Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/p0j74dfTpqpHTeQ_qIXOLQkcUps.mft
File:                     p0j74dfTpqpHTeQ_qIXOLQkcUps.mft (raw, json)
Hash identifier:          +ptzeQRKujClng30Jit1vIckq1mWFBvAq4icjuN6q3o=
Subject key identifier:   37:53:FA:FF:3B:D4:FB:45:42:5B:FE:20:BE:60:CD:FB:A1:27:EF:96
Authority key identifier: A7:48:FB:E1:D7:D3:A6:AA:47:4D:E4:3F:A8:85:CE:2D:09:1C:52:9B
Certificate issuer:       /CN=a748fbe1d7d3a6aa474de43fa885ce2d091c529b
Certificate serial:       01A0D538F7732B3FE51DAB444DC7E8CF4E4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p0j74dfTpqpHTeQ_qIXOLQkcUps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/p0j74dfTpqpHTeQ_qIXOLQkcUps.mft
Manifest number:          17C0
Signing time:             Thu 24 Sep 2026 21:01:15 +0000
Manifest this update:     Thu 24 Sep 2026 21:01:15 +0000
Manifest next update:     Fri 25 Sep 2026 21:01:15 +0000
Files and hashes:         1: X2Acde_AXJbiIzf4WSQxKTMikWM.roa (hash: BQtrWQacm7ByC/7TCno2qFJsSN/6VxyfhO1qrX07bW4=)
                          2: p0j74dfTpqpHTeQ_qIXOLQkcUps.crl (hash: 0yAfzUSQEasHxeMqz273ZAkDz65ywLDTAAS5CgeTwmQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/p0j74dfTpqpHTeQ_qIXOLQkcUps.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/p0j74dfTpqpHTeQ_qIXOLQkcUps.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p0j74dfTpqpHTeQ_qIXOLQkcUps.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 14:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d5:38:f7:73:2b:3f:e5:1d:ab:44:4d:c7:e8:cf:4e:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a748fbe1d7d3a6aa474de43fa885ce2d091c529b
        Validity
            Not Before: Sep 24 21:01:15 2026 GMT
            Not After : Sep 25 21:01:15 2026 GMT
        Subject: CN=3753faff3bd4fb45425bfe20be60cdfba127ef96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:d3:80:42:bf:2a:12:e0:b9:ad:8f:0a:18:7c:
                    ac:3a:27:86:69:f6:aa:4d:41:61:08:70:30:8b:0e:
                    cb:5c:55:e7:8f:bf:a9:f8:ad:e2:24:96:c6:6c:0c:
                    e0:0a:7e:ed:ea:27:56:16:39:7a:c2:65:b9:32:ac:
                    5a:2e:35:f9:93:72:66:33:24:5c:aa:bd:55:c9:1e:
                    77:8b:a2:04:0d:40:fc:0d:ea:5f:ea:d1:67:a2:5e:
                    3f:6d:68:1e:2f:6e:96:40:1d:36:e6:1c:1e:26:3c:
                    22:ee:1a:a5:58:01:21:4d:f6:ce:a5:52:ad:be:a8:
                    fb:73:96:6c:81:07:d8:b5:e4:e5:34:f8:be:e6:03:
                    56:4b:bc:5f:34:8c:f8:7e:82:63:7a:c9:bd:b7:1e:
                    56:d6:3e:d5:0f:94:b0:76:5a:c1:1e:49:44:f7:c8:
                    1b:a6:ad:ea:e3:b9:24:e4:f4:9d:f1:ae:30:af:ac:
                    84:45:52:e3:9f:dc:e9:e2:2e:0b:a0:b8:0a:31:31:
                    f8:50:c7:56:19:d3:d1:13:b3:81:e5:a3:77:a4:e9:
                    54:51:57:58:7b:a6:4d:06:02:ad:9a:13:04:ac:8d:
                    b1:d7:f1:a9:9f:0f:16:d5:8e:55:1b:69:58:d9:ca:
                    eb:35:ea:06:5a:33:98:e7:5e:8b:92:fa:4d:e6:dc:
                    e8:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:53:FA:FF:3B:D4:FB:45:42:5B:FE:20:BE:60:CD:FB:A1:27:EF:96
            X509v3 Authority Key Identifier:
                keyid:A7:48:FB:E1:D7:D3:A6:AA:47:4D:E4:3F:A8:85:CE:2D:09:1C:52:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0j74dfTpqpHTeQ_qIXOLQkcUps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/p0j74dfTpqpHTeQ_qIXOLQkcUps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/p0j74dfTpqpHTeQ_qIXOLQkcUps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:f4:79:03:c2:4e:67:d4:2c:55:bb:48:38:d8:9d:4e:00:08:
         94:01:8c:d6:b5:00:25:04:f4:7b:49:7c:15:92:ca:aa:8f:3a:
         c2:17:a4:ba:1a:69:fc:9b:a8:06:24:68:bf:4e:c5:86:6b:b8:
         08:8c:0d:8c:24:73:57:83:8f:2b:c4:d3:f3:83:17:8a:31:7b:
         d9:2c:c4:0c:02:61:26:04:78:2c:28:87:41:37:36:e1:51:4a:
         c9:14:92:5b:05:86:14:bf:a4:52:5b:ed:a7:50:14:e9:ae:5b:
         4a:71:c1:0d:89:d5:18:70:ba:12:57:23:66:e4:27:5d:ae:82:
         f0:9b:fd:f0:76:13:6a:99:f1:de:ec:6f:eb:4c:18:2e:42:cb:
         2c:9c:15:45:d3:fc:c7:e2:7a:3e:33:93:db:b0:66:00:a6:56:
         71:42:fa:78:b1:13:31:07:67:8d:11:ac:da:67:06:7e:03:ca:
         3c:f1:83:5c:23:d7:1c:7b:7c:f7:97:4a:88:52:6d:8e:49:7b:
         32:e9:d7:a0:04:22:a5:37:09:90:14:4f:12:e6:07:39:a3:cb:
         fa:25:bc:19:da:da:67:c9:8d:6e:a8:54:e9:6e:27:35:6a:09:
         e0:d3:a0:68:55:26:59:a4:7a:ec:4e:95:5f:7b:4c:20:3b:02:
         1a:71:86:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 01:01:21 2026 by rpki-client