Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/92a332-867f-4747-acd1-2e7fa439dd0e/1/40144ZmbugqizmmX9SFGhZQAHtU.mft
File:                     40144ZmbugqizmmX9SFGhZQAHtU.mft (raw, json)
Hash identifier:          MsvK0Jy0+/5ci+nBMkFjoa2AAMdfLBonPZKNOHrsAzw=
Subject key identifier:   1E:E6:C8:2D:04:21:60:D8:6F:53:82:37:5E:21:C4:4B:86:65:20:A4
Authority key identifier: E3:4D:78:E1:99:9B:BA:0A:A2:CE:69:97:F5:21:46:85:94:00:1E:D5
Certificate issuer:       /CN=e34d78e1999bba0aa2ce6997f521468594001ed5
Certificate serial:       01A0B42D07C526EFE9ABD2A848EBC8722271
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/40144ZmbugqizmmX9SFGhZQAHtU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/92a332-867f-4747-acd1-2e7fa439dd0e/1/40144ZmbugqizmmX9SFGhZQAHtU.mft
Manifest number:          15
Signing time:             Fri 18 Sep 2026 11:00:45 +0000
Manifest this update:     Fri 18 Sep 2026 11:00:45 +0000
Manifest next update:     Sat 19 Sep 2026 11:00:45 +0000
Files and hashes:         1: 40144ZmbugqizmmX9SFGhZQAHtU.crl (hash: ykZ9PSEq/MM1Bkx89SyxlIm4iSODQu8KU0zDG0IOWKI=)
                          2: 9ydCUZNZb6Y72_4xJUUkpigdsfg.roa (hash: tNEVg7yexCVdRZwrAYpjqrWbF464t3o/PQsppj5fUi8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/92a332-867f-4747-acd1-2e7fa439dd0e/1/40144ZmbugqizmmX9SFGhZQAHtU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/92a332-867f-4747-acd1-2e7fa439dd0e/1/40144ZmbugqizmmX9SFGhZQAHtU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/40144ZmbugqizmmX9SFGhZQAHtU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Sep 2026 11:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:b4:2d:07:c5:26:ef:e9:ab:d2:a8:48:eb:c8:72:22:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e34d78e1999bba0aa2ce6997f521468594001ed5
        Validity
            Not Before: Sep 18 11:00:45 2026 GMT
            Not After : Sep 19 11:00:45 2026 GMT
        Subject: CN=1ee6c82d042160d86f5382375e21c44b866520a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2c:d0:bc:db:c9:1a:40:8f:c9:47:67:0c:84:
                    55:78:02:21:30:42:19:2f:e9:3b:2b:cb:1d:81:44:
                    0d:82:4b:57:64:c0:5d:ef:ca:9b:57:cb:dc:cd:a9:
                    b2:cd:87:c3:26:84:2e:7a:49:42:ad:c9:4d:fd:45:
                    cb:cd:42:ee:fe:ce:74:8a:44:f9:f4:29:8e:14:39:
                    cd:35:28:a6:39:24:58:1f:64:ec:79:ad:45:d2:7a:
                    9b:f8:8a:cb:ba:74:4d:4a:9e:99:31:3f:46:75:4b:
                    e6:c6:de:25:0d:b0:e8:e7:01:8b:0f:0d:33:21:8a:
                    8a:58:27:2c:67:2c:dd:73:89:cf:c0:da:cd:2f:c9:
                    c5:ea:52:86:b6:ed:37:3d:ee:49:cd:89:8f:03:7a:
                    0e:09:0e:10:28:99:94:42:a1:20:86:bc:f6:ad:35:
                    b8:94:54:71:ef:e0:5b:bc:41:0e:66:b1:71:b1:2a:
                    8e:46:ba:87:a6:28:f3:d8:69:aa:02:47:ac:8d:20:
                    6b:e5:ef:10:90:4a:89:66:f6:85:7c:36:18:c0:f8:
                    b4:9b:32:d5:65:75:8f:2c:6a:b5:c7:56:49:8b:c7:
                    46:f9:3e:01:19:53:a9:1a:11:6b:f4:23:8d:d7:9b:
                    fe:e5:cb:36:eb:51:db:f1:b8:d0:41:5a:f6:26:5c:
                    d1:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:E6:C8:2D:04:21:60:D8:6F:53:82:37:5E:21:C4:4B:86:65:20:A4
            X509v3 Authority Key Identifier:
                keyid:E3:4D:78:E1:99:9B:BA:0A:A2:CE:69:97:F5:21:46:85:94:00:1E:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/40144ZmbugqizmmX9SFGhZQAHtU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/92a332-867f-4747-acd1-2e7fa439dd0e/1/40144ZmbugqizmmX9SFGhZQAHtU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/92a332-867f-4747-acd1-2e7fa439dd0e/1/40144ZmbugqizmmX9SFGhZQAHtU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:84:59:5c:55:e6:dd:20:ab:54:f0:71:41:75:86:fc:14:91:
         08:7a:8f:84:6c:1e:b4:b5:0f:13:e6:10:cb:53:1d:19:bb:c7:
         32:5f:e9:07:84:f6:c9:72:b2:9f:79:28:43:8b:70:d5:cb:d9:
         3a:d6:84:74:e0:6c:b9:b9:ad:77:e4:c0:e7:34:c4:1f:3b:48:
         86:0f:58:73:e9:e1:e3:d4:72:e5:b2:fb:84:77:99:a7:cd:b7:
         db:2c:d2:d9:f5:99:a3:51:32:74:c0:51:5c:0c:52:a0:86:49:
         29:74:15:08:0b:78:97:a2:74:1d:9d:9e:32:5a:8b:7f:90:2a:
         11:a1:3d:c3:d6:0b:62:2b:6a:ab:f0:24:8b:67:0f:0f:17:85:
         2a:f7:a1:74:aa:9b:ac:d9:f0:3d:07:9c:62:00:6f:bb:6c:39:
         3e:9b:9c:34:c8:6b:11:14:91:d4:a8:a3:7b:14:ee:c4:88:50:
         d2:aa:bf:12:82:a8:0b:d6:af:f9:a2:b1:91:ca:17:e4:3c:70:
         60:84:f2:d4:07:f0:87:73:c9:1c:41:76:f1:e5:a7:36:dc:60:
         8a:d1:0b:ef:62:8a:ae:ce:1c:07:b8:74:53:73:b2:31:57:b4:
         4c:3f:0c:07:8e:b8:4f:d8:ff:8b:fd:4f:98:20:55:4a:7d:06:
         a8:90:94:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 19:37:21 2026 by rpki-client