Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.mft
File:                     rx7uIsUBU2MRinHSapRj3JN0uig.mft (raw, json)
Hash identifier:          QxvNcy3rhb/9Gm+v6LDeVvQwe1Pg/5unDqW4A1ij1po=
Subject key identifier:   0C:D7:40:BD:AC:71:A4:69:F2:88:B0:4A:54:26:41:14:10:F4:32:2A
Authority key identifier: AF:1E:EE:22:C5:01:53:63:11:8A:71:D2:6A:94:63:DC:93:74:BA:28
Certificate issuer:       /CN=af1eee22c5015363118a71d26a9463dc9374ba28
Certificate serial:       01A0CE5A4B588B6F9AC1BF8C5EA30823AC17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rx7uIsUBU2MRinHSapRj3JN0uig.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.mft
Manifest number:          0E2D
Signing time:             Wed 23 Sep 2026 13:00:19 +0000
Manifest this update:     Wed 23 Sep 2026 13:00:19 +0000
Manifest next update:     Thu 24 Sep 2026 13:00:19 +0000
Files and hashes:         1: lLnIh6czm0KWIQr0ccsD4cdToLc.roa (hash: kVLAgXuMBEFIQbZq7gNbnr/z2Vz4LT7MCr2JgEg80uc=)
                          2: rx7uIsUBU2MRinHSapRj3JN0uig.crl (hash: AQtAEImICHsq+jBakwNVeCIjAqJcFiWhzovbouJZEOM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rx7uIsUBU2MRinHSapRj3JN0uig.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 13:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:5a:4b:58:8b:6f:9a:c1:bf:8c:5e:a3:08:23:ac:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af1eee22c5015363118a71d26a9463dc9374ba28
        Validity
            Not Before: Sep 23 13:00:19 2026 GMT
            Not After : Sep 24 13:00:19 2026 GMT
        Subject: CN=0cd740bdac71a469f288b04a5426411410f4322a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:52:26:9b:f8:2a:fa:40:3f:2f:b9:69:2a:21:
                    ed:c2:e1:22:b4:34:0e:34:7f:35:b0:98:21:52:aa:
                    97:55:36:4c:97:b6:71:d7:bf:ec:13:c3:10:19:80:
                    30:63:95:bb:58:5e:79:30:e7:67:ec:a6:ff:32:47:
                    37:c1:93:01:b2:3d:99:e8:29:46:31:78:71:e5:84:
                    44:d2:68:36:be:10:98:c9:9b:c9:a7:b5:ea:9f:a3:
                    0c:21:24:fc:9e:66:57:99:38:9d:dd:69:64:2c:3d:
                    e9:06:24:85:ce:e4:22:24:00:67:9e:68:f8:27:e8:
                    d1:af:f9:4d:50:c1:17:ce:16:aa:14:5d:c7:f0:e5:
                    ed:be:55:25:c9:7d:43:e3:78:63:e9:54:6d:27:38:
                    ed:49:c2:74:65:7e:5e:0a:b9:85:d0:21:eb:1f:e1:
                    cb:88:d3:38:aa:0e:69:26:55:11:77:b8:32:e5:a4:
                    7e:c0:53:b2:f9:37:32:95:1e:9d:60:2c:cb:1a:03:
                    a3:ca:a8:5b:ae:d2:10:11:2b:bb:5d:26:c9:e9:1b:
                    9f:22:6d:1b:8b:38:3b:61:12:13:76:f8:f0:f0:dd:
                    1c:a4:61:68:81:17:65:a5:e2:a1:2d:b7:7d:1b:f2:
                    1b:7c:7d:76:ee:a5:08:09:71:d0:31:89:82:3c:e2:
                    8f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:D7:40:BD:AC:71:A4:69:F2:88:B0:4A:54:26:41:14:10:F4:32:2A
            X509v3 Authority Key Identifier:
                keyid:AF:1E:EE:22:C5:01:53:63:11:8A:71:D2:6A:94:63:DC:93:74:BA:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rx7uIsUBU2MRinHSapRj3JN0uig.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:34:35:b2:a4:01:7b:83:fc:ed:ff:1c:fb:8f:34:01:a6:a7:
         58:ed:ec:10:22:f5:b6:86:ff:26:c2:17:77:c1:e7:67:78:10:
         3c:38:02:76:bd:79:bd:bb:b6:90:d7:0b:91:17:87:c3:12:bd:
         a2:91:56:64:37:dc:7e:43:db:f7:25:d2:c6:ae:90:21:6a:e8:
         98:c1:35:ae:20:8b:ba:75:9a:ca:e7:9f:f8:95:67:b2:d4:6d:
         5f:09:87:84:93:a6:16:eb:30:8c:7b:06:ca:18:4e:26:f2:35:
         22:b9:2e:57:b0:c1:48:16:20:be:39:17:14:48:ea:4d:f0:3b:
         8c:0a:c0:57:1f:e5:ff:5a:ca:1c:67:bb:2c:de:c2:e3:93:fc:
         5e:54:3e:b7:84:4e:de:86:c9:3a:f2:33:79:f7:0c:60:d8:d1:
         55:83:8e:5c:ac:04:60:97:96:2a:95:1f:3d:3e:47:6e:6a:61:
         81:05:93:96:a3:0b:ef:96:9b:db:24:d8:5b:3c:f9:47:97:a6:
         59:59:ca:39:e8:fe:46:41:95:b4:1e:fc:b5:6f:93:1b:9f:4a:
         3b:09:93:65:2b:36:27:72:dc:aa:fe:90:11:9e:3c:78:0c:07:
         49:55:e6:d4:60:9d:87:f5:4f:e7:d0:a4:5c:f2:f4:ef:6e:45:
         eb:82:cb:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 21:48:04 2026 by rpki-client