Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft
File:                     sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft (raw, json)
Hash identifier:          olBrr6QtpNLBTBs/EkYF5YUXmmV/ayu175RkxpaLfIA=
Subject key identifier:   8F:D5:42:EB:44:8B:FF:E8:84:0C:26:D4:BD:F1:A8:5D:82:DF:9A:15
Authority key identifier: B1:94:F0:30:4E:ED:D3:63:C6:62:2F:D9:1C:59:B1:08:71:AA:30:44
Certificate issuer:       /CN=b194f0304eedd363c6622fd91c59b10871aa3044
Certificate serial:       01A08B314A25A7EA1D70277B07F2C2A95C91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sZTwME7t02PGYi_ZHFmxCHGqMEQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft
Manifest number:          1A4C
Signing time:             Thu 10 Sep 2026 12:00:58 +0000
Manifest this update:     Thu 10 Sep 2026 12:00:58 +0000
Manifest next update:     Fri 11 Sep 2026 12:00:58 +0000
Files and hashes:         1: 1OKJSf7t7_lAiooOLlq2_b408jY.asa (hash: TVW+nVerXDEgPaaDUGrcKWYX2YALjhxpnf1JfzADSvU=)
                          2: B9HNNW3Bz7oID9G3-lfUfNqxyrY.roa (hash: tzCu3LyuSxup7J333i9m+mIRLj60qx1pJbahNRpyJGA=)
                          3: MUOyRWPN46PNKkdduP0g7nQfNok.roa (hash: fGl9qQgDH816kxRklhwGBTJ3WAbYJUjNKNT/W0cEqrc=)
                          4: sZTwME7t02PGYi_ZHFmxCHGqMEQ.crl (hash: r03eeNyjbbazF9gys0IrQXOp3IVrPtQQ7sheu6Hq+ug=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sZTwME7t02PGYi_ZHFmxCHGqMEQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 12:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8b:31:4a:25:a7:ea:1d:70:27:7b:07:f2:c2:a9:5c:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b194f0304eedd363c6622fd91c59b10871aa3044
        Validity
            Not Before: Sep 10 12:00:58 2026 GMT
            Not After : Sep 11 12:00:58 2026 GMT
        Subject: CN=8fd542eb448bffe8840c26d4bdf1a85d82df9a15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8c:22:05:4f:37:b3:20:47:85:a2:58:eb:d8:
                    fb:92:8b:1b:e3:9e:b9:04:a0:45:ab:d7:5b:ed:e4:
                    d9:5b:4a:0a:21:8f:8a:01:c4:8b:c5:3a:bf:2a:50:
                    be:26:b6:a3:1a:88:52:20:cc:05:a9:72:80:a4:39:
                    5e:29:e3:b3:67:bd:8e:8c:15:bb:6b:7b:33:34:8b:
                    ff:37:6a:21:09:ec:62:c4:fe:11:46:b2:3d:73:20:
                    a2:6c:b6:8e:bd:e8:f0:fc:08:8c:d7:37:9f:63:40:
                    db:0e:56:b6:8b:e9:67:48:43:27:86:56:32:5c:2c:
                    44:a0:76:68:af:e0:b5:a3:a6:f3:86:7b:d8:1f:cd:
                    f9:e7:34:48:f0:69:bf:e5:fd:6f:d3:0d:5b:36:c9:
                    b2:b7:f2:e7:d5:2b:68:82:03:25:0d:1d:0d:eb:02:
                    b5:e2:36:c4:45:6d:41:22:3b:94:c5:01:61:27:98:
                    c4:a8:9a:ae:ab:b2:e9:40:59:81:ad:6b:e7:87:fb:
                    c7:57:e6:00:6c:fb:1e:c0:90:f3:31:ee:ff:b9:04:
                    af:cb:e2:a3:09:3c:27:4e:20:46:c8:21:ea:92:55:
                    ce:d0:13:cc:46:89:a6:3e:7d:b5:32:f1:ca:1d:bb:
                    df:de:57:c7:8f:d2:7b:42:df:d8:83:d4:5a:e0:38:
                    6d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:D5:42:EB:44:8B:FF:E8:84:0C:26:D4:BD:F1:A8:5D:82:DF:9A:15
            X509v3 Authority Key Identifier:
                keyid:B1:94:F0:30:4E:ED:D3:63:C6:62:2F:D9:1C:59:B1:08:71:AA:30:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZTwME7t02PGYi_ZHFmxCHGqMEQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:a6:b4:ee:c8:57:b7:19:31:b1:d5:bf:3d:9b:c6:52:4f:d6:
         e7:df:ab:94:9e:08:07:60:92:1e:0d:0d:38:6d:ad:db:b8:a0:
         b3:67:9e:6d:aa:bb:fe:97:41:90:e0:0c:76:ac:2f:6e:fd:99:
         cf:ef:0f:30:55:77:70:d1:37:0d:07:c1:a1:94:12:7d:68:e7:
         57:f1:09:63:5c:03:d3:95:d7:fe:07:c3:cf:47:72:3c:27:f1:
         51:c2:da:3b:29:d5:a7:6c:e0:ec:2f:36:06:b2:9c:9b:37:c0:
         4a:8c:25:ed:59:bb:1a:96:70:62:b8:9b:f9:a4:ff:4c:91:07:
         1e:92:ab:79:3e:05:1f:4a:24:5f:0c:5d:5f:90:34:33:f9:91:
         b0:c8:3f:45:ae:a7:3f:3c:8c:4c:e3:7c:14:71:dd:83:d6:27:
         27:65:46:3e:37:ca:16:6c:7f:9c:41:05:5f:82:ea:bd:8e:f8:
         7d:be:6a:dc:fa:ef:3c:fa:1a:43:10:9d:0d:a2:eb:32:ac:48:
         44:d9:42:9c:8c:59:ba:47:35:25:1b:5a:36:f7:5b:eb:64:d7:
         89:ca:96:59:3a:08:1b:38:06:89:59:38:aa:6d:37:31:1e:1d:
         1a:d9:76:af:9d:98:aa:2b:64:0b:ae:e9:74:f5:f5:81:8d:46:
         b6:58:f7:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:41:24 2026 by rpki-client