Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.mft
File:                     R-lMy3tgHaDKCUafYPZTZA_tjBw.mft (raw, json)
Hash identifier:          0dD02omayoON6kQsaaUUYoteYOmROBf1gyYwl0pbIGE=
Subject key identifier:   63:F2:37:2D:A6:10:64:E9:E5:61:C5:1A:06:C1:8A:44:05:57:7C:0B
Authority key identifier: 47:E9:4C:CB:7B:60:1D:A0:CA:09:46:9F:60:F6:53:64:0F:ED:8C:1C
Certificate issuer:       /CN=47e94ccb7b601da0ca09469f60f653640fed8c1c
Certificate serial:       01A068DC07812F7D539D81F41CD23AD3B21B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.mft
Manifest number:          1A4A
Signing time:             Thu 03 Sep 2026 20:00:45 +0000
Manifest this update:     Thu 03 Sep 2026 20:00:45 +0000
Manifest next update:     Fri 04 Sep 2026 20:00:45 +0000
Files and hashes:         1: AFEWredyAjvqwTGptAJ8OUVB7P4.roa (hash: 2m1v01Idcr237fiGD0VAWcDdfdXlJYmgXEBaQhLhLnM=)
                          2: NDSds1zweD0ntatyUwleIAzeIJM.roa (hash: +ZrwYT4v0e9jZWWQ6oW4TJF+kc5mZHurMYfZvW1kcaw=)
                          3: NG0J62IT4TEYyBuMqKM6OpYG_0Q.roa (hash: 0M3OIOezZ3BNzW0tJgVErTfGfdQ/cL0eGWBKnFHK6bA=)
                          4: R-lMy3tgHaDKCUafYPZTZA_tjBw.crl (hash: AJy8sLTtJPalet22R/bG66os6NiLyFX7HWPzP6jtt8o=)
                          5: c4vO0T2N1wxzMzxlgtz0m8cOMRE.roa (hash: 8oVfciD817bSEs2qpkUByGlM63u7F5Is6kgsu7Ks33U=)
                          6: eUCYKUszQzKLl5y0TD_e2TpUs_M.roa (hash: sXPTK8NFfl134JTfg8VQ0nOUGTnLwDMaXmy5yBYZ7ag=)
                          7: ydzz4qC4IHTCEdAs_sR3u8QA-U0.roa (hash: BxYGaauFkfj9FqWYAmJGU+STO4UuDXKQhKUEiwoFjr0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 04 Sep 2026 20:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:68:dc:07:81:2f:7d:53:9d:81:f4:1c:d2:3a:d3:b2:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47e94ccb7b601da0ca09469f60f653640fed8c1c
        Validity
            Not Before: Sep  3 20:00:45 2026 GMT
            Not After : Sep  4 20:00:45 2026 GMT
        Subject: CN=63f2372da61064e9e561c51a06c18a4405577c0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3a:fc:99:86:5a:57:61:eb:59:30:ec:12:44:
                    5f:48:53:0b:83:37:21:8e:f1:ae:fa:41:59:90:cc:
                    5c:dd:92:8d:83:e5:63:e8:48:5d:4e:ae:1b:4b:ff:
                    b1:6a:1e:53:fd:7a:cb:bc:7a:5a:f9:4e:3e:d9:bc:
                    3c:bf:11:8d:60:94:ed:85:c1:8b:70:3c:eb:d9:09:
                    ee:eb:4a:cf:f4:1a:62:48:9e:32:8f:c6:f6:4d:8c:
                    b8:d6:ab:ba:be:e0:8c:11:a8:e4:5e:0c:9c:65:03:
                    76:7b:73:ac:78:dd:23:74:56:d8:27:10:99:95:f8:
                    8b:92:c5:86:ed:8b:45:03:0d:10:d7:02:ca:79:4b:
                    c2:32:b5:70:24:36:c5:fc:8c:4e:02:78:14:e9:21:
                    65:f7:a0:26:54:6d:92:18:47:f3:ce:09:7c:a1:14:
                    f0:48:df:2e:c7:08:89:8e:33:08:0f:72:39:59:f0:
                    2d:f1:f3:f1:50:92:f3:0f:7a:47:7c:b5:46:54:f8:
                    b2:b8:6a:c4:2f:bf:94:be:df:5e:c0:36:5f:35:26:
                    0d:d4:6b:38:bc:b9:f8:40:26:28:f4:9c:f5:b5:95:
                    ea:4c:a5:01:ec:da:bb:f4:4e:0d:f0:a0:b1:d5:a4:
                    4d:e4:08:dd:f6:4d:e5:68:a8:f7:bf:ae:d8:ca:42:
                    bc:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:F2:37:2D:A6:10:64:E9:E5:61:C5:1A:06:C1:8A:44:05:57:7C:0B
            X509v3 Authority Key Identifier:
                keyid:47:E9:4C:CB:7B:60:1D:A0:CA:09:46:9F:60:F6:53:64:0F:ED:8C:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:ff:cf:61:40:4a:b6:44:3b:3e:f3:04:23:bf:45:70:1c:6d:
         d3:b0:44:cc:7a:33:24:19:f1:0d:fa:88:23:a0:7a:7e:dc:3c:
         8e:98:a8:ba:5c:a6:ec:38:1a:2b:b8:20:49:3d:65:6f:5d:7b:
         82:74:b4:97:8c:3b:2e:56:05:75:70:37:70:a3:10:c1:97:1b:
         76:55:be:2e:6e:73:0c:80:60:29:d8:86:00:af:1f:01:69:51:
         6d:fc:2e:6d:7d:59:3d:1d:1f:e8:8b:9b:25:b2:5a:f6:67:1a:
         f8:60:3d:ab:f7:09:3d:43:38:b5:23:b8:79:21:0b:7c:25:6c:
         9a:29:a9:30:b3:9d:ab:54:c6:89:d1:e7:fc:93:26:f0:8e:29:
         98:92:d1:7f:ea:7a:dc:b9:1b:05:9e:32:65:7d:b8:19:ff:8a:
         99:08:ff:a5:4e:35:5b:0b:82:83:c5:5b:8c:53:a3:13:b2:f0:
         85:78:8d:f7:58:bb:7e:4c:4b:ae:10:2d:ea:b5:7a:68:8a:14:
         33:2d:bb:c3:6d:7c:f0:7e:9b:3a:70:c8:67:14:bc:c8:c2:d4:
         7c:b2:03:56:c0:ea:b2:e7:c1:66:95:40:47:66:a3:a7:1b:85:
         80:13:8f:26:5a:34:ee:be:df:de:b7:5d:b1:ef:f7:05:81:13:
         56:e2:af:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 03:46:08 2026 by rpki-client