Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.mft
File:                     Se4RlL2B0ZRsOfEPf9_fItGgMRI.mft (raw, json)
Hash identifier:          g6jna2zalYE/94C+kleFq5ktydhkrLe8fVimaGRxbao=
Subject key identifier:   BE:0F:7B:47:9B:0F:7C:1C:3F:6A:EA:59:90:49:1C:C1:AF:77:1C:A9
Authority key identifier: 49:EE:11:94:BD:81:D1:94:6C:39:F1:0F:7F:DF:DF:22:D1:A0:31:12
Certificate issuer:       /CN=49ee1194bd81d1946c39f10f7fdfdf22d1a03112
Certificate serial:       01A0D26E2915DCA66EB7BD0876F92E1A21B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Se4RlL2B0ZRsOfEPf9_fItGgMRI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.mft
Manifest number:          19DC
Signing time:             Thu 24 Sep 2026 08:00:29 +0000
Manifest this update:     Thu 24 Sep 2026 08:00:29 +0000
Manifest next update:     Fri 25 Sep 2026 08:00:29 +0000
Files and hashes:         1: 4MLoPrvWwEvlvkXdgMCtTF8VC3E.roa (hash: s0ibJrg3ZFVdVfAiEwCQ+OIFm/y57l65fC2BAHH9VCc=)
                          2: Se4RlL2B0ZRsOfEPf9_fItGgMRI.crl (hash: z4YOrpONBDD8JdkFjMikDSidph5r3X9cJ4f39Q7rJho=)
                          3: TlmEOt0-y-w49AgNxJOZ0wNCvZ8.roa (hash: 9QB2O9CF6AxN2XHx+5Fgp4F7JBjPl+H/+qk8ZUWd/Og=)
                          4: gJauMi46QPPzyKWqDiA5ddI3Cho.roa (hash: 8cj4UlqGZgB6E6848rUjL+1fRW7cZLYn+yIARbioPjA=)
                          5: hs-AzdnIKl__cAx33Gis1dnFwQw.roa (hash: HkOzeRN5x0MI5F+tRIRhpZumHAlvuvmNzxwstCGaN70=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Se4RlL2B0ZRsOfEPf9_fItGgMRI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 08:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d2:6e:29:15:dc:a6:6e:b7:bd:08:76:f9:2e:1a:21:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49ee1194bd81d1946c39f10f7fdfdf22d1a03112
        Validity
            Not Before: Sep 24 08:00:29 2026 GMT
            Not After : Sep 25 08:00:29 2026 GMT
        Subject: CN=be0f7b479b0f7c1c3f6aea5990491cc1af771ca9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a7:02:1f:8f:9f:2b:b7:9e:aa:a9:c8:c4:6c:
                    f6:29:e9:ed:b9:14:86:74:b1:49:b8:86:d8:da:91:
                    c3:a5:c1:af:d3:3b:51:04:5f:73:dd:15:63:17:a8:
                    dd:00:f4:8c:60:69:c4:24:ed:66:74:c8:3c:c4:47:
                    e7:57:04:22:45:74:bd:d4:3a:90:10:78:1b:ec:e2:
                    43:35:c0:ef:40:e9:50:1e:d0:2e:ca:a8:83:ad:3e:
                    c0:9f:61:9a:53:d1:9b:52:03:6b:37:ce:56:5f:a7:
                    5d:d5:5b:91:8f:86:8d:5d:13:3b:0b:e2:75:a7:0d:
                    80:fe:8f:a6:8f:68:7c:64:94:8a:20:9f:27:bd:f5:
                    a9:6a:a7:e1:39:fd:b0:aa:d4:7e:78:65:10:7f:67:
                    48:85:1a:b9:fa:3b:29:54:02:b0:8b:a4:05:13:bf:
                    0b:58:f4:b1:27:07:d6:b1:9c:83:5e:9f:90:62:76:
                    93:e3:07:77:5d:7a:ed:e7:02:e9:35:5b:6f:9c:2c:
                    a1:df:68:6f:22:f0:ff:6b:b3:94:3a:59:45:ca:d1:
                    c3:37:b8:ab:d2:74:b4:a9:3c:b7:75:d4:c7:5b:e3:
                    a8:0c:0e:4f:a5:84:92:68:b3:22:76:34:b9:2f:05:
                    cb:22:04:b1:84:d5:70:df:ae:15:42:1c:35:91:4e:
                    22:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:0F:7B:47:9B:0F:7C:1C:3F:6A:EA:59:90:49:1C:C1:AF:77:1C:A9
            X509v3 Authority Key Identifier:
                keyid:49:EE:11:94:BD:81:D1:94:6C:39:F1:0F:7F:DF:DF:22:D1:A0:31:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Se4RlL2B0ZRsOfEPf9_fItGgMRI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:7a:f0:4c:8f:b9:42:3e:90:ee:c5:55:12:8f:26:c8:ba:65:
         8d:fd:39:6f:c2:4c:eb:2b:24:93:bf:d1:82:f7:dc:da:38:02:
         dc:f7:df:a4:0e:40:bb:96:d2:dc:b6:17:41:77:7f:75:9b:1b:
         da:f2:c2:10:28:aa:f0:5d:ee:27:f7:a2:25:91:28:4e:cd:61:
         3f:0f:7e:3b:87:40:ab:27:60:e9:04:15:12:a5:41:5c:f5:89:
         99:00:c6:37:d3:14:28:69:69:ee:57:dc:6d:1e:1c:88:cf:2e:
         00:8a:94:1e:10:94:b1:0c:1b:ed:f0:69:a2:0a:94:1b:7d:80:
         a3:fa:ef:03:af:df:91:64:7f:44:3a:0b:59:53:0f:79:db:04:
         ce:6a:1f:15:46:c8:8d:c2:06:4d:c4:17:72:8a:13:81:88:75:
         01:43:4a:01:bd:f4:88:f5:44:2e:eb:2c:c1:80:69:08:1d:bd:
         2d:c4:36:3b:96:00:78:55:6d:09:93:3d:7e:e6:d6:40:28:45:
         db:ae:0a:10:ad:89:e3:16:25:c6:81:ab:33:60:c4:64:88:b3:
         e5:32:31:53:cb:c8:70:87:1a:c5:35:93:e9:11:6f:62:94:5c:
         e3:db:04:76:ea:70:f2:5c:be:b4:f2:ce:ed:4a:a6:6f:1d:03:
         3a:e0:3b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 16:57:48 2026 by rpki-client