Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/ImucE4BlqCDJrN9DhcsgEkUDSf4.mft
File:                     ImucE4BlqCDJrN9DhcsgEkUDSf4.mft (raw, json)
Hash identifier:          Xwydq6gBiNKCTP0w2Ba8u8H/ARE9hjgltA37QRKKdv4=
Subject key identifier:   A4:EA:0C:F7:8C:22:AF:2C:9C:D0:FE:E1:68:C9:C7:C5:DD:B0:6A:75
Authority key identifier: 22:6B:9C:13:80:65:A8:20:C9:AC:DF:43:85:CB:20:12:45:03:49:FE
Certificate issuer:       /CN=226b9c138065a820c9acdf4385cb2012450349fe
Certificate serial:       01A0CE5ADAF9D6DACDF4E4540ABBA6C0C1DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ImucE4BlqCDJrN9DhcsgEkUDSf4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/ImucE4BlqCDJrN9DhcsgEkUDSf4.mft
Manifest number:          E6
Signing time:             Wed 23 Sep 2026 13:00:55 +0000
Manifest this update:     Wed 23 Sep 2026 13:00:55 +0000
Manifest next update:     Thu 24 Sep 2026 13:00:55 +0000
Files and hashes:         1: 7xVsc6e5HsSEMDSQRNGWAzYh7xw.roa (hash: umMdK2ousPlaPCGUE8QVsbLVa6xFxm0EroZYnaCBL/4=)
                          2: ImucE4BlqCDJrN9DhcsgEkUDSf4.crl (hash: PnNc/SLNZhWPZZoHLbcwzIvRML2hJqbcjWVU39Z6vCo=)
                          3: L27Lg8l4vl8uMQxFpGcEsCmSVMc.roa (hash: MmKVAG1nuZbxn4BHXng/K07ASVdY2tArz6SaT43xauM=)
                          4: qsR7TZkWFq0TDf5MckwIwh8zFQM.roa (hash: sxmqqI4u+18AAhXlZEPlMsFP8KQ4AzNJugzw/xraXsU=)
                          5: vLWAWdlYukTIjLKPmSs-pTiSglg.roa (hash: hEeh+2QKPkagHXsyde8usIfFQY2GLUV8EdqzgChw/W0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/ImucE4BlqCDJrN9DhcsgEkUDSf4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/ImucE4BlqCDJrN9DhcsgEkUDSf4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ImucE4BlqCDJrN9DhcsgEkUDSf4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 13:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:5a:da:f9:d6:da:cd:f4:e4:54:0a:bb:a6:c0:c1:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=226b9c138065a820c9acdf4385cb2012450349fe
        Validity
            Not Before: Sep 23 13:00:55 2026 GMT
            Not After : Sep 24 13:00:55 2026 GMT
        Subject: CN=a4ea0cf78c22af2c9cd0fee168c9c7c5ddb06a75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4e:a7:52:93:4d:0f:f6:af:40:08:d3:54:45:
                    57:55:f7:73:5c:58:ef:39:80:b6:82:14:ce:3d:c0:
                    36:bb:a5:d8:54:fa:d7:7b:67:52:65:63:3d:5c:3a:
                    5d:be:72:22:df:d0:22:9e:03:d9:25:e4:4d:d3:cc:
                    94:10:ee:2b:7e:63:72:49:fd:40:f6:46:64:56:f3:
                    a5:49:2d:50:e0:d5:2d:12:86:8c:6d:92:a6:8c:aa:
                    1e:b7:4a:04:d5:98:5a:81:a6:cc:cd:68:3f:dd:e1:
                    3d:8e:6f:68:58:4e:f1:fc:4a:17:53:ea:bd:ec:42:
                    8d:6c:a7:ca:b1:8a:9e:88:3b:4a:bf:06:3b:06:f8:
                    9d:b5:26:45:78:7f:47:f7:23:d0:21:dd:ee:86:4a:
                    3c:e0:50:88:33:8a:be:94:64:0b:59:64:e3:41:6f:
                    7c:cf:05:cf:02:4c:a3:bd:d3:a0:0d:a3:1e:95:cb:
                    53:8f:50:42:7a:98:ef:60:5a:98:d7:d0:08:d6:da:
                    c3:8e:b9:e6:d8:e3:70:f0:92:26:fa:be:93:03:2f:
                    52:49:bf:f5:09:a0:04:d0:af:87:e9:54:f5:d2:71:
                    f1:44:88:58:4a:5b:06:12:d8:cf:3f:45:05:09:f4:
                    17:85:75:8e:40:27:93:20:d9:46:72:f9:a2:15:e6:
                    c5:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:EA:0C:F7:8C:22:AF:2C:9C:D0:FE:E1:68:C9:C7:C5:DD:B0:6A:75
            X509v3 Authority Key Identifier:
                keyid:22:6B:9C:13:80:65:A8:20:C9:AC:DF:43:85:CB:20:12:45:03:49:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ImucE4BlqCDJrN9DhcsgEkUDSf4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/ImucE4BlqCDJrN9DhcsgEkUDSf4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/ImucE4BlqCDJrN9DhcsgEkUDSf4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:ea:ce:a7:42:1f:e2:81:e9:ec:63:93:b8:6a:31:34:a0:4b:
         6e:51:b5:6b:b0:45:c2:22:f3:69:7c:de:f5:bf:36:39:2e:c9:
         08:ef:b1:15:e8:99:c6:99:ea:51:2d:26:d9:76:a9:8f:a3:27:
         22:fe:c4:24:24:0e:fd:8f:eb:b2:09:eb:7f:ec:c5:27:ea:4a:
         49:3b:e7:bb:97:df:41:a4:2a:71:94:a1:41:d9:d1:80:57:d7:
         d5:77:49:ae:c5:b7:8f:7e:0e:b6:f9:7a:8e:9c:44:b2:79:b6:
         5f:35:bd:04:df:0a:91:65:23:28:6f:ba:ef:59:60:0d:e7:f1:
         d5:3d:95:0a:42:c3:b7:92:1b:66:a7:c0:42:92:3b:78:36:f7:
         8a:1a:f3:97:d9:d9:f4:3f:6a:d9:7b:58:a4:39:eb:16:90:9b:
         a3:82:7e:8a:6b:ad:44:2e:57:80:e9:12:9e:ed:c9:a5:c1:d0:
         39:b9:dc:9e:b1:3c:ca:93:e9:28:53:1d:7d:fe:6e:e6:45:7b:
         70:ea:96:2d:36:b3:fc:db:46:b1:16:1d:b5:21:b0:f5:67:9e:
         80:ce:f0:2b:f9:aa:36:3d:d5:b4:3e:59:28:17:1d:fe:cb:a2:
         73:f3:8e:69:79:05:c7:87:0b:45:1a:00:2d:64:aa:54:d7:bc:
         b5:20:29:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:41:17 2026 by rpki-client