Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/07f907-f796-4d7b-b1cc-72b8d6dd37b3/1/A56X4z1nx-KVACipQeW9DbJmV_0.mft
File:                     A56X4z1nx-KVACipQeW9DbJmV_0.mft (raw, json)
Hash identifier:          7150I3SJc+lNLTfIUrmMAaq7txURW/XuCCk3HbS1q2I=
Subject key identifier:   D3:13:2A:F0:19:70:2F:2E:27:20:EC:D5:41:22:1D:81:B6:F8:71:F8
Authority key identifier: 03:9E:97:E3:3D:67:C7:E2:95:00:28:A9:41:E5:BD:0D:B2:66:57:FD
Certificate issuer:       /CN=039e97e33d67c7e2950028a941e5bd0db26657fd
Certificate serial:       01A0D6B9CAACE67A67538F59F8AC669A991B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A56X4z1nx-KVACipQeW9DbJmV_0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/07f907-f796-4d7b-b1cc-72b8d6dd37b3/1/A56X4z1nx-KVACipQeW9DbJmV_0.mft
Manifest number:          EA
Signing time:             Fri 25 Sep 2026 04:01:35 +0000
Manifest this update:     Fri 25 Sep 2026 04:01:35 +0000
Manifest next update:     Sat 26 Sep 2026 04:01:35 +0000
Files and hashes:         1: A56X4z1nx-KVACipQeW9DbJmV_0.crl (hash: E4TjiBzrZiPCy450ClKHYnJNNfys3Qvq9F61iEQCndU=)
                          2: h6DuUWmzZbBVJl1gmp2hlfcqO7g.roa (hash: UQw3UzGzjt+F9tMKj8CUe8EMOCgAJJylkc7Y7hD8Fy4=)
                          3: hvfAzCtoE0ORBMYjcGw8oigdKcw.asa (hash: 72h3L4hXBvMvuCPqYCl4ziMbL9JELyu/c1jTdEmyvUA=)
                          4: ojQylV1In9b_cmWbkErVQtX_c0g.roa (hash: yXdKShEv9gKUMmqT53345vY7rE9y/T/S4WodyMW0wT4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/07f907-f796-4d7b-b1cc-72b8d6dd37b3/1/A56X4z1nx-KVACipQeW9DbJmV_0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/07f907-f796-4d7b-b1cc-72b8d6dd37b3/1/A56X4z1nx-KVACipQeW9DbJmV_0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A56X4z1nx-KVACipQeW9DbJmV_0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d6:b9:ca:ac:e6:7a:67:53:8f:59:f8:ac:66:9a:99:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=039e97e33d67c7e2950028a941e5bd0db26657fd
        Validity
            Not Before: Sep 25 04:01:35 2026 GMT
            Not After : Sep 26 04:01:35 2026 GMT
        Subject: CN=d3132af019702f2e2720ecd541221d81b6f871f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e5:64:69:69:a1:2f:d5:0d:ab:e1:70:88:5d:
                    b8:b3:19:89:e4:c2:2f:75:b2:31:68:a9:94:e4:4a:
                    da:32:0c:e2:a3:68:9a:4c:fd:9d:e0:4a:ff:48:6e:
                    8f:2b:96:87:af:34:bb:57:be:c9:8e:e7:be:66:c2:
                    77:48:4d:52:41:8d:cb:5a:51:a4:7a:50:20:13:47:
                    6f:70:45:d6:b0:e6:62:90:44:1b:2a:c1:c6:81:c9:
                    6a:e2:c0:c6:e0:b0:ef:cb:44:e4:4d:2c:b7:01:1b:
                    bf:89:11:b2:0b:d9:c8:09:f1:25:e2:66:0d:b4:28:
                    d2:5d:db:c3:38:2f:a7:53:a6:9d:1a:82:0b:e8:30:
                    49:c5:25:67:27:5d:99:a3:35:c8:33:14:a1:a0:be:
                    df:99:8e:98:e1:78:39:63:67:05:97:fb:8f:a9:4f:
                    bb:54:57:79:93:f5:e1:54:b9:6f:3e:bf:d0:31:fa:
                    bd:74:81:c8:e3:b4:70:09:8a:e5:a4:f6:f3:b0:91:
                    0b:6e:8c:0d:7c:90:d1:a6:2d:4f:45:3b:e2:be:cc:
                    65:eb:6a:85:c9:27:65:51:c1:33:a8:14:3d:9e:10:
                    60:fa:7b:39:00:5c:19:3b:52:4b:32:55:cd:13:51:
                    df:c5:d7:74:71:b8:3f:49:a0:cb:5b:a0:80:2c:31:
                    48:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:13:2A:F0:19:70:2F:2E:27:20:EC:D5:41:22:1D:81:B6:F8:71:F8
            X509v3 Authority Key Identifier:
                keyid:03:9E:97:E3:3D:67:C7:E2:95:00:28:A9:41:E5:BD:0D:B2:66:57:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A56X4z1nx-KVACipQeW9DbJmV_0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/07f907-f796-4d7b-b1cc-72b8d6dd37b3/1/A56X4z1nx-KVACipQeW9DbJmV_0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/07f907-f796-4d7b-b1cc-72b8d6dd37b3/1/A56X4z1nx-KVACipQeW9DbJmV_0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:4c:45:b0:bb:fd:8e:2e:0a:8d:a4:67:73:7d:23:05:25:2a:
         2f:8f:7c:d0:61:e4:f3:41:88:6d:46:8a:a4:43:24:1e:b5:aa:
         9c:a4:14:7d:53:0c:31:69:e3:6a:c4:08:23:63:20:a5:21:86:
         cb:78:e3:f4:b6:57:06:59:0e:89:c6:a3:14:6d:af:5d:d2:bc:
         e5:de:1f:3d:f0:09:9e:e4:19:50:03:13:37:6c:66:18:4d:d8:
         c2:be:bb:64:aa:22:e6:4f:c2:24:ac:63:d0:82:a9:5c:fe:85:
         12:a4:6c:57:74:d1:94:67:d1:35:5a:1d:54:31:9d:9e:9f:9c:
         9a:22:8b:01:49:22:f4:1c:30:67:45:98:f1:4c:24:e5:ff:80:
         d6:8c:0b:ac:a6:b4:4e:e6:04:41:de:db:13:61:e0:51:68:db:
         bf:19:11:05:cf:78:18:f8:7f:b5:2c:5d:94:35:1a:bc:1e:f6:
         d8:97:f1:e3:58:6f:36:53:bb:a7:29:08:99:74:96:d8:2e:01:
         dd:f3:68:64:27:88:53:f2:ee:95:a7:4e:1c:65:f8:83:23:44:
         f1:a9:7e:5e:57:a1:a8:8b:bb:c3:27:64:40:7d:84:e2:fc:dd:
         2e:ac:7d:b1:ec:fb:c8:2c:12:fe:2f:a4:c6:80:e8:7b:5f:88:
         5a:bf:3d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:09:59 2026 by rpki-client