Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/0fc3f6-6a1a-4cdc-a147-da8b2d576bf1/1/4gwaOtdAOA4tNbccwx8OdGaNfYo.mft
File:                     4gwaOtdAOA4tNbccwx8OdGaNfYo.mft (raw, json)
Hash identifier:          SxpYET5p4tA4wpQpnz7KnjVLAW+slDfhauIAexev8Rg=
Subject key identifier:   42:AC:8D:4B:7C:E6:D9:70:B7:53:5B:E0:8B:F3:1B:66:15:C4:B7:B4
Authority key identifier: E2:0C:1A:3A:D7:40:38:0E:2D:35:B7:1C:C3:1F:0E:74:66:8D:7D:8A
Certificate issuer:       /CN=e20c1a3ad740380e2d35b71cc31f0e74668d7d8a
Certificate serial:       01A03F3BF9662A865567C69BB29A34834E2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4gwaOtdAOA4tNbccwx8OdGaNfYo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/0fc3f6-6a1a-4cdc-a147-da8b2d576bf1/1/4gwaOtdAOA4tNbccwx8OdGaNfYo.mft
Manifest number:          9A
Signing time:             Wed 26 Aug 2026 18:01:30 +0000
Manifest this update:     Wed 26 Aug 2026 18:01:30 +0000
Manifest next update:     Thu 27 Aug 2026 18:01:30 +0000
Files and hashes:         1: 4gwaOtdAOA4tNbccwx8OdGaNfYo.crl (hash: ncQ5b8nf7+BnEQmHAMt+GARGb8MFZ79tDYA/MLjNSAM=)
                          2: r6naNgboRIR-K7Xy37v9x1ob_9M.roa (hash: XqgTeLaFMQaYrfck9iQh85I2pBo21M9RzrFoxt7HJfU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/0fc3f6-6a1a-4cdc-a147-da8b2d576bf1/1/4gwaOtdAOA4tNbccwx8OdGaNfYo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/0fc3f6-6a1a-4cdc-a147-da8b2d576bf1/1/4gwaOtdAOA4tNbccwx8OdGaNfYo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4gwaOtdAOA4tNbccwx8OdGaNfYo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 18:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:3f:3b:f9:66:2a:86:55:67:c6:9b:b2:9a:34:83:4e:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e20c1a3ad740380e2d35b71cc31f0e74668d7d8a
        Validity
            Not Before: Aug 26 18:01:30 2026 GMT
            Not After : Aug 27 18:01:30 2026 GMT
        Subject: CN=42ac8d4b7ce6d970b7535be08bf31b6615c4b7b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:31:f2:00:27:26:e7:a3:27:7d:7f:2f:36:c4:
                    e6:f1:5e:cd:eb:5e:ff:43:f0:9c:cf:7f:ae:d3:f3:
                    07:bd:7d:e7:5f:2d:f6:de:44:0e:47:7a:fd:f7:78:
                    e3:27:19:36:ed:8e:a8:06:f1:e7:a0:98:96:76:aa:
                    23:13:db:f4:75:1b:81:d2:3e:97:0d:04:8d:64:99:
                    91:67:43:f7:4d:94:63:d7:f4:76:98:61:ee:82:b2:
                    fd:35:cc:f7:7d:60:c0:6f:51:eb:6d:4d:a0:b2:73:
                    f0:e8:48:c5:4d:2c:8b:d9:7d:b4:04:90:6d:03:88:
                    2d:7e:58:70:78:79:42:48:e0:8e:49:62:4e:70:46:
                    75:2b:2a:6f:8f:a0:d4:3a:0b:b6:06:6e:0a:01:3f:
                    51:98:d3:35:2f:4b:22:ba:89:ad:f6:48:1e:0a:11:
                    bc:21:53:b1:5e:79:e3:b7:6f:f4:2b:b9:70:1e:d4:
                    19:36:d9:08:9b:af:a6:ab:ab:d4:4d:a8:87:8e:97:
                    a8:e4:12:6d:07:9c:ed:b8:e9:d8:c4:2a:e0:63:18:
                    4e:03:7f:a7:5a:a7:b6:af:e0:90:ec:88:0b:ec:81:
                    d7:7e:c7:00:cc:8c:25:8f:0b:aa:91:2a:52:d9:74:
                    f0:6e:4a:fc:47:73:43:08:af:3a:90:45:62:51:97:
                    a5:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:AC:8D:4B:7C:E6:D9:70:B7:53:5B:E0:8B:F3:1B:66:15:C4:B7:B4
            X509v3 Authority Key Identifier:
                keyid:E2:0C:1A:3A:D7:40:38:0E:2D:35:B7:1C:C3:1F:0E:74:66:8D:7D:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gwaOtdAOA4tNbccwx8OdGaNfYo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0fc3f6-6a1a-4cdc-a147-da8b2d576bf1/1/4gwaOtdAOA4tNbccwx8OdGaNfYo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0fc3f6-6a1a-4cdc-a147-da8b2d576bf1/1/4gwaOtdAOA4tNbccwx8OdGaNfYo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:e7:c0:ae:53:e4:8e:0a:dd:29:2b:20:b4:c9:6a:27:87:d5:
         e0:75:99:f9:de:c9:17:ae:d6:2f:93:75:9d:aa:4b:6d:a4:34:
         c8:b3:32:7b:75:0c:af:50:d0:e1:ab:86:69:3a:9c:3a:35:3b:
         35:48:9a:11:38:de:9a:d5:6f:d3:1f:f5:bd:7d:8e:80:ab:27:
         90:a2:cc:32:d5:bb:66:96:de:a4:2d:fa:63:f8:6d:25:24:c7:
         5e:17:96:e8:d5:f8:b6:36:a8:03:0d:4b:0f:e3:8d:29:88:a4:
         a0:1c:87:b5:03:58:14:1d:b2:61:37:d8:ac:a3:fc:64:7f:79:
         b3:78:0f:ce:27:6b:f6:8f:7c:38:0e:33:6d:45:47:fc:04:cc:
         80:7f:25:48:98:ef:77:ab:ca:fa:03:f9:d1:96:5a:bf:a6:cc:
         27:22:46:c5:df:ad:ce:90:37:76:f7:6e:db:31:ab:6c:8f:5d:
         61:6f:e0:96:86:48:10:44:05:61:ea:50:c4:bc:77:fb:ab:45:
         9f:90:eb:b9:ab:62:80:85:6b:35:d1:cd:b5:2b:fa:24:1f:b1:
         3d:b6:16:85:7e:74:a6:62:44:a2:c6:55:c3:6b:3f:27:c9:fd:
         05:48:d5:6c:92:7a:99:bc:eb:26:00:26:ef:46:10:ba:ec:ed:
         df:19:a5:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:49:07 2026 by rpki-client