Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/4A98YCwtJIbuagplJAe5BKfUDeA.mft
File:                     4A98YCwtJIbuagplJAe5BKfUDeA.mft (raw, json)
Hash identifier:          g+2byAoBnDLy/nZI/w62uAkonskk490Pz0VeLIG/iJI=
Subject key identifier:   AE:64:B8:FD:31:EE:36:BE:A9:1D:69:15:08:2C:8D:61:D7:23:4C:D8
Authority key identifier: E0:0F:7C:60:2C:2D:24:86:EE:6A:0A:65:24:07:B9:04:A7:D4:0D:E0
Certificate issuer:       /CN=e00f7c602c2d2486ee6a0a652407b904a7d40de0
Certificate serial:       01A09434CBC40D1874E69B2145DABAB879D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4A98YCwtJIbuagplJAe5BKfUDeA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/4A98YCwtJIbuagplJAe5BKfUDeA.mft
Manifest number:          C6
Signing time:             Sat 12 Sep 2026 06:01:22 +0000
Manifest this update:     Sat 12 Sep 2026 06:01:22 +0000
Manifest next update:     Sun 13 Sep 2026 06:01:22 +0000
Files and hashes:         1: 4A98YCwtJIbuagplJAe5BKfUDeA.crl (hash: X2k+a3tQ7Y3XDGbJpVAWIQyz/IBsgowObaFGhiiU34A=)
                          2: XYZAtepajrERzVfepYrQ1WLpJn0.roa (hash: NwsD9n0fR/8scpVFCnvi5VpS0JM3A+KLBhhzQOSTM9M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/4A98YCwtJIbuagplJAe5BKfUDeA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/4A98YCwtJIbuagplJAe5BKfUDeA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4A98YCwtJIbuagplJAe5BKfUDeA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 13 Sep 2026 02:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:94:34:cb:c4:0d:18:74:e6:9b:21:45:da:ba:b8:79:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e00f7c602c2d2486ee6a0a652407b904a7d40de0
        Validity
            Not Before: Sep 12 06:01:22 2026 GMT
            Not After : Sep 13 06:01:22 2026 GMT
        Subject: CN=ae64b8fd31ee36bea91d6915082c8d61d7234cd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:cc:87:3c:ac:7d:71:0e:1c:40:0b:4f:a2:ff:
                    a6:f4:64:95:b6:8d:53:ea:b3:63:05:db:1b:84:07:
                    7d:77:2a:fe:aa:81:9d:01:13:5c:f5:09:3a:19:be:
                    4c:84:3c:4d:54:1e:8d:0b:bf:1b:1c:4c:14:8f:23:
                    61:44:71:52:43:5d:0c:00:7b:b7:5c:34:31:1f:b9:
                    13:f1:dc:1b:f0:58:d0:c4:7d:8f:4e:cd:4d:cb:d6:
                    88:41:bd:b9:c6:99:71:9c:57:35:67:3b:e9:b4:90:
                    a3:b0:d8:7c:e7:b8:0e:5a:30:a7:4d:17:63:d3:49:
                    a0:48:8c:93:eb:1d:3d:c0:99:3c:b5:68:58:fd:84:
                    1e:f5:f9:30:87:2e:35:ce:50:19:da:2e:02:22:0d:
                    db:a2:9e:e2:84:60:63:85:2b:98:d0:4b:8e:cd:ee:
                    26:68:b9:f5:06:6a:20:9d:87:52:9f:ea:4c:0a:d0:
                    8c:30:a4:1f:1a:ec:d1:2d:09:2d:c8:64:3c:09:75:
                    b2:67:e5:f7:ba:f5:46:73:ce:2d:b6:72:9d:7e:35:
                    4b:9a:41:df:b3:39:15:b6:83:5b:db:b9:8a:61:e8:
                    2b:50:8e:25:96:31:ac:6f:0b:b5:bc:0e:2a:c7:b4:
                    17:ff:a2:f4:48:21:7a:da:29:10:0b:53:b4:19:fd:
                    ba:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:64:B8:FD:31:EE:36:BE:A9:1D:69:15:08:2C:8D:61:D7:23:4C:D8
            X509v3 Authority Key Identifier:
                keyid:E0:0F:7C:60:2C:2D:24:86:EE:6A:0A:65:24:07:B9:04:A7:D4:0D:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4A98YCwtJIbuagplJAe5BKfUDeA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/4A98YCwtJIbuagplJAe5BKfUDeA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/4A98YCwtJIbuagplJAe5BKfUDeA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:44:6b:08:3d:c7:f6:6f:b5:f7:e2:48:36:81:cb:d7:0b:de:
         d5:61:e9:64:54:1a:c8:b3:fb:ae:08:0d:76:bd:c3:98:08:b6:
         8a:53:c7:68:c7:64:35:dd:0e:fd:76:74:9e:6e:92:7d:8c:59:
         cb:03:94:f6:e3:3f:6b:4e:b3:c0:b0:70:3e:df:13:0b:1f:64:
         c0:ba:2e:67:f7:e5:0c:f6:55:49:95:37:ec:f3:78:2f:20:d1:
         bc:c1:cc:25:8d:18:07:95:59:65:9c:21:71:ab:e9:c6:66:06:
         10:fa:91:04:34:f6:07:96:df:29:4d:92:42:01:d0:c3:f6:9f:
         c3:03:0d:b9:51:cd:14:c4:ea:83:27:6b:9f:af:f4:c4:ef:4a:
         76:0d:8b:25:0d:fa:4b:0a:5c:9a:60:14:b3:b8:16:05:34:26:
         fe:ce:8a:b4:02:64:5a:7c:ba:80:25:7c:33:4b:d6:37:22:66:
         5c:4a:03:3b:d2:94:23:7a:87:5c:ae:c4:8c:45:9f:a0:74:b5:
         6e:dc:50:c4:4e:7f:8b:7e:90:9b:ef:27:6e:67:3e:fa:df:34:
         03:8f:8b:45:ed:dd:f1:61:61:23:c2:3c:2a:1a:a9:c1:98:cb:
         ca:b1:e5:cb:ec:3a:52:93:97:fa:b6:6b:d4:93:26:c6:24:a4:
         c5:b3:1d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 12:00:31 2026 by rpki-client