Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/305360-2203-4a21-a2fd-91e8599ddbf7/1/pyQ4NJChBb3A0hWXv7FHjvBGMLE.mft
File:                     pyQ4NJChBb3A0hWXv7FHjvBGMLE.mft (raw, json)
Hash identifier:          9vsvXe3H+BJMoUqWemeKCCbE1hI03ErGdSoB7XCSnYM=
Subject key identifier:   BA:F8:AB:C8:3C:74:31:E2:50:FB:5E:3D:2E:8A:C8:13:88:7A:B5:FA
Authority key identifier: A7:24:38:34:90:A1:05:BD:C0:D2:15:97:BF:B1:47:8E:F0:46:30:B1
Certificate issuer:       /CN=a724383490a105bdc0d21597bfb1478ef04630b1
Certificate serial:       01A06FF1E88BC3D5E1EF6895FDBC0EE5CFB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pyQ4NJChBb3A0hWXv7FHjvBGMLE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/305360-2203-4a21-a2fd-91e8599ddbf7/1/pyQ4NJChBb3A0hWXv7FHjvBGMLE.mft
Manifest number:          0A0B
Signing time:             Sat 05 Sep 2026 05:01:59 +0000
Manifest this update:     Sat 05 Sep 2026 05:01:59 +0000
Manifest next update:     Sun 06 Sep 2026 05:01:59 +0000
Files and hashes:         1: QQvg19RwajXD2HR6-dIlare9_Rk.roa (hash: NDZGZHbva25Eq3lCZo+AeGz2C0nVtEPW/31zQHhJYJ0=)
                          2: pyQ4NJChBb3A0hWXv7FHjvBGMLE.crl (hash: Ea9e4CZFI/KD5C2rflcQpsQ+ECDibvzLe9mD7hXy7+4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/305360-2203-4a21-a2fd-91e8599ddbf7/1/pyQ4NJChBb3A0hWXv7FHjvBGMLE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/305360-2203-4a21-a2fd-91e8599ddbf7/1/pyQ4NJChBb3A0hWXv7FHjvBGMLE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pyQ4NJChBb3A0hWXv7FHjvBGMLE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Sep 2026 01:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6f:f1:e8:8b:c3:d5:e1:ef:68:95:fd:bc:0e:e5:cf:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a724383490a105bdc0d21597bfb1478ef04630b1
        Validity
            Not Before: Sep  5 05:01:59 2026 GMT
            Not After : Sep  6 05:01:59 2026 GMT
        Subject: CN=baf8abc83c7431e250fb5e3d2e8ac813887ab5fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:02:f9:9f:23:6c:61:3f:50:6b:7f:d2:86:1d:
                    e0:2d:00:1a:d9:8e:be:06:00:64:46:19:2c:bd:f7:
                    eb:66:e8:59:af:57:1c:ef:e0:fb:fd:7c:90:80:5a:
                    a1:99:06:0a:bb:cf:cd:4c:f5:d5:b6:4d:4f:ef:ea:
                    2e:68:df:61:3c:a5:d3:62:62:ce:e2:67:cf:19:85:
                    77:d3:51:f4:b0:ed:66:9d:c5:4c:a3:12:e5:b9:5b:
                    11:42:cc:4e:1d:64:1d:62:a3:59:a9:3a:ae:03:8c:
                    85:73:e4:ce:8f:19:67:77:7d:b0:5a:63:04:e3:ae:
                    6b:73:a5:4f:80:40:ff:ce:20:95:b5:f7:14:65:ea:
                    d1:6c:86:05:ea:2a:a7:b9:d1:31:48:36:65:b2:44:
                    9a:e2:6e:a9:c1:09:d7:5c:3a:0e:2b:cf:95:f1:7a:
                    07:97:94:25:46:47:e3:37:b5:91:fd:c3:6d:87:bf:
                    7c:d6:46:d4:61:3c:5e:3f:5f:99:b2:3a:4c:a0:ea:
                    91:03:d8:26:ed:b2:33:83:72:07:3f:90:c6:85:77:
                    92:75:07:9c:ec:71:ba:f2:73:d0:e0:73:43:69:63:
                    1a:ba:8b:5e:9c:83:cc:43:e8:9b:cd:28:63:eb:b9:
                    0e:f8:5a:f6:77:1a:57:ab:9b:30:d3:fe:2e:12:42:
                    5b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:F8:AB:C8:3C:74:31:E2:50:FB:5E:3D:2E:8A:C8:13:88:7A:B5:FA
            X509v3 Authority Key Identifier:
                keyid:A7:24:38:34:90:A1:05:BD:C0:D2:15:97:BF:B1:47:8E:F0:46:30:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pyQ4NJChBb3A0hWXv7FHjvBGMLE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/305360-2203-4a21-a2fd-91e8599ddbf7/1/pyQ4NJChBb3A0hWXv7FHjvBGMLE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/305360-2203-4a21-a2fd-91e8599ddbf7/1/pyQ4NJChBb3A0hWXv7FHjvBGMLE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:ee:66:00:ed:43:24:f0:d9:52:f8:99:36:7d:59:e0:4d:ee:
         0a:e6:87:a4:9d:0f:8d:fd:36:c6:50:83:c1:c1:fc:f8:6d:09:
         5d:a3:91:4e:71:52:47:d8:6f:ea:f8:4c:31:cf:5d:a7:ae:e4:
         83:0a:5d:ac:84:f8:e9:17:3e:0f:8f:86:84:cc:23:2e:d8:de:
         ea:34:a9:02:1f:ee:96:a6:88:7c:05:2e:06:5c:df:f1:d9:81:
         e0:f0:7f:a5:3e:d1:25:c8:46:39:3b:ce:de:56:f1:19:98:fa:
         80:f8:a4:8d:38:5b:e5:ef:19:0b:3f:78:23:f0:37:a3:42:cc:
         a2:35:07:74:86:8a:50:6e:1d:40:f5:8a:f8:d5:23:e0:9e:55:
         c1:af:9c:74:a3:a4:53:4c:c5:0d:29:bd:5f:70:b6:1c:38:75:
         17:c6:fa:f5:6d:40:9e:a4:f0:d9:8b:14:9e:8c:a9:2b:8b:f0:
         05:dc:a8:96:ca:a9:3a:78:c1:9e:d2:5a:ef:70:0a:90:1e:4a:
         e4:6c:f7:ae:46:b3:9f:9a:ad:84:d6:b9:7c:d0:f6:78:76:fa:
         42:f1:be:7e:96:5c:3c:39:5f:9e:a3:c6:22:0b:9d:5d:20:e8:
         6d:5e:7b:fc:1e:ee:89:d7:93:fe:8e:42:80:9c:e1:94:80:06:
         02:3d:e8:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 09:00:18 2026 by rpki-client