Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/S4cDP8aofTuNDLPOGrK6u-UroxE.mft
File:                     S4cDP8aofTuNDLPOGrK6u-UroxE.mft (raw, json)
Hash identifier:          wmaKwSgIQLzx5be3MxZaD7yzqX9VZSfgwHH/gFrafVo=
Subject key identifier:   C9:75:0C:DB:C8:A3:5D:6B:E9:E2:D0:7D:1D:DA:C7:54:65:8D:6E:78
Authority key identifier: 4B:87:03:3F:C6:A8:7D:3B:8D:0C:B3:CE:1A:B2:BA:BB:E5:2B:A3:11
Certificate issuer:       /CN=4b87033fc6a87d3b8d0cb3ce1ab2babbe52ba311
Certificate serial:       01A091332EFC2F2DDB27B293810FA219DD18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S4cDP8aofTuNDLPOGrK6u-UroxE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/S4cDP8aofTuNDLPOGrK6u-UroxE.mft
Manifest number:          192A
Signing time:             Fri 11 Sep 2026 16:00:45 +0000
Manifest this update:     Fri 11 Sep 2026 16:00:45 +0000
Manifest next update:     Sat 12 Sep 2026 16:00:45 +0000
Files and hashes:         1: A8DjBFWApaOvVsNL6vXCg0QZ-Zs.roa (hash: 9eSIPzP882gnq+toY+f9OquYBfy9B8LbOEOMMknDFO4=)
                          2: ADpY0RLDCpkkHtiKPRNOvIWTc8o.roa (hash: judBBvzLbMYur3XpExAgR3vsTfmpZxb1unhrGpyJGfs=)
                          3: S4cDP8aofTuNDLPOGrK6u-UroxE.crl (hash: ZPaa3fuGs0PgTpLuncGNxCIl3/wuuPuD1iLzcsjY7mw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/S4cDP8aofTuNDLPOGrK6u-UroxE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/S4cDP8aofTuNDLPOGrK6u-UroxE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S4cDP8aofTuNDLPOGrK6u-UroxE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 12 Sep 2026 16:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:91:33:2e:fc:2f:2d:db:27:b2:93:81:0f:a2:19:dd:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b87033fc6a87d3b8d0cb3ce1ab2babbe52ba311
        Validity
            Not Before: Sep 11 16:00:45 2026 GMT
            Not After : Sep 12 16:00:45 2026 GMT
        Subject: CN=c9750cdbc8a35d6be9e2d07d1ddac754658d6e78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c7:a5:92:26:10:14:41:62:90:9a:ef:eb:14:
                    07:60:a3:3a:1c:51:8b:9f:9f:a5:9f:cc:2b:a2:49:
                    d7:fe:28:fc:14:6d:5a:90:4f:1b:70:15:bd:69:1a:
                    14:43:c6:a3:ad:7b:26:18:16:1d:ea:0a:98:8b:b9:
                    14:1c:2b:70:9a:c3:8a:8b:07:58:3a:69:c6:ea:7f:
                    f1:c9:0d:93:51:1e:44:fb:d3:2d:3b:b7:45:c6:f2:
                    3b:0a:83:d0:65:fc:9d:66:c2:db:e1:33:a4:c2:c0:
                    da:fe:d6:d4:f8:9d:cf:14:7a:b3:34:ee:63:f5:57:
                    ff:55:e8:55:3c:e0:81:85:62:ce:9b:5c:2f:69:37:
                    47:99:11:e2:99:d7:ed:b0:bc:b1:f7:c5:f1:54:3d:
                    f4:eb:27:fc:44:30:80:a4:1e:fc:23:a7:2f:94:81:
                    86:1a:30:28:83:f9:1f:7f:d9:0e:a6:cf:64:a4:ba:
                    cb:8a:87:46:85:7a:03:7e:47:64:74:2a:4f:73:9e:
                    83:d8:7a:ba:8c:fb:11:77:e5:66:1b:ff:ec:d3:3f:
                    be:99:72:17:19:e9:bf:2a:d8:ee:93:3e:62:17:d6:
                    fc:66:9f:2d:55:8e:ad:2d:c1:60:0a:42:a2:cd:db:
                    6e:ed:f9:f5:c0:de:fe:6b:3c:98:18:2a:e5:de:fd:
                    30:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:75:0C:DB:C8:A3:5D:6B:E9:E2:D0:7D:1D:DA:C7:54:65:8D:6E:78
            X509v3 Authority Key Identifier:
                keyid:4B:87:03:3F:C6:A8:7D:3B:8D:0C:B3:CE:1A:B2:BA:BB:E5:2B:A3:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S4cDP8aofTuNDLPOGrK6u-UroxE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/S4cDP8aofTuNDLPOGrK6u-UroxE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/S4cDP8aofTuNDLPOGrK6u-UroxE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:d4:ad:da:2a:bd:83:99:91:76:99:b2:4b:52:74:d5:32:2d:
         66:3e:e9:9d:cb:f6:72:fb:a3:ef:e2:6a:a9:f1:ed:c5:cc:9a:
         16:ee:1b:e2:cd:e6:74:74:b5:40:85:72:a2:80:f9:46:d8:a3:
         80:1d:a0:21:cd:46:07:b2:04:e1:da:bd:df:ec:ca:7a:8d:34:
         8a:df:be:e9:92:80:fa:14:a4:59:98:dd:25:b6:d7:ae:06:7d:
         3f:3a:d7:66:c4:c0:5f:ec:92:ca:9d:91:63:f7:3a:64:ba:f1:
         e1:ca:2f:64:07:93:e9:c2:40:42:a3:b0:25:4f:39:5b:ed:a0:
         78:ce:0e:36:9e:9f:9b:07:f9:9f:6b:60:12:f3:56:b5:f0:0f:
         9b:b0:17:ca:32:65:73:7a:6d:bc:94:c6:d7:60:db:1c:cd:7f:
         8c:a3:d7:99:ec:af:a4:6b:64:f6:be:c8:75:46:fe:67:aa:d3:
         74:57:4c:ec:2f:2b:e8:ee:eb:ab:82:db:cd:99:f1:3b:72:c5:
         55:a9:87:89:78:d8:de:89:9b:02:6b:29:36:59:53:57:15:2e:
         ad:72:43:3d:5c:bd:3b:13:66:1e:c9:66:5d:36:9a:4d:3c:05:
         73:4c:4e:d8:08:a5:6a:7b:3e:6a:27:5a:0b:8d:a5:75:ca:91:
         c0:0a:87:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 20:39:49 2026 by rpki-client