Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.mft
File:                     4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.mft (raw, json)
Hash identifier:          h/rZC/QY6gwUxrIRiFT40tewfCXasKdBuTv06p6Xm50=
Subject key identifier:   01:6A:E5:49:55:5A:C8:7C:44:AD:92:44:EB:E6:64:04:49:65:66:FF
Authority key identifier: E3:2B:CD:40:C6:77:46:77:D2:C3:70:2E:F5:9E:DF:49:D0:B3:6C:6C
Certificate issuer:       /CN=e32bcd40c6774677d2c3702ef59edf49d0b36c6c
Certificate serial:       01A06E70AAA78713FDD3DB60B500057F08C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.mft
Manifest number:          1B47
Signing time:             Fri 04 Sep 2026 22:01:12 +0000
Manifest this update:     Fri 04 Sep 2026 22:01:12 +0000
Manifest next update:     Sat 05 Sep 2026 22:01:12 +0000
Files and hashes:         1: 4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.crl (hash: wmWeriLP1RXQQvF7DTt5/nMs+gv2iFi0MF0eEq4E+cE=)
                          2: 7f-qk0jKjn3Hv6ygSTSqX-A52T8.roa (hash: wWQY3pRKERmG9ujMWcp884MAVgXLED92sf1A7NartQU=)
                          3: Qpzdfxddg7sAd9HOkX4hdICsNh8.roa (hash: 4zKxw2hbsJ7DHleUFCRfkqUEw6l9X5X22tDEvhwM0Q4=)
                          4: vsuT_IOPUjzvR0My_Kd7LSpDKKM.roa (hash: cFfCeRAoBGEzB928ke0BQYkYud/Q7OkffZYjpQPUqk0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 20:21:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6e:70:aa:a7:87:13:fd:d3:db:60:b5:00:05:7f:08:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e32bcd40c6774677d2c3702ef59edf49d0b36c6c
        Validity
            Not Before: Sep  4 22:01:12 2026 GMT
            Not After : Sep  5 22:01:12 2026 GMT
        Subject: CN=016ae549555ac87c44ad9244ebe66404496566ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a1:60:5c:f4:b2:8a:4b:01:6f:95:ca:80:13:
                    03:97:5c:b1:be:af:5e:bb:73:ef:63:d6:6b:18:08:
                    bb:72:1a:7d:1d:c3:a2:5d:b8:0c:90:45:3d:86:3b:
                    48:a4:0e:42:82:47:1e:5d:db:5e:ba:24:ac:31:80:
                    dc:33:81:9a:87:64:1a:30:b0:ee:0b:48:e3:54:8b:
                    68:cb:de:69:fd:8b:2e:cd:bf:68:35:0b:96:30:4c:
                    73:8f:bd:fe:1f:f0:f1:77:d1:71:a3:ad:ca:67:f7:
                    30:78:7b:4e:ab:b4:e5:97:f4:77:0e:1a:35:e3:32:
                    23:93:33:41:52:1b:8e:8f:01:d0:aa:ce:e3:2c:10:
                    f0:00:59:9f:ba:65:e4:c2:c6:a6:ec:8c:68:4e:b1:
                    04:89:71:29:25:3c:7b:4b:a0:53:44:5f:3d:f0:c3:
                    ee:d0:70:c6:60:ec:f3:ed:a7:02:db:84:53:1d:ca:
                    74:fc:4e:ac:39:3f:51:6a:42:55:a7:65:a4:2b:fe:
                    73:f2:56:7e:26:5e:72:98:84:b3:4d:70:04:78:9b:
                    cb:a6:04:06:4c:61:f8:84:0c:21:b8:6a:b9:35:3a:
                    b9:3e:1b:2c:f0:67:91:fe:3d:b8:20:35:ae:e3:a6:
                    d5:eb:55:1e:ee:bc:c0:70:1c:1b:82:05:c5:8b:2c:
                    5f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:6A:E5:49:55:5A:C8:7C:44:AD:92:44:EB:E6:64:04:49:65:66:FF
            X509v3 Authority Key Identifier:
                keyid:E3:2B:CD:40:C6:77:46:77:D2:C3:70:2E:F5:9E:DF:49:D0:B3:6C:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:31:75:39:ba:52:37:2c:c3:da:2c:95:99:55:01:1e:e1:18:
         c8:c9:cf:18:2a:fd:cd:2d:d7:f1:ff:5c:d4:e6:a6:50:05:1d:
         2c:ff:24:75:87:44:b1:aa:ea:59:ea:79:8d:f3:f3:c1:22:1c:
         11:56:5b:f3:62:ed:f3:2b:41:a8:65:6c:e5:e5:7a:01:e8:35:
         24:96:a3:96:ce:28:d9:e9:f8:f4:71:68:1d:16:30:d8:82:ff:
         52:b9:1d:ad:95:25:eb:df:38:40:96:4c:73:3a:4b:9d:03:42:
         f1:19:e8:8e:f5:1b:af:73:9c:98:93:3d:7b:53:74:95:89:7e:
         b1:f0:8c:22:42:81:06:49:e5:9c:df:5c:56:b2:1b:bf:de:7d:
         39:bd:c9:5e:2d:6d:9d:55:6e:7f:04:52:e7:d8:83:00:3f:fd:
         f9:a6:65:19:9e:0d:a6:c5:45:a1:67:df:37:19:de:ca:d4:ab:
         5e:36:28:a1:46:ee:ee:02:f2:6a:38:01:1a:4f:79:fb:b2:52:
         30:31:f6:51:ea:96:42:09:b7:d2:a5:bd:5b:a0:19:07:b1:34:
         aa:8a:76:1d:b3:67:c7:97:5c:8b:ff:ba:91:99:08:e8:89:27:
         d3:f4:b0:bb:c2:2d:1e:56:cf:24:cb:f9:5c:7c:91:6b:98:58:
         a9:91:62:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:06:50 2026 by rpki-client