Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/RI63RgCeGCwI7YT4F30ACKZIWD0.mft
File:                     RI63RgCeGCwI7YT4F30ACKZIWD0.mft (raw, json)
Hash identifier:          8TtNSSo3vlbYdKAS6GGTvVWz+QS5ndr5EGis2dlgqXA=
Subject key identifier:   2F:6E:C8:16:FC:BC:ED:88:44:98:CE:55:89:30:78:31:A9:37:EA:5E
Authority key identifier: 44:8E:B7:46:00:9E:18:2C:08:ED:84:F8:17:7D:00:08:A6:48:58:3D
Certificate issuer:       /CN=448eb746009e182c08ed84f8177d0008a648583d
Certificate serial:       01A0D5A68DABB8666AE8E9AC16C910F17A4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RI63RgCeGCwI7YT4F30ACKZIWD0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/RI63RgCeGCwI7YT4F30ACKZIWD0.mft
Manifest number:          021E
Signing time:             Thu 24 Sep 2026 23:00:57 +0000
Manifest this update:     Thu 24 Sep 2026 23:00:57 +0000
Manifest next update:     Fri 25 Sep 2026 23:00:57 +0000
Files and hashes:         1: QVq18C8a73aIQH-AcKRLMzpO3YQ.asa (hash: 2HTUzLpfDHOgyVFMt6dJ4aJ9WtaWtmAe0f3l6ljlAeU=)
                          2: RI63RgCeGCwI7YT4F30ACKZIWD0.crl (hash: 5j2HbbLIINMVw7/i+B4r5FJXj+GB3I5gDg9NiOFmpcE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/RI63RgCeGCwI7YT4F30ACKZIWD0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/RI63RgCeGCwI7YT4F30ACKZIWD0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RI63RgCeGCwI7YT4F30ACKZIWD0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d5:a6:8d:ab:b8:66:6a:e8:e9:ac:16:c9:10:f1:7a:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=448eb746009e182c08ed84f8177d0008a648583d
        Validity
            Not Before: Sep 24 23:00:57 2026 GMT
            Not After : Sep 25 23:00:57 2026 GMT
        Subject: CN=2f6ec816fcbced884498ce5589307831a937ea5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c5:1c:2b:63:17:a3:28:36:4e:aa:a5:1e:42:
                    94:de:67:2f:62:cc:b9:2c:04:be:f3:6b:8c:cc:7c:
                    8c:9c:44:17:8c:e3:fa:de:8c:18:9b:ec:01:7e:a5:
                    19:3b:90:05:38:45:33:73:13:fc:0e:97:68:8c:de:
                    8f:78:86:4a:3e:b1:ce:45:64:41:55:ca:f6:01:0d:
                    2a:e2:9e:1e:17:a7:64:e0:2f:9a:75:fc:8c:a6:1e:
                    01:f0:f7:15:c6:aa:09:ac:fd:86:f1:7f:f9:2c:00:
                    ca:85:f7:a4:7a:d1:57:a4:c8:f4:ae:ca:e6:6d:ef:
                    67:b4:ad:72:fc:29:c6:42:bf:f4:78:7c:7f:07:35:
                    73:a0:12:76:4e:47:da:00:70:41:54:a1:17:e4:65:
                    19:1d:3f:b5:d2:0a:b0:e1:64:89:c2:69:00:5d:30:
                    8e:4b:dc:db:ae:18:79:47:47:17:c3:3b:87:97:50:
                    9e:f9:92:39:c7:91:68:bd:16:70:a8:4e:62:ee:bf:
                    b7:81:1e:3a:3e:68:89:e7:e1:50:f2:5e:72:76:44:
                    a7:2c:ae:b5:ab:93:a2:99:75:f8:6f:89:ec:81:7b:
                    55:ef:cf:48:83:e4:1b:6e:ea:e9:bc:d7:18:df:ae:
                    6a:63:29:42:00:39:c0:78:4c:1e:ba:b9:5c:d9:62:
                    ed:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:6E:C8:16:FC:BC:ED:88:44:98:CE:55:89:30:78:31:A9:37:EA:5E
            X509v3 Authority Key Identifier:
                keyid:44:8E:B7:46:00:9E:18:2C:08:ED:84:F8:17:7D:00:08:A6:48:58:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RI63RgCeGCwI7YT4F30ACKZIWD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/RI63RgCeGCwI7YT4F30ACKZIWD0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/RI63RgCeGCwI7YT4F30ACKZIWD0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:85:10:2c:25:87:dc:06:ca:86:4d:2d:c1:6a:ca:22:84:9c:
         44:63:03:1c:cc:b7:da:08:ad:68:fb:13:ed:eb:0e:5c:10:dc:
         12:40:d0:30:a4:f8:0a:de:3f:59:07:71:d3:8e:77:d9:f4:f2:
         aa:1a:cd:f4:f8:64:e8:56:44:f2:45:44:0b:49:e5:3f:5e:97:
         ea:df:d6:06:8c:ef:f9:2f:9b:66:f5:55:1a:d1:48:98:af:54:
         b2:74:31:e0:f4:6a:9c:3b:50:b3:8a:3b:61:82:31:22:c5:21:
         6c:e4:46:52:01:fe:c5:c7:4d:ad:38:e8:81:30:61:5c:ca:b0:
         5b:6b:bb:fd:be:1e:23:a9:34:c9:4c:18:21:32:85:f8:4d:7f:
         54:68:4e:ec:d3:2d:c9:d6:0d:12:57:00:a4:d6:ad:52:dc:c4:
         a4:6e:68:02:32:d9:ec:f8:61:b7:f6:89:75:82:ff:98:55:e7:
         9c:de:6b:76:c0:ce:3d:be:a4:49:93:59:0a:82:50:86:13:21:
         dc:95:3b:ab:63:e0:98:f9:ec:34:6c:67:55:6a:a0:79:74:22:
         25:10:55:86:ae:04:3b:1a:a1:7f:8d:55:4b:ea:1c:15:3e:76:
         49:16:1a:6a:06:00:21:57:e6:5f:5c:07:7a:7a:00:63:75:55:
         88:f5:19:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:12:52 2026 by rpki-client