:14:12:d0:8e:a2:82:ca:a1:
         dc:ac:a5:95:15:4f:aa:e0:4c:0a:04:06:df:e0:13:fc:25:c8:
         a1:d2:93:60:f1:76:d6:70:13:fb:18:6b:53:a2:64:95:28:d4:
         d6:ed:46:62:58:da:30:86:12:b5:fd:28:2c:8c:48:4a:c7:1f:
         d3:30:76:a5:a7:1a:e8:f0:45:30:85:df:a3:51:85:7a:3a:6d:
         4c:60:93:07:af:22:74:e2:ef:30:9c:9a:02:3e:dd:24:58:77:
         27:8f:c4:d8:a4:ba:f3:c8:4d:2f:9a:3a:08:81:53:73:43:90:
         87:d2:84:a8:7a:99:9c:3c:d3:6e:66:5f:6a:91:e6:b2:d7:a7:
         fb:c0:ca:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:45:24 2026 by rpki-client