Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft
File:                     cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft (raw, json)
Hash identifier:          azqMI1MEWFk0eYizokz2cB7g/yHgm4zqH0D5PDBQ0bw=
Subject key identifier:   51:A1:F4:CA:7A:30:89:4D:44:C0:EF:73:A2:E3:1A:5F:48:30:18:61
Authority key identifier: 71:2F:F1:1D:D0:C6:6C:E6:7F:E0:F1:D7:49:C0:90:9E:F3:41:8D:29
Certificate issuer:       /CN=712ff11dd0c66ce67fe0f1d749c0909ef3418d29
Certificate serial:       01A0EC9C90EAA9C2E4DA94FD880CCD0499DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cS_xHdDGbOZ_4PHXScCQnvNBjSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft
Manifest number:          0E95
Signing time:             Tue 29 Sep 2026 10:01:18 +0000
Manifest this update:     Tue 29 Sep 2026 10:01:18 +0000
Manifest next update:     Wed 30 Sep 2026 10:01:18 +0000
Files and hashes:         1: 16srEBoxiiP_SLONARpHEy8GOoo.roa (hash: +6A67bqXKJfVetajXvC/jcqmg3rLZdsfP1x5JHp+/TM=)
                          2: cS_xHdDGbOZ_4PHXScCQnvNBjSk.crl (hash: 1Hxo1Xlyr8R1XVVY4v/Vm9j1rdLd47fma5jZ4e64aZo=)
                          3: fERV_JWJtZ06djuribfR-EanimI.roa (hash: 1SfqauH/gyHrveo9ouFTP8dPyATzr66l3d0+S3nbdG8=)
                          4: fEvs1D6h_tnnMzXsm5m1S12m8tQ.roa (hash: Vr/ir+k302yq1Y+i5sBWnYUalv9cePo9w43+EMlEP7A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cS_xHdDGbOZ_4PHXScCQnvNBjSk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 10:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ec:9c:90:ea:a9:c2:e4:da:94:fd:88:0c:cd:04:99:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=712ff11dd0c66ce67fe0f1d749c0909ef3418d29
        Validity
            Not Before: Sep 29 10:01:18 2026 GMT
            Not After : Sep 30 10:01:18 2026 GMT
        Subject: CN=51a1f4ca7a30894d44c0ef73a2e31a5f48301861
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:f4:b7:32:3f:b4:54:b6:e6:17:19:e1:b2:37:
                    94:e2:f7:46:bd:7d:5f:05:4e:28:8a:d5:5c:ed:37:
                    78:ce:eb:60:94:3c:3a:a5:b3:20:3c:d2:78:c7:91:
                    a3:0a:61:bd:11:e6:7a:aa:cb:77:6e:43:27:43:c2:
                    1e:50:7e:d4:fe:d2:4c:5a:87:0b:3c:b9:9c:b9:b9:
                    19:1d:7e:dc:f3:b8:3f:71:52:e9:e8:ff:f4:5e:3c:
                    bf:b8:76:a3:fc:d6:13:e9:07:00:35:50:4f:49:0b:
                    27:f1:62:fe:8a:bb:60:c0:ee:38:c0:77:90:4e:4b:
                    8f:5a:a5:02:d2:a4:5e:50:ef:cd:38:75:63:9d:83:
                    47:e5:90:1a:18:bf:8e:be:a3:bf:6c:29:eb:84:ba:
                    b3:3b:1c:60:ea:9f:ce:aa:c3:4a:72:5b:5d:80:32:
                    b2:ed:d8:6d:98:e2:1f:38:91:98:88:53:8d:46:8d:
                    2f:25:a4:1e:ad:7a:55:c8:a3:bf:d5:29:81:b8:a3:
                    53:9a:f4:12:ce:55:63:48:48:84:ae:3b:c2:56:64:
                    85:86:84:c4:ad:76:f2:49:9b:ce:cf:ee:d4:c8:ed:
                    73:00:48:00:63:b1:4c:f8:19:da:da:62:a5:9e:f0:
                    06:4f:28:4e:94:22:08:5e:24:03:aa:e7:7d:b7:d7:
                    12:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:A1:F4:CA:7A:30:89:4D:44:C0:EF:73:A2:E3:1A:5F:48:30:18:61
            X509v3 Authority Key Identifier:
                keyid:71:2F:F1:1D:D0:C6:6C:E6:7F:E0:F1:D7:49:C0:90:9E:F3:41:8D:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS_xHdDGbOZ_4PHXScCQnvNBjSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:00:db:80:af:c8:a6:89:ed:54:8c:90:51:81:12:bf:72:04:
         6b:98:05:19:4f:47:6a:e2:c9:64:61:99:ee:2c:dc:ef:a6:a5:
         ec:3b:ac:ce:85:5a:e5:1b:e3:a1:f0:88:08:da:4a:3f:bf:f4:
         0f:78:06:9c:9c:9e:af:c5:40:28:12:ca:5a:8c:1d:6a:40:ce:
         d1:76:73:ed:ca:52:b9:1d:e3:0d:01:db:57:d5:e1:96:30:d2:
         e2:6d:0e:e2:36:fa:1c:13:bf:cd:96:90:b6:ce:b2:b8:27:b9:
         77:1a:b5:2f:30:76:6f:47:33:67:75:6c:6a:43:3c:36:ce:71:
         56:33:7f:11:e3:53:67:b2:e6:18:27:14:61:2e:2a:d0:93:7f:
         02:22:88:8d:37:3e:1f:d4:30:16:54:0f:bf:75:89:ac:6a:3c:
         4d:02:d9:dc:10:47:d2:85:0f:b4:35:57:02:22:40:b0:49:41:
         4f:b5:af:40:94:dc:40:22:44:24:d2:98:83:1d:35:0c:6c:d4:
         92:75:cf:a5:ca:02:e0:bc:9b:8a:58:a9:75:db:cb:66:f2:08:
         de:4d:14:dc:10:eb:cd:db:e8:8a:28:84:50:16:39:61:89:7f:
         d0:f7:ed:c5:4d:41:b9:38:8b:81:e9:15:2b:a2:dc:98:cb:9f:
         43:c9:d3:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 19:50:48 2026 by rpki-client