Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.mft
File:                     E9Wf1oPjVw1jiVUwzrnyyE_v4KM.mft (raw, json)
Hash identifier:          1NbxYwonPxNvz1cOk+T1J6iJ1L4le7Ic+nMPZ2SsVQk=
Subject key identifier:   70:EC:C7:7A:47:4A:6B:D7:D0:22:FF:E2:B6:94:C4:E9:F5:23:04:00
Authority key identifier: 13:D5:9F:D6:83:E3:57:0D:63:89:55:30:CE:B9:F2:C8:4F:EF:E0:A3
Certificate issuer:       /CN=13d59fd683e3570d63895530ceb9f2c84fefe0a3
Certificate serial:       01A0B49AFB289F5168D2CA4F7DA17822A19C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.mft
Manifest number:          1A64
Signing time:             Fri 18 Sep 2026 13:00:50 +0000
Manifest this update:     Fri 18 Sep 2026 13:00:50 +0000
Manifest next update:     Sat 19 Sep 2026 13:00:50 +0000
Files and hashes:         1: 01aDFcgwpP0gaeNsCEBXvu9EqVo.roa (hash: X2qj0FduSAsiEFG0pH2Wl6RB6wezxtiHDycSdWfuHyg=)
                          2: 39rPTu5yX2a1zfysxgm6Jq1HK_o.roa (hash: 6BnKkYXbYywwMGgDtqlqpR6k8qdTXNyGen3SDvJqbAk=)
                          3: E9Wf1oPjVw1jiVUwzrnyyE_v4KM.crl (hash: OnxAC85TSCnTE/mNbsj45EdW3y4BE6tAAqRbnCIFHTk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Sep 2026 13:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:b4:9a:fb:28:9f:51:68:d2:ca:4f:7d:a1:78:22:a1:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13d59fd683e3570d63895530ceb9f2c84fefe0a3
        Validity
            Not Before: Sep 18 13:00:50 2026 GMT
            Not After : Sep 19 13:00:50 2026 GMT
        Subject: CN=70ecc77a474a6bd7d022ffe2b694c4e9f5230400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:87:a5:cc:a4:94:b9:2c:b7:5b:d4:ee:60:53:
                    51:6a:3f:05:fe:a7:ea:2d:ff:5b:cd:e5:0b:ba:30:
                    bc:20:15:52:8b:8d:e2:79:3b:02:bf:e1:82:48:a5:
                    4a:2d:f3:19:b4:98:17:52:c9:a9:d5:ee:49:76:fb:
                    d1:31:bb:ab:eb:6b:99:68:fb:cb:fa:54:6a:aa:7d:
                    2b:7b:5e:7e:b5:2e:ef:00:72:33:69:af:02:3b:fa:
                    96:e3:e0:a8:53:c9:1f:4e:61:34:4b:2c:3c:d8:34:
                    7b:73:c6:d1:33:7a:19:9e:22:63:68:1b:79:76:21:
                    6f:58:45:88:87:3f:cb:06:a4:5e:82:31:77:c8:c4:
                    7f:86:66:fe:dd:5e:a5:2a:4e:e3:4c:f7:5f:6d:09:
                    3b:a8:d2:2b:20:55:d9:0d:58:9c:c9:94:f1:fc:e8:
                    56:9a:d0:42:a9:f0:6b:87:50:d1:af:0f:d9:4a:ce:
                    d2:64:80:3a:b4:a4:81:52:48:7e:6a:5b:e0:a3:80:
                    fb:a6:dd:74:3c:16:98:8d:70:d1:89:fa:c9:bf:45:
                    de:73:ee:02:83:bf:71:91:64:fe:bb:27:6c:b8:c3:
                    a6:44:ea:3b:c1:cc:20:e1:b2:8e:3e:20:e9:d2:1d:
                    39:9c:2b:92:c2:bc:a6:49:ea:4d:75:79:c9:84:32:
                    ff:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:EC:C7:7A:47:4A:6B:D7:D0:22:FF:E2:B6:94:C4:E9:F5:23:04:00
            X509v3 Authority Key Identifier:
                keyid:13:D5:9F:D6:83:E3:57:0D:63:89:55:30:CE:B9:F2:C8:4F:EF:E0:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:60:8b:a8:f0:01:c9:23:3f:1f:c3:f4:2a:9a:9c:51:ec:e8:
         ef:55:87:72:93:70:1b:26:53:ab:a7:1b:f7:11:e0:57:db:cc:
         44:28:fa:af:13:8e:45:cc:89:12:ac:d4:08:c3:c1:d1:cd:de:
         6e:95:0b:88:36:41:b5:06:27:75:11:5b:dc:03:e5:f0:a2:9a:
         3c:a6:1e:58:99:b1:8b:1a:70:02:53:d5:98:49:d7:00:17:2f:
         f8:b7:c2:5e:f2:d5:2c:00:ef:50:04:0d:3b:78:59:4c:8c:de:
         84:3c:b9:30:51:71:1f:8b:be:ce:63:44:53:c3:00:00:75:7c:
         65:65:41:b6:0a:7a:1f:6a:a8:ff:d8:56:74:d2:37:16:df:54:
         fe:ba:bb:e5:57:ea:0c:45:59:90:e4:92:2e:f5:88:d2:63:75:
         64:f7:ca:11:70:32:f9:a6:4c:8e:09:42:0e:7b:0a:72:a3:00:
         16:64:1e:59:6b:15:82:ed:bc:b4:d7:a1:e5:e9:1d:dc:aa:76:
         31:7d:e3:a7:5c:d8:0b:3d:14:a2:5d:a0:be:d6:24:74:81:13:
         b3:aa:01:58:fb:48:d6:b0:70:28:a4:87:5e:3e:fb:5a:0f:eb:
         06:c5:6a:3d:34:0c:c8:50:bd:94:a0:36:8e:2e:3e:7a:c7:08:
         ee:4a:84:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 20:05:59 2026 by rpki-client