Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.mft
File:                     cK01PMGg0W1ejhSjdXWm89YFY_g.mft (raw, json)
Hash identifier:          fID/rY9E5LArMi8T2G/IxBmeqs/0+YX66t+1UQ/PNAQ=
Subject key identifier:   C9:7C:6A:01:A2:12:52:D5:F5:B5:22:E9:DE:FD:1C:F7:3E:6C:BA:EF
Authority key identifier: 70:AD:35:3C:C1:A0:D1:6D:5E:8E:14:A3:75:75:A6:F3:D6:05:63:F8
Certificate issuer:       /CN=70ad353cc1a0d16d5e8e14a37575a6f3d60563f8
Certificate serial:       01A08B9F128B7199DE6ED07218F806DB261F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cK01PMGg0W1ejhSjdXWm89YFY_g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.mft
Manifest number:          1A49
Signing time:             Thu 10 Sep 2026 14:00:53 +0000
Manifest this update:     Thu 10 Sep 2026 14:00:53 +0000
Manifest next update:     Fri 11 Sep 2026 14:00:53 +0000
Files and hashes:         1: N4mZn2yk8YP_gXohWnBQWYlSt0g.asa (hash: RnHGDbrdo5NYjOwiFA/EE2zdRQ3mHt7+S/1unCOrs8U=)
                          2: NB9VsHBRBEiYw3McIpBpW336Ki4.roa (hash: RFYXt5Z4dlbdvwt6pd136hK2qoU5DGTk7ZrYTY6dsB8=)
                          3: YswYZYlKWOyRavy0ATCTvPfm9wQ.roa (hash: aGrODVPH+/3IzPSKFduvxP2Zeu3f9DRc9hp0rYqfO0U=)
                          4: cK01PMGg0W1ejhSjdXWm89YFY_g.crl (hash: bn/hqmO4YqMjnQy3NSAO3hrAz/8XktrFB3WBE3a+XPM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cK01PMGg0W1ejhSjdXWm89YFY_g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8b:9f:12:8b:71:99:de:6e:d0:72:18:f8:06:db:26:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70ad353cc1a0d16d5e8e14a37575a6f3d60563f8
        Validity
            Not Before: Sep 10 14:00:53 2026 GMT
            Not After : Sep 11 14:00:53 2026 GMT
        Subject: CN=c97c6a01a21252d5f5b522e9defd1cf73e6cbaef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1f:22:15:94:a6:50:6c:41:12:1f:c4:a9:2c:
                    cb:4f:a5:ef:39:3d:3e:d8:ec:f2:84:f2:93:f8:27:
                    92:0d:2c:a1:f0:c2:f9:cb:57:57:25:2c:2d:e6:81:
                    c0:6f:1a:09:4d:c7:1c:41:85:b0:73:25:61:ed:6b:
                    45:7f:fe:e7:e5:23:ee:24:0f:2f:bf:d4:21:85:ee:
                    91:1f:5c:03:a1:c8:c8:31:6c:14:ec:c9:d3:e7:ef:
                    bf:89:a9:93:01:6e:c5:f7:77:c8:11:99:61:8d:ef:
                    8a:58:82:a3:15:4c:f2:78:03:cb:35:fc:b5:51:ac:
                    ee:19:fa:a9:93:16:2e:af:06:c2:ca:47:09:ad:c0:
                    1d:f8:03:bc:62:a4:ba:54:0a:a2:ee:7a:81:af:93:
                    d0:96:cc:2c:10:d0:43:8b:dc:7a:e4:62:3c:ff:d8:
                    5a:6b:b6:e3:c8:21:3a:73:3f:ad:b4:e6:a7:46:2e:
                    69:a3:e7:dd:aa:2d:b0:4e:15:ba:c4:9a:88:b2:4b:
                    39:ee:71:99:1f:3c:c4:c0:8a:0d:2b:4c:e5:63:56:
                    a0:8f:a4:0b:39:26:23:2a:29:77:9b:80:78:aa:50:
                    cb:ff:e4:74:d4:de:7e:de:1a:a8:3a:fd:e4:2a:a5:
                    a5:13:a8:ca:93:c5:2e:89:12:91:5f:b1:44:df:a3:
                    8c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:7C:6A:01:A2:12:52:D5:F5:B5:22:E9:DE:FD:1C:F7:3E:6C:BA:EF
            X509v3 Authority Key Identifier:
                keyid:70:AD:35:3C:C1:A0:D1:6D:5E:8E:14:A3:75:75:A6:F3:D6:05:63:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cK01PMGg0W1ejhSjdXWm89YFY_g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:56:a4:56:47:51:02:71:5b:32:43:83:2a:23:39:e1:59:b0:
         6d:54:03:c6:2d:e3:8b:41:6b:0e:46:1a:1b:fc:a0:bf:45:68:
         e6:da:18:85:5c:3d:0b:a1:45:98:1e:a7:82:ca:57:35:7c:b5:
         0d:82:7e:7a:41:aa:39:ae:72:34:f6:3e:b6:05:f7:b9:d1:61:
         83:17:e9:ff:6f:3f:d7:a0:c0:3e:67:70:5e:5b:0e:c5:6a:a1:
         c0:2d:8e:45:e9:50:c0:9a:51:e6:88:b4:ea:25:8f:91:32:55:
         cf:06:b5:17:64:2e:b0:90:b0:94:65:d1:db:1f:09:cd:4e:0b:
         44:2f:0b:94:5e:7a:38:7a:58:71:84:af:4b:8b:38:1e:a0:df:
         61:75:1a:ab:9e:63:bd:ca:44:31:db:f2:e6:66:be:b5:10:48:
         38:3d:0e:25:29:8f:63:28:8b:5e:97:78:98:c5:3e:88:92:34:
         77:89:58:87:cb:34:c7:81:87:a3:d7:6f:b0:f8:c6:29:c2:87:
         51:9e:97:ad:85:c9:74:4c:ef:bf:22:c8:74:94:ae:04:d3:2c:
         1e:7e:31:4e:91:10:f5:de:7f:d7:fd:7d:01:0f:0e:76:dc:52:
         95:24:17:0b:c8:64:d8:6f:37:77:9e:20:8d:ee:48:11:91:b3:
         79:79:a1:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:41:19 2026 by rpki-client