Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.mft
File:                     4tGVYU7uSi27UfWyHmnRbE4UQa8.mft (raw, json)
Hash identifier:          X+NS+2Ssqak6h+1eITST9AppQhO9TD73RtwTAWrrAbk=
Subject key identifier:   C6:FA:21:FF:56:7E:66:6E:85:D8:2E:93:EA:AD:EB:E9:59:F9:4C:B4
Authority key identifier: E2:D1:95:61:4E:EE:4A:2D:BB:51:F5:B2:1E:69:D1:6C:4E:14:41:AF
Certificate issuer:       /CN=e2d195614eee4a2dbb51f5b21e69d16c4e1441af
Certificate serial:       01A083416458AF0E2B5053E90F5FE312D6B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4tGVYU7uSi27UfWyHmnRbE4UQa8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.mft
Manifest number:          0529
Signing time:             Tue 08 Sep 2026 23:01:35 +0000
Manifest this update:     Tue 08 Sep 2026 23:01:35 +0000
Manifest next update:     Wed 09 Sep 2026 23:01:35 +0000
Files and hashes:         1: 4tGVYU7uSi27UfWyHmnRbE4UQa8.crl (hash: 7VGZZutLr+foTdn9Rm7Hq2ps60isECAUhL5NqcG6UqU=)
                          2: valzYXczYY3RJ6xb_g__yzBDYXU.roa (hash: bbU6NTwqQ5O7qErPjl86r7BZfQa4g2RHPM0gnU6rCb8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4tGVYU7uSi27UfWyHmnRbE4UQa8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 09 Sep 2026 23:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:83:41:64:58:af:0e:2b:50:53:e9:0f:5f:e3:12:d6:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2d195614eee4a2dbb51f5b21e69d16c4e1441af
        Validity
            Not Before: Sep  8 23:01:35 2026 GMT
            Not After : Sep  9 23:01:35 2026 GMT
        Subject: CN=c6fa21ff567e666e85d82e93eaadebe959f94cb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:1f:65:76:83:59:db:78:0d:9a:04:93:ff:c1:
                    b4:f1:8a:71:76:99:6d:68:e9:c6:ae:f1:1b:be:ec:
                    79:e8:2e:8a:ca:cf:75:15:2c:31:bd:dd:c5:3b:4c:
                    96:62:2c:5e:0d:94:f7:cd:69:5c:9a:b4:76:de:a6:
                    24:cc:96:85:15:80:f0:f1:39:56:be:83:9a:d1:6f:
                    4a:64:81:d4:71:70:5f:f1:a3:02:54:47:5a:3f:20:
                    8f:86:78:27:f5:cb:9d:c4:36:2e:4a:f7:5e:35:31:
                    7f:9f:65:51:5a:89:1d:91:63:b1:3a:43:bf:11:9f:
                    53:bc:02:1a:7f:19:df:6a:80:a4:a3:a9:a0:e6:39:
                    6a:65:bc:bd:32:56:56:d4:93:8b:4c:2c:d6:ac:54:
                    66:f7:2c:fa:3d:f0:b3:fe:18:92:cf:ac:89:f6:95:
                    27:a3:07:1c:d9:1c:de:60:54:c3:41:db:16:d8:c2:
                    46:7c:fa:68:98:96:ae:ad:d4:d4:ab:4c:19:86:9a:
                    0e:73:d8:39:09:95:1e:62:47:66:97:ef:96:54:2d:
                    ea:25:65:76:75:14:c5:63:03:51:90:bf:12:cd:eb:
                    90:b5:40:26:c6:c2:27:78:46:d9:74:f9:fd:9e:28:
                    b5:b6:0e:2f:51:d2:cd:aa:cf:8b:12:81:bb:e5:97:
                    fd:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:FA:21:FF:56:7E:66:6E:85:D8:2E:93:EA:AD:EB:E9:59:F9:4C:B4
            X509v3 Authority Key Identifier:
                keyid:E2:D1:95:61:4E:EE:4A:2D:BB:51:F5:B2:1E:69:D1:6C:4E:14:41:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tGVYU7uSi27UfWyHmnRbE4UQa8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:c7:fa:2f:14:f9:9b:0d:51:04:45:8d:93:2e:33:08:5c:8e:
         37:68:c7:73:40:5b:c9:5b:40:6f:af:be:39:ab:4b:04:05:65:
         aa:4b:3b:2f:1f:6a:86:23:81:17:8c:9b:2d:9a:a9:e9:bc:34:
         15:ce:7b:ce:8f:4c:64:67:11:b4:11:d7:ad:2b:ec:6e:0a:5a:
         6a:aa:e1:f0:17:7d:04:f9:5d:48:df:a0:b4:ba:54:e1:0d:d1:
         5f:20:56:02:54:b5:9d:8a:65:42:eb:1d:b3:54:b8:4b:b3:d8:
         c8:27:ff:9d:dc:14:cd:62:c6:5a:80:d6:0d:82:68:ef:a3:68:
         11:7f:bf:c6:de:7e:ac:53:d1:72:8d:bf:04:fb:d0:ae:ac:85:
         e3:67:02:c0:47:83:82:9d:e7:63:69:86:fa:d3:9a:70:3e:2a:
         17:fb:d5:db:44:6a:ea:6b:6c:43:56:d5:64:ae:4a:e3:be:e5:
         37:76:8f:74:7e:bd:b6:c0:31:5c:3d:9b:cb:17:e1:78:1f:0d:
         ff:d2:dc:48:f4:5b:4b:a1:5e:55:69:1c:61:5d:25:4c:78:3f:
         25:24:ce:e7:2e:d7:6a:31:e2:3e:4e:c6:f2:44:22:5f:8e:87:
         00:b4:1c:ec:56:d7:a4:aa:bb:fe:39:c0:67:f0:84:e6:6e:8c:
         c5:c9:19:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 08:38:40 2026 by rpki-client