Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/d211c2-6ca9-4803-96b3-2e194ac1ad6f/1/r-us3hVZeiga4rspMG3E2m3Pt14.mft
File:                     r-us3hVZeiga4rspMG3E2m3Pt14.mft (raw, json)
Hash identifier:          B6gJG5WvPrOfM3M//mu/YKHVszCovq4ommqoDRSqgY4=
Subject key identifier:   82:99:A0:38:66:57:F7:A5:23:13:6A:79:58:11:CF:CB:6E:54:94:46
Authority key identifier: AF:EB:AC:DE:15:59:7A:28:1A:E2:BB:29:30:6D:C4:DA:6D:CF:B7:5E
Certificate issuer:       /CN=afebacde15597a281ae2bb29306dc4da6dcfb75e
Certificate serial:       01A0EBF989834B79F4BA95F7A8C8D6C42D09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r-us3hVZeiga4rspMG3E2m3Pt14.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/d211c2-6ca9-4803-96b3-2e194ac1ad6f/1/r-us3hVZeiga4rspMG3E2m3Pt14.mft
Manifest number:          028F
Signing time:             Tue 29 Sep 2026 07:03:14 +0000
Manifest this update:     Tue 29 Sep 2026 07:03:14 +0000
Manifest next update:     Wed 30 Sep 2026 07:03:14 +0000
Files and hashes:         1: jdSx0T-sdrzr500OOr7Atdy3Z4E.asa (hash: nbjDNb/jtcCfwpceFtypmGiC8RlKHHL0LGrtqS6ZCo8=)
                          2: r-us3hVZeiga4rspMG3E2m3Pt14.crl (hash: dKWMKMfU8EBfnhaF0BSFa9mL+xIModZb4jfTE0jk93A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/d211c2-6ca9-4803-96b3-2e194ac1ad6f/1/r-us3hVZeiga4rspMG3E2m3Pt14.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/d211c2-6ca9-4803-96b3-2e194ac1ad6f/1/r-us3hVZeiga4rspMG3E2m3Pt14.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r-us3hVZeiga4rspMG3E2m3Pt14.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 07:03:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:eb:f9:89:83:4b:79:f4:ba:95:f7:a8:c8:d6:c4:2d:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afebacde15597a281ae2bb29306dc4da6dcfb75e
        Validity
            Not Before: Sep 29 07:03:14 2026 GMT
            Not After : Sep 30 07:03:14 2026 GMT
        Subject: CN=8299a0386657f7a523136a795811cfcb6e549446
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:13:92:19:00:23:89:6e:1f:13:ea:91:2a:ae:
                    4d:cf:2f:1a:67:d9:ac:3f:76:27:e5:0b:c6:a1:db:
                    bd:5c:02:d9:98:fc:59:fc:20:5d:ad:e4:4e:e2:b9:
                    cc:7b:55:59:24:9d:bf:dd:9c:52:32:63:79:a0:8f:
                    4a:25:29:47:0b:d7:56:38:26:52:e3:e6:99:6c:85:
                    aa:bd:ea:2b:c3:27:86:28:c1:21:8d:7c:e5:f8:1a:
                    4e:64:5a:94:46:97:70:b5:d2:0e:d0:5e:40:76:2a:
                    40:bd:ea:17:f6:fe:37:45:26:d0:63:9c:1d:f9:71:
                    83:43:e8:ca:a0:7c:23:2e:36:c9:6c:05:79:08:76:
                    ef:20:43:d0:10:03:8c:6c:ec:96:a7:c7:05:16:7b:
                    4a:34:38:1b:07:ea:df:71:0d:f5:6a:d4:5a:fb:d9:
                    c0:6e:1f:6b:a5:8d:8b:3e:fd:a3:d2:ec:23:37:d3:
                    d3:e8:f2:e0:1d:d7:d4:bc:09:e9:c9:92:32:0b:e9:
                    8e:a5:1b:5d:e0:fb:12:4a:24:f5:5c:08:3e:64:c2:
                    a4:ad:a8:0f:2b:4b:59:8a:ad:4b:ab:a5:4e:f8:0d:
                    1b:12:11:ae:00:c6:48:3a:b9:ff:11:3e:73:cd:63:
                    fc:8b:39:d2:a9:40:b1:4e:79:c8:f6:36:d8:81:af:
                    70:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:99:A0:38:66:57:F7:A5:23:13:6A:79:58:11:CF:CB:6E:54:94:46
            X509v3 Authority Key Identifier:
                keyid:AF:EB:AC:DE:15:59:7A:28:1A:E2:BB:29:30:6D:C4:DA:6D:CF:B7:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-us3hVZeiga4rspMG3E2m3Pt14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d211c2-6ca9-4803-96b3-2e194ac1ad6f/1/r-us3hVZeiga4rspMG3E2m3Pt14.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d211c2-6ca9-4803-96b3-2e194ac1ad6f/1/r-us3hVZeiga4rspMG3E2m3Pt14.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:47:84:62:24:7f:0e:95:2d:ea:61:3e:b3:f6:bf:9e:ee:e2:
         1e:d0:f6:11:59:1f:a2:a7:bf:6c:d1:63:5d:a8:a5:f5:2b:ae:
         75:97:16:24:2f:30:b5:20:57:bf:ea:5e:16:77:db:c7:05:63:
         00:19:b8:59:17:be:0a:b9:43:43:1e:a8:1c:9f:ab:31:f8:41:
         c4:61:79:9e:62:b8:4e:8a:d5:40:1f:e7:3c:2a:6d:18:57:47:
         89:de:66:9e:68:cb:e2:bb:74:cd:93:e4:4e:9e:fd:09:21:0e:
         c9:17:7e:81:06:4d:d1:e4:ed:f5:96:08:4f:9f:78:7b:11:7e:
         97:ea:a5:5f:b9:c5:82:4d:c4:1a:c9:36:d2:8a:6a:ad:79:42:
         0b:3a:31:9a:18:e8:50:8f:9b:46:f3:82:7f:b1:6e:33:d5:5c:
         c2:2c:61:d5:f4:e2:e8:9f:f9:c1:41:eb:b9:06:1a:75:f2:23:
         56:eb:b3:5b:69:f1:3d:bd:f4:d9:1c:b7:78:ab:1d:ec:d0:0f:
         33:43:26:b4:a8:8f:d9:0a:be:9c:67:7e:cb:ae:df:30:c1:75:
         ac:c8:1b:08:2e:78:72:56:2b:81:81:13:1a:35:ea:dc:61:8b:
         cd:fc:a7:c9:dd:82:1f:d9:38:21:3e:c6:e7:33:9c:57:cc:66:
         e9:bf:de:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 13:18:52 2026 by rpki-client