Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft
File:                     cS8iadFWM728cdjNP0WMvQP-Ax8.mft (raw, json)
Hash identifier:          wlkRYTH/pNll8ICWhavaizmIlRTYh9hpTOXyjEFfmcY=
Subject key identifier:   6C:80:41:72:FA:5C:F6:42:26:02:15:16:1F:63:CF:AD:99:69:DB:02
Authority key identifier: 71:2F:22:69:D1:56:33:BD:BC:71:D8:CD:3F:45:8C:BD:03:FE:03:1F
Certificate issuer:       /CN=712f2269d15633bdbc71d8cd3f458cbd03fe031f
Certificate serial:       01A0D15C219A7C1366896BD3807798268876
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft
Manifest number:          0E19
Signing time:             Thu 24 Sep 2026 03:01:11 +0000
Manifest this update:     Thu 24 Sep 2026 03:01:11 +0000
Manifest next update:     Fri 25 Sep 2026 03:01:11 +0000
Files and hashes:         1: 6Tbppy4MQkLuvQtyLGsGd3CPcic.roa (hash: 7/QkF9HhHe+dG7SWSPYfgjpwfSEFuQhLwXrd2nTq/qU=)
                          2: NzZA0ZJSkjRaWslFXPndZfar7cg.roa (hash: RJF0xypUlCqc73vpWjXekHDMqnQ2dCd2RLXFaZqKXeQ=)
                          3: T6_UDLgOp2Kr0SqLbwdbPGeDTkA.roa (hash: gTWxLHMemzdxPWumDbDMhn2BGfQjWXuVToW8lRVJiYA=)
                          4: W1ZhWsdodClad0dJ8wh53Ch0fp8.roa (hash: VKkRvsz7R9Hk3QEeT4dAIBuH8DXYchOllD8/vRJTJCI=)
                          5: cS8iadFWM728cdjNP0WMvQP-Ax8.crl (hash: vYPA5IvbgF+9oBNa4FnlcU4cao+EPlh9xR8aRXPefTs=)
                          6: iafYMwA1CChI3CF3y86ruCA7o6I.roa (hash: tTSoeaNC29Xke1fF6xeZHo/CiLM3GLD82IygoT7IYr4=)
                          7: iioQdMFsttIkzLsks2Jp19kCC1I.roa (hash: 8e3WC7/8HWnnhrJ3InF3EeTww9JbZ0JooKgafOgwKoI=)
                          8: yHbHdVra8JQS6bdIo32Jx7OYffk.roa (hash: ScC+mBQJVOrQxUSi9bIaW+yLlmfLXJYJdtutIzPb38o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:5c:21:9a:7c:13:66:89:6b:d3:80:77:98:26:88:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=712f2269d15633bdbc71d8cd3f458cbd03fe031f
        Validity
            Not Before: Sep 24 03:01:11 2026 GMT
            Not After : Sep 25 03:01:11 2026 GMT
        Subject: CN=6c804172fa5cf642260215161f63cfad9969db02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4e:9b:bf:18:91:bc:1d:0c:a3:c4:65:dc:7e:
                    f2:44:93:4a:8a:cd:97:67:ef:21:87:05:26:ed:30:
                    bc:07:4a:17:73:3c:6a:a9:28:be:3e:a7:f1:42:4e:
                    9e:3a:98:1c:44:12:bf:4a:9b:e8:89:e7:e3:3f:cd:
                    24:13:b6:cf:a7:e0:2a:05:7d:69:4d:ea:39:20:7d:
                    df:01:ef:20:f4:3c:49:3f:a8:27:1d:0b:8f:71:e5:
                    a5:41:92:f7:01:32:24:ce:10:29:ab:f7:56:0b:32:
                    71:c1:79:de:44:ff:91:a1:dc:e4:3f:fc:37:20:fc:
                    47:32:c7:f9:55:de:e6:de:20:5b:5f:ff:9c:8c:25:
                    39:ad:32:3f:9b:37:73:a8:e4:6c:1a:4d:f9:47:5b:
                    b1:e0:dd:67:80:32:8d:02:f5:e6:4e:ae:ce:db:96:
                    7b:84:7f:de:d7:56:0f:9c:e6:22:60:f8:a6:58:c4:
                    5b:c3:19:d6:5e:b9:39:07:be:d1:62:e8:13:9f:7b:
                    47:4e:1f:42:a0:98:5d:b7:f8:9d:86:51:f5:ff:fc:
                    ef:88:db:48:8d:96:04:ff:16:e8:71:36:be:e2:1a:
                    58:25:2d:e9:ae:b6:b4:91:fc:23:31:10:6d:9a:a3:
                    1b:a7:f1:42:4d:d7:38:15:c0:ed:ce:72:20:0d:71:
                    cc:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:80:41:72:FA:5C:F6:42:26:02:15:16:1F:63:CF:AD:99:69:DB:02
            X509v3 Authority Key Identifier:
                keyid:71:2F:22:69:D1:56:33:BD:BC:71:D8:CD:3F:45:8C:BD:03:FE:03:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:96:a4:db:47:7e:ee:ca:49:ff:66:69:f2:43:97:5f:0f:38:
         d9:58:eb:c1:4f:7c:61:1b:f2:88:34:6c:99:71:1e:eb:ec:1a:
         34:97:d5:6b:3c:73:a4:50:de:67:9a:72:8c:f7:3a:30:f0:db:
         cc:32:3c:c1:75:a4:08:5f:01:82:ec:08:c5:db:1f:3d:7f:77:
         26:3f:d0:38:6b:c3:a6:68:f6:db:b7:cc:6b:dc:9c:1a:a1:ba:
         b4:c2:80:2f:8c:69:bf:70:32:43:53:65:52:d6:80:86:52:d4:
         a0:8e:03:aa:12:fa:4b:65:df:3b:8d:43:d5:ed:cd:67:dd:17:
         45:76:f3:36:44:ff:af:b6:a7:93:9b:cc:c3:39:41:eb:9e:cd:
         7b:a2:be:63:f0:4b:b1:b5:bf:e6:4e:ff:c1:47:ec:38:c0:60:
         a6:65:b2:b1:41:63:40:2c:0d:3c:67:60:02:c0:6a:52:ee:0b:
         fa:a9:fb:17:04:58:f1:70:9a:a1:e7:66:26:eb:a7:e0:b9:50:
         46:65:b8:bf:dd:5a:0d:5c:02:5d:40:15:1b:81:8e:1c:c5:5e:
         03:b4:49:58:da:ce:0c:07:72:56:ee:5d:10:c2:28:bb:bf:1e:
         81:1a:b1:20:1b:c6:a5:b7:73:04:17:cb:62:44:c3:fd:ad:18:
         a5:a1:ef:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:53:52 2026 by rpki-client