Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/RABxct-fwtSi3bupNM68nwKG08o.mft
File:                     RABxct-fwtSi3bupNM68nwKG08o.mft (raw, json)
Hash identifier:          1uEZEuOcZ3a7uGun+Wr/9LynCI2SDQe1ri+uwUoJhoI=
Subject key identifier:   41:C9:37:B7:B7:6D:B6:ED:77:4B:CC:E0:57:A2:4F:9F:D3:74:CA:C0
Authority key identifier: 44:00:71:72:DF:9F:C2:D4:A2:DD:BB:A9:34:CE:BC:9F:02:86:D3:CA
Certificate issuer:       /CN=44007172df9fc2d4a2ddbba934cebc9f0286d3ca
Certificate serial:       01A0CF6CF74B598203089936A09C67689780
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RABxct-fwtSi3bupNM68nwKG08o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/RABxct-fwtSi3bupNM68nwKG08o.mft
Manifest number:          1A70
Signing time:             Wed 23 Sep 2026 18:00:19 +0000
Manifest this update:     Wed 23 Sep 2026 18:00:19 +0000
Manifest next update:     Thu 24 Sep 2026 18:00:19 +0000
Files and hashes:         1: D9L3F0MjFuI1mkGvBm8mGmwB0aE.roa (hash: d55W5CU5JP2xCsUj9oSlJV+ga7nmSkprH9KBPjXNOz0=)
                          2: Fn9mtyW8p7tf3NEs5ynDVX9fKWQ.roa (hash: Y3ktqWHPY4jaIf3oBnxCM/z1QkmvklY1/99J5dEJKUQ=)
                          3: JbYTcmeKPo3mOunx0Z-jMKOxz48.roa (hash: /zbvgZqj9ImK5wHvF50pz1/cbzu2MAYXngG5GwrR+io=)
                          4: RABxct-fwtSi3bupNM68nwKG08o.crl (hash: QEhvdJW1n+v/L4CB9Wbi11nDQaSnBCyOXjkrRkZxh6s=)
                          5: kKbHC__LJH-j0ex4EgJJmX98slE.roa (hash: FA7KYfTvFd4DkO8o/xkyqOnnhY/RKFo8GgvBljJcnfI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/RABxct-fwtSi3bupNM68nwKG08o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/RABxct-fwtSi3bupNM68nwKG08o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RABxct-fwtSi3bupNM68nwKG08o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cf:6c:f7:4b:59:82:03:08:99:36:a0:9c:67:68:97:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44007172df9fc2d4a2ddbba934cebc9f0286d3ca
        Validity
            Not Before: Sep 23 18:00:19 2026 GMT
            Not After : Sep 24 18:00:19 2026 GMT
        Subject: CN=41c937b7b76db6ed774bcce057a24f9fd374cac0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ca:d9:8b:13:a5:a2:0f:f9:a9:98:4d:a8:58:
                    c9:d9:ae:b1:37:4e:cb:54:02:31:78:a8:8c:23:47:
                    e4:57:e2:f0:32:47:a1:eb:73:c5:8a:a0:c4:49:49:
                    bf:0b:b4:21:2a:80:1b:1b:40:78:a6:8e:2b:6c:a8:
                    a7:f7:d4:e2:a5:ba:6e:60:d7:d0:e1:56:c6:42:a5:
                    de:69:37:a6:d8:be:e6:7e:3b:81:40:99:b6:d8:c2:
                    ee:34:83:28:8c:ef:b3:b6:0e:40:69:49:25:db:75:
                    ce:a5:7f:a9:af:37:e1:73:71:9c:0d:5f:c3:03:97:
                    68:f0:b6:33:93:e9:59:9c:dd:50:f4:9a:14:ec:1b:
                    3b:a9:b8:1d:cd:c9:94:1a:c6:ba:73:84:81:d4:f9:
                    66:2d:ee:c8:00:28:50:7e:c4:dc:79:4e:5c:56:b3:
                    0e:e3:fe:23:3c:82:52:b8:1a:5f:6f:b9:f2:76:e9:
                    4f:25:d4:42:7e:7d:8d:3c:19:52:2b:88:0b:b8:db:
                    24:87:56:d7:b3:73:27:13:e2:70:05:05:2e:c9:0b:
                    19:0a:29:71:9e:45:2e:f9:2e:75:8a:e5:5b:18:26:
                    2f:8f:a4:f8:85:36:d9:e3:1a:54:75:9b:a4:38:15:
                    9c:81:37:86:c5:a7:e0:0d:9d:6e:86:e4:c0:e4:df:
                    a4:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:C9:37:B7:B7:6D:B6:ED:77:4B:CC:E0:57:A2:4F:9F:D3:74:CA:C0
            X509v3 Authority Key Identifier:
                keyid:44:00:71:72:DF:9F:C2:D4:A2:DD:BB:A9:34:CE:BC:9F:02:86:D3:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RABxct-fwtSi3bupNM68nwKG08o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/RABxct-fwtSi3bupNM68nwKG08o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/RABxct-fwtSi3bupNM68nwKG08o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e7:40:83:07:32:97:47:b0:90:8a:cd:a4:c0:35:1f:91:e5:d8:
         3a:b7:78:0a:2b:c1:62:f4:9d:d7:da:6c:11:d6:4f:42:54:a9:
         fe:0a:2f:97:68:5e:88:48:32:70:0e:30:bd:e8:4c:69:fe:af:
         e6:b1:c4:d1:97:ef:29:78:e8:46:6a:b3:50:c7:fd:45:53:84:
         20:af:62:5c:a8:37:54:54:d1:6b:80:14:76:81:6f:2f:c3:2e:
         31:f2:6d:c8:ad:70:e3:3c:cc:66:e1:d0:29:20:b7:2f:4f:4a:
         31:d0:d4:b1:7e:5a:82:e3:97:16:3f:ae:72:fb:22:37:13:41:
         8a:77:1e:35:91:80:f5:00:d9:a2:c2:df:bc:e7:0a:bb:25:f4:
         76:25:0b:56:06:ab:5f:47:4b:f9:a9:d7:31:c8:94:97:a4:ba:
         8e:69:33:7d:54:c3:4c:80:75:37:53:25:e1:4d:5b:9f:08:f3:
         1b:fb:d6:54:95:16:ca:5f:c9:0d:8b:df:e4:6d:fe:7e:6d:57:
         38:f7:05:af:9a:dd:05:eb:e1:fd:7d:90:5b:71:3c:5a:db:de:
         65:f0:13:8e:1e:bf:fa:a7:c5:d4:1d:92:ef:58:6c:11:78:2d:
         89:fc:01:7e:a1:0e:0f:98:97:d1:f4:02:ce:a1:5a:86:fa:fa:
         37:d0:0a:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:19:32 2026 by rpki-client