Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.mft
File:                     r7TgSg7TRBEsGFPKsJ9S4c2auvI.mft (raw, json)
Hash identifier:          U4EmfrUt32SNHarCOfZjuEZeJubWWgaAqSoV+wev/RM=
Subject key identifier:   8A:09:3D:7E:9B:A9:89:AD:00:F6:72:DD:01:39:DD:5D:6A:6D:AB:04
Authority key identifier: AF:B4:E0:4A:0E:D3:44:11:2C:18:53:CA:B0:9F:52:E1:CD:9A:BA:F2
Certificate issuer:       /CN=afb4e04a0ed344112c1853cab09f52e1cd9abaf2
Certificate serial:       01A0F0E7FD4F07DADCAA21B0174736024A3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r7TgSg7TRBEsGFPKsJ9S4c2auvI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.mft
Manifest number:          0EA5
Signing time:             Wed 30 Sep 2026 06:02:10 +0000
Manifest this update:     Wed 30 Sep 2026 06:02:10 +0000
Manifest next update:     Thu 01 Oct 2026 06:02:10 +0000
Files and hashes:         1: CmIJnjwGRsNcmhAutOTs4YMD2fE.roa (hash: Jua19yCeg1t/mfvLvJYnD0rI4VExJ2vBY7mPBdrmdaI=)
                          2: Iuaoq7xqZRoecZzyevNXwAMi3-c.roa (hash: SRPau6cxiFHTMpBCP5vvZIhkHG5VuskjK4s4tpPVTEM=)
                          3: aPz9jYSsAHsZtg1cdjuxCtxCBzk.roa (hash: N0uPovVPRwzq0UQVV7PxhoVVAuzDhOF3XOBQjYFpbpI=)
                          4: r7TgSg7TRBEsGFPKsJ9S4c2auvI.crl (hash: xFq0RlctCzIndmZ8ONUyXz7PYKQNo40bMH+8z4ytjCw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r7TgSg7TRBEsGFPKsJ9S4c2auvI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 Oct 2026 06:02:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f0:e7:fd:4f:07:da:dc:aa:21:b0:17:47:36:02:4a:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afb4e04a0ed344112c1853cab09f52e1cd9abaf2
        Validity
            Not Before: Sep 30 06:02:10 2026 GMT
            Not After : Oct  1 06:02:10 2026 GMT
        Subject: CN=8a093d7e9ba989ad00f672dd0139dd5d6a6dab04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:30:ea:42:98:87:aa:a3:21:10:58:93:c5:72:
                    ee:e8:f4:a6:b4:50:4b:aa:c1:4b:49:f1:72:31:f5:
                    89:d3:96:cc:a7:3f:79:74:0a:ae:35:41:f6:3e:7e:
                    0f:e4:58:d4:60:74:0b:a7:e0:c8:2e:c9:55:b4:d5:
                    01:1f:35:e4:3e:e6:21:5a:d3:ba:bf:30:f3:7e:48:
                    a4:e3:53:a9:1c:9c:53:39:55:7b:e7:69:b4:5c:12:
                    49:6d:e3:83:ae:5b:b8:da:93:c7:10:d4:78:f1:a0:
                    4c:54:1a:65:41:69:5b:be:5f:35:b4:48:ed:b3:81:
                    8c:d0:c4:d2:a2:84:6a:34:42:0f:0a:47:f5:59:df:
                    d3:08:36:ae:89:a0:c3:9b:6a:ff:ea:f8:70:f8:77:
                    34:06:4d:ca:df:00:38:02:53:4b:7b:49:dd:21:31:
                    dd:c3:d8:f6:1b:0b:2a:92:bb:ea:ca:9f:26:fd:44:
                    d8:21:78:37:fd:a6:5d:d7:17:3d:5d:bc:b5:67:83:
                    02:00:e2:7f:cc:d3:29:e1:a2:f3:c2:e1:e7:f5:88:
                    6b:a7:df:f1:a7:f2:be:be:54:e7:40:dd:7b:4f:2b:
                    83:08:cf:e8:65:43:b1:18:7b:3c:fb:9f:29:77:fb:
                    9b:21:43:3c:c8:6a:f3:0f:50:3b:fd:e3:cb:87:a5:
                    59:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:09:3D:7E:9B:A9:89:AD:00:F6:72:DD:01:39:DD:5D:6A:6D:AB:04
            X509v3 Authority Key Identifier:
                keyid:AF:B4:E0:4A:0E:D3:44:11:2C:18:53:CA:B0:9F:52:E1:CD:9A:BA:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7TgSg7TRBEsGFPKsJ9S4c2auvI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:98:01:e0:42:41:1c:8b:5d:f9:1d:a6:e0:6d:28:ce:3f:0d:
         f2:d8:59:29:51:4e:8f:e9:df:ad:ab:81:5c:fe:52:71:b5:02:
         cc:a4:20:51:0b:42:a7:99:0d:27:cf:95:d0:b5:45:99:45:a1:
         56:3b:cb:c0:9c:55:78:07:b3:f6:d6:55:14:55:11:05:ed:e8:
         23:1f:2e:e5:62:c2:8e:7a:ff:a5:0b:af:69:0b:b8:b2:14:ae:
         9f:55:4e:7e:6a:e4:10:b7:e0:13:5d:ca:60:39:5c:df:8f:ae:
         a4:17:76:ee:87:6d:d4:1a:a4:49:4a:dc:ae:38:fd:62:bb:40:
         d0:2b:b4:73:38:13:f9:c5:4d:e4:e7:5a:9e:3b:05:0d:a1:d8:
         7f:0b:02:ef:e1:60:a7:1f:76:ae:e9:56:63:b6:27:18:2f:61:
         40:08:27:83:0f:65:2a:39:01:9b:2f:71:f0:5d:f8:00:8a:cf:
         dc:d8:63:32:82:db:4e:67:a0:f4:93:b6:ef:80:21:9b:da:2f:
         5f:b2:0e:ca:b9:90:30:26:d1:b9:1a:dd:e5:8c:90:09:0e:74:
         a5:2a:87:96:80:4d:3b:ac:6b:73:5d:8f:91:3e:ea:d6:fc:47:
         70:39:92:db:54:94:ac:a0:a5:51:8b:9a:59:e6:c8:dd:10:e7:
         d7:5b:fb:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 16:28:31 2026 by rpki-client