Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/eb7f7e-a880-497b-b54c-b708c40a667f/1/P4Go6MdbWPfR79TD5lItJ4Y_nM8.mft
File:                     P4Go6MdbWPfR79TD5lItJ4Y_nM8.mft (raw, json)
Hash identifier:          EEbTCncf+odtJ0Jt12lXzM3SUgPet2OIhHmkqFjUC3I=
Subject key identifier:   09:6F:8B:6A:C0:AF:26:3E:1E:53:A1:72:A2:75:A8:90:C9:EC:DC:17
Authority key identifier: 3F:81:A8:E8:C7:5B:58:F7:D1:EF:D4:C3:E6:52:2D:27:86:3F:9C:CF
Certificate issuer:       /CN=3f81a8e8c75b58f7d1efd4c3e6522d27863f9ccf
Certificate serial:       01A0D8DEBAA544949D7D7781220950A43DE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P4Go6MdbWPfR79TD5lItJ4Y_nM8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/eb7f7e-a880-497b-b54c-b708c40a667f/1/P4Go6MdbWPfR79TD5lItJ4Y_nM8.mft
Manifest number:          1A71
Signing time:             Fri 25 Sep 2026 14:01:10 +0000
Manifest this update:     Fri 25 Sep 2026 14:01:10 +0000
Manifest next update:     Sat 26 Sep 2026 14:01:10 +0000
Files and hashes:         1: P4Go6MdbWPfR79TD5lItJ4Y_nM8.crl (hash: 0lJrrFsYeTECbyuF8MuObIutBZCMySh3231BPRjrHjI=)
                          2: ncPNkpuerXDPVvhOagmz6DGK4F4.roa (hash: EzW2eYsud+NOEa0rR95TqZjMJsbs++g10GjrVu+pH+4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/eb7f7e-a880-497b-b54c-b708c40a667f/1/P4Go6MdbWPfR79TD5lItJ4Y_nM8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/eb7f7e-a880-497b-b54c-b708c40a667f/1/P4Go6MdbWPfR79TD5lItJ4Y_nM8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P4Go6MdbWPfR79TD5lItJ4Y_nM8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d8:de:ba:a5:44:94:9d:7d:77:81:22:09:50:a4:3d:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f81a8e8c75b58f7d1efd4c3e6522d27863f9ccf
        Validity
            Not Before: Sep 25 14:01:10 2026 GMT
            Not After : Sep 26 14:01:10 2026 GMT
        Subject: CN=096f8b6ac0af263e1e53a172a275a890c9ecdc17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9e:62:af:28:1f:32:15:4c:ad:ec:81:3d:3f:
                    ef:82:ac:17:15:21:fc:de:cd:ad:2c:15:98:e0:e6:
                    72:0c:21:47:c8:b1:b0:d2:39:f0:f0:d1:49:e9:45:
                    55:22:34:0a:dc:f0:c5:8a:65:a2:fa:aa:4f:6d:8d:
                    58:96:ba:f2:4d:00:4c:4d:d6:bd:59:f3:73:e4:3e:
                    e8:c3:ae:31:0d:47:88:a4:67:0e:ac:9a:3c:9b:35:
                    bb:e6:ed:a8:fc:2e:48:5d:27:f3:fc:bc:c8:72:4e:
                    e8:3a:e5:3d:98:0e:08:8e:69:18:73:24:a9:b7:29:
                    32:20:f5:85:d2:61:ef:51:8b:d9:c8:53:70:58:d4:
                    2f:f8:a7:62:ca:22:d3:89:79:b3:11:bd:ad:ec:2a:
                    2d:81:08:ef:20:a5:56:37:2b:a8:6a:bb:c8:2a:87:
                    03:60:1d:ad:b6:33:12:49:d7:e6:4c:a2:b2:71:60:
                    bd:a4:ca:2b:12:9a:9b:ac:45:28:f3:aa:cb:86:df:
                    d6:e0:3c:5f:9b:f0:1b:8f:2b:99:82:4a:77:b3:e4:
                    14:62:87:5e:e4:5b:18:58:9d:73:b7:3d:c5:7e:b4:
                    a6:04:16:80:07:6a:e7:53:fa:78:4f:5b:56:db:d1:
                    40:5f:49:e9:56:84:f1:2d:cb:00:9e:51:8e:a1:8a:
                    20:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:6F:8B:6A:C0:AF:26:3E:1E:53:A1:72:A2:75:A8:90:C9:EC:DC:17
            X509v3 Authority Key Identifier:
                keyid:3F:81:A8:E8:C7:5B:58:F7:D1:EF:D4:C3:E6:52:2D:27:86:3F:9C:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P4Go6MdbWPfR79TD5lItJ4Y_nM8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/eb7f7e-a880-497b-b54c-b708c40a667f/1/P4Go6MdbWPfR79TD5lItJ4Y_nM8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/eb7f7e-a880-497b-b54c-b708c40a667f/1/P4Go6MdbWPfR79TD5lItJ4Y_nM8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:f0:45:48:60:51:1a:39:64:10:b9:6a:ad:a8:92:28:df:9b:
         59:b0:0f:f5:a6:24:00:91:d2:fc:21:02:6d:ec:1e:a3:2e:98:
         98:86:25:57:45:6e:e9:69:c4:b1:09:f6:d0:5a:31:0a:9b:0e:
         c5:b9:f6:47:26:16:1e:07:02:f9:f7:e8:dc:d1:fd:af:e6:2a:
         5a:12:01:94:4e:74:c5:51:29:66:89:84:04:48:68:9d:57:23:
         2a:f5:03:1d:fd:f0:13:8d:28:98:45:d3:2e:f4:c6:f1:98:35:
         4b:d1:3f:1d:66:08:85:77:78:35:a4:a1:e6:3b:4f:a5:47:68:
         0b:3c:de:b8:07:62:95:ab:4d:78:38:f0:d5:8e:5a:c0:69:d3:
         89:f0:96:e8:68:60:98:ff:7b:1c:ea:bc:2c:db:31:d4:4c:3d:
         3b:d4:0f:5f:1c:05:01:b0:37:84:8b:0a:ce:93:88:c2:ac:43:
         a7:78:65:c3:bc:a1:85:c7:85:ea:cc:56:ba:e0:bf:7d:3a:17:
         f5:47:ea:43:b8:20:f5:d8:e6:00:16:2c:ca:63:23:e7:62:a1:
         f1:9f:04:13:9f:ca:91:c2:0f:da:1e:21:5e:37:7c:2b:53:7b:
         01:d6:0b:24:6a:2a:8a:e7:75:7c:fd:e0:fe:fd:07:ce:0e:b7:
         7b:a5:a6:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:09:07 2026 by rpki-client