Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft
File:                     AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft (raw, json)
Hash identifier:          t9qF+sL+IOlbhZzlyiA0VxB1O0vr1M1UnkQoir92UdU=
Subject key identifier:   48:16:B9:B3:86:89:00:3E:9E:DE:85:64:81:C1:C4:22:64:ED:46:D7
Authority key identifier: 01:70:A1:69:B6:CD:41:10:22:27:9E:9F:F9:97:F1:34:FF:54:AB:1C
Certificate issuer:       /CN=0170a169b6cd411022279e9ff997f134ff54ab1c
Certificate serial:       01A0D0EE11258E5C3D924ED92C3FD3ACF727
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft
Manifest number:          1A89
Signing time:             Thu 24 Sep 2026 01:00:57 +0000
Manifest this update:     Thu 24 Sep 2026 01:00:57 +0000
Manifest next update:     Fri 25 Sep 2026 01:00:57 +0000
Files and hashes:         1: 0CvIXoHsvIs1B_YOF4uDh9JpSxE.roa (hash: 91sFZp4Lna3qg8mUoA4c/ZNk5BvTimCG0r/38G4vor4=)
                          2: 0mnkoAs85-mIhHxZL8fHwKRjWRc.roa (hash: eichc48YsRBfEc1NE+QI5LUu3kO43L633dCSshf5yAM=)
                          3: 5bPw81P_kxJyPAHehBzr4HJ5wlg.roa (hash: 4Hmum3YbvhBsvoDqD6ymCevyNK6B2cZ0Ry/48HKcZ6M=)
                          4: 6xtEtECX1hmiBfg2kCnuxEarwpg.roa (hash: 0EDHjBKP1TdEoYGKNKuRsh3vtzapWrWAjD4dmjk8Vc0=)
                          5: AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl (hash: 6JG5eKVL7h6/0Io+p0btzmprkIOCS8BRW59jK3zdy30=)
                          6: FyvKrQlLQZ08OBN_anf4pBjOJb4.roa (hash: +pZffx5xsLckndXmwboiF/Rz+edr9+ScKLx8uBSEPfQ=)
                          7: Jfl2HZOv0aOpTlrzfTjwSjaabBA.roa (hash: 627r3CnYmsat7UpuE0Fbc/64Tgy4fFvd4NcmRN9aPno=)
                          8: yugxSbIwGxz1NU3UI7VHskkezds.roa (hash: SVtVdrynk9VJBORSgvdr3639uF3/kw+eYctyJwd4PmY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 18:27:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:ee:11:25:8e:5c:3d:92:4e:d9:2c:3f:d3:ac:f7:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0170a169b6cd411022279e9ff997f134ff54ab1c
        Validity
            Not Before: Sep 24 01:00:57 2026 GMT
            Not After : Sep 25 01:00:57 2026 GMT
        Subject: CN=4816b9b38689003e9ede856481c1c42264ed46d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:87:e1:67:63:e9:9c:2b:b7:57:fb:ce:9d:2a:
                    af:4b:e2:a4:bd:22:05:25:fe:4d:37:8e:bf:60:9c:
                    89:b2:65:cd:1a:01:d9:28:92:02:7c:79:5d:47:07:
                    e4:6c:48:01:05:7f:46:a9:5c:f8:76:4c:fc:fa:18:
                    ed:53:2e:0c:f1:28:d5:c1:52:74:e3:99:1c:bd:5d:
                    31:84:30:bc:4e:a7:12:4d:7a:8c:30:0c:b5:e9:21:
                    e3:97:a9:53:f1:d5:65:d3:c0:17:0f:ff:22:6f:a1:
                    23:01:33:5e:9c:87:64:a8:7b:ff:82:df:d5:18:1c:
                    bf:51:1b:58:a1:8a:18:8b:6d:2a:14:72:5b:bb:a2:
                    4a:c5:40:07:49:02:67:39:0c:92:e4:0f:08:15:f7:
                    37:9a:f6:c7:eb:d4:d3:95:3e:bd:3a:c1:4c:76:2b:
                    f2:bb:8e:84:a0:8a:68:26:0f:be:1e:fe:e7:0a:8f:
                    da:bd:18:37:38:35:50:50:fa:6b:26:08:3e:71:cc:
                    c9:fa:2b:19:fc:8b:69:20:14:fd:ca:42:5f:33:c5:
                    5d:a4:f9:45:7c:7b:86:05:af:2f:15:47:f5:bc:a3:
                    21:d8:8f:14:d2:88:24:69:79:90:1b:30:d9:4c:1a:
                    af:cf:0b:7f:88:9a:3c:09:f3:0f:8d:50:a9:f0:59:
                    84:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:16:B9:B3:86:89:00:3E:9E:DE:85:64:81:C1:C4:22:64:ED:46:D7
            X509v3 Authority Key Identifier:
                keyid:01:70:A1:69:B6:CD:41:10:22:27:9E:9F:F9:97:F1:34:FF:54:AB:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:16:ef:e1:ba:82:39:b2:c2:bb:76:ff:04:b2:6c:2d:58:24:
         09:34:00:d6:3e:8a:fb:9c:89:fe:c3:13:5a:0c:a2:ba:c0:0c:
         2a:e3:b4:5e:b8:9e:51:24:36:40:c0:55:ec:39:b8:65:15:f5:
         f6:29:4e:76:28:6c:24:c8:0b:fb:4b:eb:45:7a:b8:ee:a0:e0:
         35:aa:95:50:82:86:e6:e4:f5:03:95:5f:bd:8b:4e:f2:27:1b:
         15:76:fd:a7:8f:0b:25:27:04:3c:6c:31:2c:e2:ce:91:0f:1e:
         84:84:11:c6:2a:7f:0f:2c:b9:42:dc:a5:1e:bb:c4:74:4d:be:
         45:58:f7:16:d1:ea:12:5a:40:ca:bf:ec:f9:19:5e:e1:d9:84:
         78:87:a1:98:b4:99:b0:0a:d2:44:37:f3:0b:ab:a2:14:5c:f0:
         3c:c8:08:14:e9:5f:18:fa:86:f4:68:eb:ff:bd:e6:04:93:7d:
         be:0b:ed:ec:5c:3a:a1:32:57:c4:a4:98:1d:d8:86:55:ba:8f:
         e0:95:db:4f:6c:db:f7:fe:62:d5:80:5d:ae:a1:61:bf:20:49:
         1b:b8:c0:14:05:28:86:2a:86:98:37:73:14:ec:7c:a5:6e:57:
         d8:f0:d6:eb:84:07:3b:91:cd:0d:86:af:a9:11:9f:d3:c4:a5:
         23:d0:c3:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:19:43 2026 by rpki-client