Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.mft
File:                     Rk3PqWOZcWaS0kWoBIh8CdpFH48.mft (raw, json)
Hash identifier:          Bn6yfRNBgRYF4unQmjkuEpffa5KkSVEt6hWdYz2DjcY=
Subject key identifier:   03:D8:0E:45:B6:A1:E2:42:C7:21:B5:25:A3:87:DD:CA:6C:D6:1C:63
Authority key identifier: 46:4D:CF:A9:63:99:71:66:92:D2:45:A8:04:88:7C:09:DA:45:1F:8F
Certificate issuer:       /CN=464dcfa96399716692d245a804887c09da451f8f
Certificate serial:       01A0CD7E7FF56B4783DDDC52E27C9C982208
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.mft
Manifest number:          1905
Signing time:             Wed 23 Sep 2026 09:00:14 +0000
Manifest this update:     Wed 23 Sep 2026 09:00:14 +0000
Manifest next update:     Thu 24 Sep 2026 09:00:14 +0000
Files and hashes:         1: 2S7uFkbSO-czpY7zbwj6z2QbI9I.roa (hash: SH3jErffYx2mXExMTCZzsNaB8q9HLfNDIPRMlxgvCYw=)
                          2: L3204t5xqv_RGAUaDjepK8F4Hqw.roa (hash: vbMIqhNdM6+SVCu/75ex+GgHrK58xyd+mi2MfbKpNh0=)
                          3: Rk3PqWOZcWaS0kWoBIh8CdpFH48.crl (hash: vwtmTDzveMptm0Jvtj4+VeKUFcFdpG1UMjP2Zlafmtk=)
                          4: S7WXL-Nx9MlA3zg4adYRLPxrpBo.roa (hash: mX6+SayjpKMIocVqlVrM4qpi0n+3CKCDO1ooCblBO5Y=)
                          5: d4eVdrwpKXcAoGDRDFbtY321JbY.roa (hash: 1LIz+gi4QRaOuZ7bv8YpDAh9EBM4X0uVObtqH7QBCXk=)
                          6: gItssa-B0b0X--YWiS_dUYtbwpY.roa (hash: iVUV0DWttepgFWqqg65SaE3OlJIh4Ep6A/pLvMT4l8I=)
                          7: hIwb7_2amNokm6JgMm4qjVwwsfY.roa (hash: z6Tdio5T4pmKdRiyHl5VQF+mCNzIsXm/cdRBtIDIBvQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 08:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cd:7e:7f:f5:6b:47:83:dd:dc:52:e2:7c:9c:98:22:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=464dcfa96399716692d245a804887c09da451f8f
        Validity
            Not Before: Sep 23 09:00:14 2026 GMT
            Not After : Sep 24 09:00:14 2026 GMT
        Subject: CN=03d80e45b6a1e242c721b525a387ddca6cd61c63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d8:37:cd:a7:df:b3:59:a5:d3:70:e4:3a:e2:
                    a3:15:91:3e:03:29:f6:6b:28:1f:eb:df:71:8a:f1:
                    ce:fd:18:84:b3:ae:ac:4e:ed:a5:39:c6:af:7e:cf:
                    81:63:8c:07:2d:5f:fc:69:04:50:36:d9:e7:58:4c:
                    53:3c:d9:a6:45:82:3a:96:23:e3:d0:b3:3a:f6:05:
                    4e:07:d6:4f:b3:4b:2c:cf:7b:37:ac:f0:ed:c2:07:
                    bd:8c:7c:3d:bc:5a:cb:34:9a:ad:80:c1:fb:56:50:
                    c1:c5:39:21:31:61:d2:a7:13:6e:4e:f4:32:bd:08:
                    7c:87:c5:66:06:c9:45:37:36:8c:1f:2d:7f:f2:be:
                    cb:63:05:4c:81:7b:d0:6c:1a:44:6c:30:60:c0:a2:
                    bb:d1:2c:19:47:15:85:f8:5b:49:73:f4:c5:96:93:
                    4f:b1:bc:1c:97:d6:75:4b:fb:3d:4e:15:1f:0c:b5:
                    66:ec:40:09:64:5f:23:2c:ef:b0:4f:cd:08:b5:e3:
                    48:37:24:2d:b3:12:68:35:3f:bf:4c:97:b5:0b:54:
                    f5:c9:de:04:cf:de:d1:8c:99:22:81:03:d9:ef:e7:
                    f1:d8:2d:6d:0f:b0:9d:9b:8d:c5:89:a8:d4:25:2d:
                    63:ce:0f:61:3c:ad:1e:bc:8d:e2:27:7f:28:02:f0:
                    71:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:D8:0E:45:B6:A1:E2:42:C7:21:B5:25:A3:87:DD:CA:6C:D6:1C:63
            X509v3 Authority Key Identifier:
                keyid:46:4D:CF:A9:63:99:71:66:92:D2:45:A8:04:88:7C:09:DA:45:1F:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:bc:2b:99:3b:91:7b:be:28:06:e1:18:fa:80:53:5c:14:89:
         12:0e:58:7b:be:bf:91:6d:67:5c:ec:ca:5a:60:64:8e:c9:d2:
         f4:eb:73:c5:fb:af:12:1f:9f:cc:bf:91:67:3d:ad:e1:74:85:
         dc:af:17:3c:05:de:52:da:e7:e5:1a:84:5d:b1:c1:2a:ed:5a:
         d4:6b:47:e7:4a:f7:5c:27:db:96:9c:a7:ca:cb:ef:99:e9:d1:
         58:95:21:1c:2b:52:82:2c:a3:e0:ad:48:83:11:f8:83:59:53:
         2e:00:82:01:9b:ba:2d:bd:f4:0a:a9:66:29:bf:f2:6c:41:83:
         73:2e:21:60:bd:9d:65:1b:3e:e6:e3:ed:1d:c9:c0:5f:d5:5a:
         7f:b4:fc:4b:65:a1:b0:5c:51:8e:0d:ac:e5:4d:73:bb:b2:4d:
         c6:73:e5:ab:7c:d7:0a:0f:ee:2c:d6:ba:23:73:11:46:df:d2:
         cf:e0:07:9c:f3:d0:0a:ed:fc:99:c6:9f:67:53:ec:1b:c1:79:
         bc:41:4a:54:f9:00:d1:00:bb:4a:94:c2:48:74:d9:7a:c6:84:
         61:3f:82:d6:b2:c2:c0:0c:c6:fc:cb:80:40:44:1a:28:3f:63:
         96:7c:9b:3e:2c:a7:8f:09:0b:73:0f:0f:8e:8a:c1:a0:ba:85:
         40:85:36:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:43:26 2026 by rpki-client