Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/d5d1cd-0027-40af-819f-83a22a4faa4f/1/d4U3vcs1Mgx41ZgZpQs2HrlYILc.mft
File:                     d4U3vcs1Mgx41ZgZpQs2HrlYILc.mft (raw, json)
Hash identifier:          4cos/oVIUIo15FB8Um0ZjP5Heyrh3mN0Mp3ydQrlFfU=
Subject key identifier:   6B:AC:22:4C:7C:9F:23:2C:4C:CA:36:40:D9:4E:EC:B4:E6:8E:0A:ED
Authority key identifier: 77:85:37:BD:CB:35:32:0C:78:D5:98:19:A5:0B:36:1E:B9:58:20:B7
Certificate issuer:       /CN=778537bdcb35320c78d59819a50b361eb95820b7
Certificate serial:       01A0E02A80EEC5ED54D9FB6CB3E6A0648100
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d4U3vcs1Mgx41ZgZpQs2HrlYILc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/d5d1cd-0027-40af-819f-83a22a4faa4f/1/d4U3vcs1Mgx41ZgZpQs2HrlYILc.mft
Manifest number:          018E
Signing time:             Sun 27 Sep 2026 00:01:16 +0000
Manifest this update:     Sun 27 Sep 2026 00:01:16 +0000
Manifest next update:     Mon 28 Sep 2026 00:01:16 +0000
Files and hashes:         1: K2Dc5OBuZ-3GVexCh6zp51MBUis.roa (hash: c29k2Uu3E6+pH0/RU1RBK1xurercCYLwxnC+Kb8waAo=)
                          2: d4U3vcs1Mgx41ZgZpQs2HrlYILc.crl (hash: jP3VXULpWZCJWLlweIi/dFpZh2DEdmuV1elu+MXQHz0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/d5d1cd-0027-40af-819f-83a22a4faa4f/1/d4U3vcs1Mgx41ZgZpQs2HrlYILc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/d5d1cd-0027-40af-819f-83a22a4faa4f/1/d4U3vcs1Mgx41ZgZpQs2HrlYILc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d4U3vcs1Mgx41ZgZpQs2HrlYILc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 20:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e0:2a:80:ee:c5:ed:54:d9:fb:6c:b3:e6:a0:64:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=778537bdcb35320c78d59819a50b361eb95820b7
        Validity
            Not Before: Sep 27 00:01:16 2026 GMT
            Not After : Sep 28 00:01:16 2026 GMT
        Subject: CN=6bac224c7c9f232c4cca3640d94eecb4e68e0aed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ca:e2:14:d2:4a:53:c6:24:24:22:62:43:5c:
                    39:60:2c:64:55:c1:01:b7:75:cd:bd:9d:b9:be:ff:
                    74:db:12:62:1f:27:0c:31:11:97:de:5f:ed:54:49:
                    bf:c4:14:82:3b:0a:2b:57:77:a9:8b:cf:8f:64:90:
                    aa:3f:34:06:37:41:2c:a3:14:bf:43:cf:0b:be:5c:
                    80:40:35:bb:8a:7b:72:65:b0:f6:dc:bd:09:66:a1:
                    09:5b:e2:04:53:50:cb:fc:cd:aa:bc:e0:ca:73:75:
                    cd:1d:50:8d:a2:3b:e2:22:36:fc:71:86:e7:df:41:
                    aa:66:8e:aa:93:17:c0:d9:be:f8:a0:b9:35:20:fb:
                    a8:89:f0:8f:11:34:4d:0c:31:c0:18:39:d4:a1:00:
                    be:e4:c4:3f:14:78:3e:b4:a6:01:7f:ed:a1:eb:f6:
                    04:67:cb:0e:92:78:ee:53:c4:13:d9:cf:a7:72:e6:
                    50:88:7b:a4:58:99:9d:30:c8:20:c7:6f:c1:b1:db:
                    27:14:5b:2f:68:6a:0e:56:22:48:d8:7f:69:32:52:
                    6e:d7:11:33:03:5a:b7:81:8f:1f:a8:ba:40:bd:c6:
                    96:d6:17:3e:87:b1:e8:3e:6c:ae:da:ab:c3:46:e9:
                    61:09:da:3f:2f:1e:7e:99:3f:44:8f:f3:3e:f2:c3:
                    57:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:AC:22:4C:7C:9F:23:2C:4C:CA:36:40:D9:4E:EC:B4:E6:8E:0A:ED
            X509v3 Authority Key Identifier:
                keyid:77:85:37:BD:CB:35:32:0C:78:D5:98:19:A5:0B:36:1E:B9:58:20:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4U3vcs1Mgx41ZgZpQs2HrlYILc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d5d1cd-0027-40af-819f-83a22a4faa4f/1/d4U3vcs1Mgx41ZgZpQs2HrlYILc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d5d1cd-0027-40af-819f-83a22a4faa4f/1/d4U3vcs1Mgx41ZgZpQs2HrlYILc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:f8:a8:5b:81:61:f1:ea:ac:d1:2f:f1:a9:b9:7e:4c:6a:c2:
         70:9d:5b:f5:03:7f:2b:23:2a:69:41:8a:0d:59:38:d3:b0:94:
         13:fe:02:fe:74:6e:43:58:21:26:3c:95:8d:41:3e:03:aa:64:
         fd:aa:19:30:6c:26:b0:4a:c6:5e:b5:fe:a9:13:c3:c7:df:0c:
         33:e7:4c:f3:63:4a:21:89:50:d4:a9:a3:a5:ed:e4:65:0e:2e:
         fa:e2:e1:83:3d:b3:07:35:8d:c9:f0:7e:35:f0:4f:da:c4:7b:
         e2:6c:da:33:b8:ae:fa:eb:78:64:20:09:17:c7:cd:c6:c2:0d:
         34:62:52:79:42:2a:e5:0d:c1:94:d8:cf:7f:84:c6:fa:27:76:
         ba:b2:d9:3b:1f:0e:8e:3d:77:72:b9:06:81:04:07:4d:f7:b3:
         8a:1a:52:20:65:9c:ab:5d:7a:20:e7:16:3a:ce:95:b4:98:e0:
         a5:49:1b:94:c1:97:98:d9:dd:2e:00:15:c1:60:11:05:74:0c:
         6d:32:98:f0:5b:ce:d5:59:c9:48:6f:dc:fb:fc:42:43:e7:f6:
         ef:e8:0d:24:1d:6c:55:02:c9:59:38:bc:57:8b:d9:bd:ef:dd:
         01:11:21:9d:ff:94:a1:fa:07:59:9a:c6:7c:05:ee:eb:c2:ba:
         37:c4:36:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:51:17 2026 by rpki-client