Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.mft
File:                     aU5RXMW-Tifp09E-XhwR3HUpJ0s.mft (raw, json)
Hash identifier:          zkbixvcyQA4Qp72Jp1IoAIlycm7Om3U9moE2D3K/F7M=
Subject key identifier:   4B:BB:3C:E4:EE:0A:B8:7D:37:2A:C7:3E:07:85:56:9A:D2:E5:26:BD
Authority key identifier: 69:4E:51:5C:C5:BE:4E:27:E9:D3:D1:3E:5E:1C:11:DC:75:29:27:4B
Certificate issuer:       /CN=694e515cc5be4e27e9d3d13e5e1c11dc7529274b
Certificate serial:       01A08BD69D3C71D25CC689A164B8652E5B7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aU5RXMW-Tifp09E-XhwR3HUpJ0s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.mft
Manifest number:          1A4B
Signing time:             Thu 10 Sep 2026 15:01:32 +0000
Manifest this update:     Thu 10 Sep 2026 15:01:32 +0000
Manifest next update:     Fri 11 Sep 2026 15:01:32 +0000
Files and hashes:         1: DqpxxMPjiSQ9laP_ySepffCvlk8.roa (hash: aa8qqy86lAASIZeHc6KLaXJ1QeLKbYEq/R9968YDwxw=)
                          2: aU5RXMW-Tifp09E-XhwR3HUpJ0s.crl (hash: G5ZErY3F6jbnNGum5hcQBfhdZqbyIcjZAkNQ0/tIU1A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aU5RXMW-Tifp09E-XhwR3HUpJ0s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8b:d6:9d:3c:71:d2:5c:c6:89:a1:64:b8:65:2e:5b:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=694e515cc5be4e27e9d3d13e5e1c11dc7529274b
        Validity
            Not Before: Sep 10 15:01:32 2026 GMT
            Not After : Sep 11 15:01:32 2026 GMT
        Subject: CN=4bbb3ce4ee0ab87d372ac73e0785569ad2e526bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:91:20:3b:dc:ee:76:68:5e:3a:74:01:43:b2:
                    6b:31:87:0d:95:67:ee:7a:b1:45:e8:4e:eb:c9:88:
                    e0:69:5a:8c:07:fc:45:43:8b:87:a2:50:62:cf:1c:
                    cd:54:64:02:e7:ec:c6:97:36:33:e2:64:75:83:5c:
                    ee:e3:6c:65:8a:79:9d:f4:19:30:1f:ac:ad:0c:d4:
                    ad:50:1f:79:1e:84:a9:9d:a4:a8:7f:d0:09:4a:69:
                    c7:0f:98:87:81:33:ca:c0:93:fa:6d:24:f2:ed:7d:
                    6a:5e:2d:03:c1:62:73:31:db:eb:a2:a7:17:35:89:
                    26:8e:00:c5:c8:c5:6d:59:89:2b:c8:1d:12:de:48:
                    44:0a:24:39:09:d9:41:3f:9d:e4:95:6c:5d:db:43:
                    cf:24:70:93:90:4c:05:ba:08:5c:6f:67:e0:55:10:
                    df:2e:d4:76:ad:ea:3b:24:8a:52:1a:7d:ea:de:c0:
                    26:5b:c2:10:8b:45:4a:16:2d:3a:4c:77:a5:39:e8:
                    07:40:ca:6c:4a:25:ff:85:76:de:86:c5:1c:85:e1:
                    a7:e3:a3:69:35:3a:4d:de:28:a8:47:a6:b1:d3:46:
                    51:0f:a8:1f:05:49:d0:5b:0d:31:23:70:ef:18:99:
                    e1:4c:c0:c5:b3:bc:da:2e:58:ad:ae:76:5e:ce:ea:
                    1d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:BB:3C:E4:EE:0A:B8:7D:37:2A:C7:3E:07:85:56:9A:D2:E5:26:BD
            X509v3 Authority Key Identifier:
                keyid:69:4E:51:5C:C5:BE:4E:27:E9:D3:D1:3E:5E:1C:11:DC:75:29:27:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aU5RXMW-Tifp09E-XhwR3HUpJ0s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:58:35:0e:1f:99:4d:e1:3b:8c:5c:3a:24:c3:d8:d0:47:4a:
         02:01:c8:e0:06:e6:1d:39:fa:f8:9c:a0:ff:48:ca:46:95:ac:
         1b:9b:a2:e0:7f:d2:7a:30:f3:49:fe:32:e7:d0:14:de:f9:3e:
         d0:88:f3:af:f2:ee:68:89:8d:e2:b8:fd:1f:02:e1:63:7f:e4:
         95:3a:c6:df:9a:cd:04:5b:66:3b:1a:48:dd:31:00:c2:95:bb:
         b5:25:53:63:22:ee:27:34:f9:8f:fc:0b:e7:0a:7c:be:da:f8:
         6b:ed:de:ed:24:0d:23:0f:9d:af:25:a9:cf:dd:10:0e:41:72:
         7e:d1:93:d3:15:95:f0:f7:c9:d8:78:7c:7d:b6:2d:18:b2:cf:
         e3:f5:12:e1:62:7a:55:3e:85:46:27:c8:0d:71:19:da:48:5b:
         65:77:e2:d1:5b:77:fc:a0:cb:51:28:78:42:66:5e:a3:7f:b2:
         80:e6:86:70:c3:91:ba:23:86:49:09:e3:1a:d5:20:fc:8b:54:
         42:2d:92:b9:28:08:80:7c:4d:b2:32:46:f7:3b:d8:95:7e:c2:
         b8:d6:0f:54:24:75:ac:74:f1:7f:a1:24:62:75:26:de:92:e5:
         df:86:c7:0b:06:49:ec:fd:44:5a:33:b9:00:e9:6e:9b:3d:f7:
         5b:a3:5f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:18:48 2026 by rpki-client