Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/f9c76b-4c66-4346-8ade-fc6cdaaf250b/1/AU79_QZHzLpzSyoFZgEk64wGdWc.mft
File:                     AU79_QZHzLpzSyoFZgEk64wGdWc.mft (raw, json)
Hash identifier:          Nj5F29Phe/OHs5jmLOXqCz/wUZl5gbpbN4AeRJv9kgc=
Subject key identifier:   A0:56:0D:91:4F:AD:9F:27:27:3A:70:FF:45:95:B8:42:19:13:43:06
Authority key identifier: 01:4E:FD:FD:06:47:CC:BA:73:4B:2A:05:66:01:24:EB:8C:06:75:67
Certificate issuer:       /CN=014efdfd0647ccba734b2a05660124eb8c067567
Certificate serial:       01A101A43AE5EA1367647AA811B679B3DD0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AU79_QZHzLpzSyoFZgEk64wGdWc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/f9c76b-4c66-4346-8ade-fc6cdaaf250b/1/AU79_QZHzLpzSyoFZgEk64wGdWc.mft
Manifest number:          145A
Signing time:             Sat 03 Oct 2026 12:01:42 +0000
Manifest this update:     Sat 03 Oct 2026 12:01:42 +0000
Manifest next update:     Sun 04 Oct 2026 12:01:42 +0000
Files and hashes:         1: AU79_QZHzLpzSyoFZgEk64wGdWc.crl (hash: FGcezflxORfTecQiaYDsU1lKIYdgNEk8XEKoXRTidXI=)
                          2: TIl4ni4I9dnWPD6JhGZ4MT01X9k.roa (hash: xqkMDcDlSk0VZ9Deo2xieEF476AnzgNHWsIFEaEp8us=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/f9c76b-4c66-4346-8ade-fc6cdaaf250b/1/AU79_QZHzLpzSyoFZgEk64wGdWc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/f9c76b-4c66-4346-8ade-fc6cdaaf250b/1/AU79_QZHzLpzSyoFZgEk64wGdWc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AU79_QZHzLpzSyoFZgEk64wGdWc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 11:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:01:a4:3a:e5:ea:13:67:64:7a:a8:11:b6:79:b3:dd:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=014efdfd0647ccba734b2a05660124eb8c067567
        Validity
            Not Before: Oct  3 12:01:42 2026 GMT
            Not After : Oct  4 12:01:42 2026 GMT
        Subject: CN=a0560d914fad9f27273a70ff4595b84219134306
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:dd:21:0e:8a:02:9d:df:51:9d:1b:76:b8:4e:
                    a0:c5:b7:f4:f9:72:b4:34:2f:9c:90:2a:fe:40:1c:
                    77:48:c3:f7:4f:25:16:0a:ac:4c:2d:bf:ee:63:ff:
                    da:96:ad:32:d6:e1:7c:fc:7b:da:65:33:48:14:47:
                    2b:99:11:6f:73:d2:76:23:3c:37:c2:51:8f:6c:54:
                    7e:35:ad:5e:a8:23:9e:3c:9d:f2:55:66:69:62:08:
                    d8:51:2b:4d:1c:c8:70:19:2b:f0:fe:bb:10:4c:11:
                    ff:6f:f8:33:d9:96:51:9a:eb:ca:f6:d7:b6:08:c6:
                    72:57:39:35:e7:b2:e1:e9:22:86:24:e9:a8:26:b1:
                    78:eb:9a:85:9f:3b:82:09:8d:d5:d1:39:2c:ac:cc:
                    bf:28:2b:b5:f7:37:32:ad:0c:82:82:f1:59:d8:7d:
                    23:09:71:ff:52:aa:15:74:ba:81:15:3d:88:d3:64:
                    d5:fd:b1:1d:a7:46:d0:8f:5f:f2:d4:6c:b4:85:19:
                    51:7b:bc:d9:70:54:38:aa:f7:32:3b:8f:30:45:b6:
                    80:d3:cc:37:da:b9:2f:48:65:60:26:d0:7e:68:db:
                    e8:89:39:d4:4a:db:5e:97:87:91:26:9e:95:9f:47:
                    85:dd:ae:f8:28:0d:60:9c:87:b7:e6:f8:e0:5c:76:
                    4f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:56:0D:91:4F:AD:9F:27:27:3A:70:FF:45:95:B8:42:19:13:43:06
            X509v3 Authority Key Identifier:
                keyid:01:4E:FD:FD:06:47:CC:BA:73:4B:2A:05:66:01:24:EB:8C:06:75:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AU79_QZHzLpzSyoFZgEk64wGdWc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f9c76b-4c66-4346-8ade-fc6cdaaf250b/1/AU79_QZHzLpzSyoFZgEk64wGdWc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f9c76b-4c66-4346-8ade-fc6cdaaf250b/1/AU79_QZHzLpzSyoFZgEk64wGdWc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:5a:23:05:a2:3e:85:1c:ae:01:b9:35:36:23:4c:6c:06:78:
         25:79:b9:9d:4d:21:53:a0:07:49:85:26:e3:3e:40:23:ff:73:
         b8:4d:c9:f2:a7:26:cc:db:09:dd:a7:96:7e:80:2c:bb:59:00:
         e8:a7:84:6c:34:8a:82:5a:00:b5:6a:02:f1:f0:77:f4:3f:55:
         ae:3e:18:d7:01:4c:c2:0a:a5:02:b7:72:3e:5e:f6:ea:c6:5c:
         0c:1d:9e:4d:63:da:33:fd:c9:09:41:73:82:d9:32:39:42:96:
         93:c1:08:c8:2d:61:d7:02:56:ed:e5:16:e1:8c:43:bd:60:7d:
         4a:2c:74:03:21:ae:1b:34:a8:12:c4:87:c3:2c:91:20:a4:8e:
         59:48:0d:25:b4:e0:b7:27:00:87:21:d5:4b:3e:2a:77:c2:86:
         1e:d2:f0:14:63:6e:0d:31:49:86:35:4f:94:93:b4:d7:1c:51:
         0f:15:36:34:81:49:a9:50:4a:5b:7f:44:b5:d4:53:4f:5e:92:
         38:de:54:c9:c4:50:93:cd:1d:33:87:45:5d:ae:41:59:8c:86:
         c1:da:c2:2d:52:78:02:09:ec:d4:39:c5:67:1a:c1:e1:3a:84:
         f2:b4:5c:4c:bb:9f:f9:fe:75:2e:98:6c:79:f8:da:af:a4:bb:
         57:d3:a5:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 17:44:06 2026 by rpki-client