Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.mft
File:                     4toj07kw1MHzrHMGXXGmB8NdKQA.mft (raw, json)
Hash identifier:          voNBMAp2Xy8FR39L/CwIZAiMybw0olNkwfTTpWvJfco=
Subject key identifier:   A4:C0:E7:BF:D5:52:C8:49:9F:47:63:D5:82:6A:9B:F6:E8:0F:BA:4E
Authority key identifier: E2:DA:23:D3:B9:30:D4:C1:F3:AC:73:06:5D:71:A6:07:C3:5D:29:00
Certificate issuer:       /CN=e2da23d3b930d4c1f3ac73065d71a607c35d2900
Certificate serial:       01A0E9D29C1438484C3737B267BF3B7EF7D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4toj07kw1MHzrHMGXXGmB8NdKQA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.mft
Manifest number:          1A86
Signing time:             Mon 28 Sep 2026 21:01:28 +0000
Manifest this update:     Mon 28 Sep 2026 21:01:28 +0000
Manifest next update:     Tue 29 Sep 2026 21:01:28 +0000
Files and hashes:         1: 4toj07kw1MHzrHMGXXGmB8NdKQA.crl (hash: zV/1PIv6BiUmb8mXiPUdDyNPcU2NeOZE6n8Jbkuy4AY=)
                          2: 5Jc6tMJwHs6_kDZssNgNCa5DcfQ.asa (hash: hK1xGE+N20KJfOPReB2sfspix23SnKunSEzOm7SLfDw=)
                          3: 5aSu5rDgohcAcFRBlVeL4KQf-Bc.roa (hash: TBrAPV4bOwpXI3ikK/+R0NLpPd2CyHMsQiSsoHb0Hng=)
                          4: B4UdmI4nMjXvDI9mqvP3jq5Yyds.roa (hash: TvdoyPhTynvytwC8PwcUZrOiE5PXu6aF1+Z/HvWiCkk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4toj07kw1MHzrHMGXXGmB8NdKQA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 19:32:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e9:d2:9c:14:38:48:4c:37:37:b2:67:bf:3b:7e:f7:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2da23d3b930d4c1f3ac73065d71a607c35d2900
        Validity
            Not Before: Sep 28 21:01:28 2026 GMT
            Not After : Sep 29 21:01:28 2026 GMT
        Subject: CN=a4c0e7bfd552c8499f4763d5826a9bf6e80fba4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:9b:f4:a4:3f:25:59:2f:cc:dd:8f:bc:63:99:
                    64:45:88:88:b9:a6:51:dd:87:04:82:f7:9a:96:a9:
                    c6:e4:b6:1e:89:e8:65:79:07:79:fd:e5:e7:ee:7d:
                    6f:b2:61:cd:9b:23:93:53:37:8a:00:5c:08:66:45:
                    98:3c:ab:25:97:2e:0a:fc:51:07:05:07:8d:64:46:
                    56:dd:73:f8:0d:8c:58:96:95:c2:8c:1a:c1:12:22:
                    11:a7:24:1f:08:b4:a9:61:01:c7:a1:c1:85:20:e5:
                    f6:57:59:57:fe:58:fb:cc:f0:2e:80:cc:cf:2a:67:
                    d6:ec:41:12:cd:bc:44:36:ad:f5:0e:eb:8e:4e:62:
                    f0:2f:32:fd:97:a8:43:40:99:a7:2a:67:2f:88:1b:
                    cc:df:fd:64:b8:0b:86:95:ac:b5:eb:37:d7:fb:a2:
                    63:e3:1f:89:26:0c:7d:4b:e5:10:a7:96:30:e3:68:
                    69:ab:c2:c7:47:97:29:60:42:53:0e:ae:c5:69:b1:
                    ca:0b:3c:cd:06:31:92:e0:b1:a4:c1:38:d9:49:ad:
                    54:94:e9:85:6d:8e:d8:72:14:3e:a9:11:96:03:62:
                    aa:af:02:62:f1:ea:81:4c:8c:99:bd:30:25:c7:0d:
                    16:94:9d:d4:00:87:12:04:2d:0f:83:94:38:ef:70:
                    15:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:C0:E7:BF:D5:52:C8:49:9F:47:63:D5:82:6A:9B:F6:E8:0F:BA:4E
            X509v3 Authority Key Identifier:
                keyid:E2:DA:23:D3:B9:30:D4:C1:F3:AC:73:06:5D:71:A6:07:C3:5D:29:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4toj07kw1MHzrHMGXXGmB8NdKQA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:b0:1a:03:68:aa:6f:61:02:69:f4:cf:71:a0:91:6b:4d:24:
         ab:aa:2c:38:a6:a6:7d:f3:e8:34:10:23:cf:05:29:0f:f5:2a:
         a1:ef:79:92:a0:8e:61:39:29:21:7f:84:f4:f7:03:b6:f6:8d:
         3d:ef:1f:17:dd:68:ed:da:90:bb:c5:69:bb:de:20:22:09:bb:
         2b:59:c6:98:a1:91:85:8b:65:5d:b8:ff:62:b4:a6:bd:6f:1d:
         96:7c:c4:17:c6:92:9e:49:8c:c0:f9:95:2e:2c:95:b1:89:67:
         78:d8:e4:58:ad:ad:72:36:90:7a:77:2f:48:76:b6:99:8c:31:
         92:26:b0:50:99:f2:04:e0:fe:db:25:1d:7f:0e:d6:fe:93:c5:
         09:b1:71:a6:01:19:ba:f3:0a:13:f5:71:f4:24:bd:5f:10:b7:
         6b:cf:ba:a0:27:96:40:fd:a8:39:da:e0:38:d6:be:ac:7a:cf:
         05:d9:fd:7f:36:ee:2c:75:37:07:bd:6a:85:19:18:62:d9:63:
         60:68:2c:e2:dc:67:a1:42:40:df:a1:e7:3a:77:45:74:53:50:
         a2:71:b0:4b:8a:1f:52:8f:c9:d5:ea:5f:78:50:a3:95:13:4d:
         81:f5:5b:3e:93:15:91:93:75:ec:c2:00:21:3a:40:33:68:5e:
         e6:3a:ee:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 04:17:18 2026 by rpki-client