Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.mft
File:                     R2bG2a0hzUEYoESCZNb7NdVfFMA.mft (raw, json)
Hash identifier:          J4z238EqhponEkWtXxzoizLGIA7Im+Thpr1CCzFLkE0=
Subject key identifier:   46:C8:36:0C:0D:B1:5D:05:39:CF:D0:5D:D2:4F:CA:63:71:DD:BD:07
Authority key identifier: 47:66:C6:D9:AD:21:CD:41:18:A0:44:82:64:D6:FB:35:D5:5F:14:C0
Certificate issuer:       /CN=4766c6d9ad21cd4118a0448264d6fb35d55f14c0
Certificate serial:       01A110A89CA7165E2BC15F704137DFC2D893
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R2bG2a0hzUEYoESCZNb7NdVfFMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.mft
Manifest number:          1A95
Signing time:             Tue 06 Oct 2026 10:00:47 +0000
Manifest this update:     Tue 06 Oct 2026 10:00:47 +0000
Manifest next update:     Wed 07 Oct 2026 10:00:47 +0000
Files and hashes:         1: 8ackz0fBmxFoZ7n0UkyKUhyAWGI.roa (hash: dReBdXhq4rkthqNMyzhKqYiwm9PHmiXuhBuVK2nJI6A=)
                          2: HuqUSWno2Gq8ydDwJRx6QWJXGos.roa (hash: q4XX35euMg6p42HeT4nudKvSOjx2VhLuyQAvC+XXuNE=)
                          3: R2bG2a0hzUEYoESCZNb7NdVfFMA.crl (hash: rmyooks3zdzhhk/DYlpxuLKlNIbjnagPrdTs5lO33Cg=)
                          4: VU_E5_vbKeph2ERkjiSVilUQng0.roa (hash: lXGCTM2iz6lR/iwrSeN1Dq111KxdOiG5eDm3IhwXCfQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R2bG2a0hzUEYoESCZNb7NdVfFMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Oct 2026 08:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:10:a8:9c:a7:16:5e:2b:c1:5f:70:41:37:df:c2:d8:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4766c6d9ad21cd4118a0448264d6fb35d55f14c0
        Validity
            Not Before: Oct  6 10:00:47 2026 GMT
            Not After : Oct  7 10:00:47 2026 GMT
        Subject: CN=46c8360c0db15d0539cfd05dd24fca6371ddbd07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2b:db:ed:26:96:ca:f8:74:15:bd:8f:e3:7a:
                    68:73:7e:bf:07:f2:06:64:6d:21:b2:a5:b3:5b:f3:
                    84:97:c7:db:9e:db:d5:67:90:82:46:08:58:8e:df:
                    5d:cd:cd:2c:65:43:28:8a:f5:c7:fd:50:f6:64:89:
                    c3:2a:71:09:6f:61:e1:f0:3d:fb:02:6e:b8:4b:5d:
                    cb:ed:8c:7d:15:21:1e:74:93:77:d6:07:59:46:46:
                    dc:30:89:bb:db:a1:7b:1f:0e:43:30:8c:c2:56:7a:
                    2a:29:b7:4a:9a:16:7f:8b:39:94:37:2d:d4:4d:04:
                    ec:47:fe:ef:09:6d:a9:aa:5f:d0:ce:41:09:18:e3:
                    c8:2f:98:8b:13:57:30:b6:67:f4:7c:a2:23:ce:b3:
                    78:0d:8a:b1:12:f9:0a:f5:bf:e0:15:78:af:77:08:
                    a2:17:35:e6:8b:f7:88:34:8a:b2:1d:30:b7:ff:9b:
                    dc:e2:d1:ea:be:3d:5f:54:33:4d:6d:df:c9:d9:bb:
                    69:db:a1:95:b1:99:86:8e:25:74:15:eb:52:9d:e6:
                    0d:bf:19:41:e5:08:7a:63:c5:5c:6a:e6:62:de:41:
                    2c:fd:a8:0e:47:d9:85:87:96:a7:ef:40:ce:cd:28:
                    88:4e:31:2d:a6:2e:d7:de:3d:4f:8c:7d:2f:21:9c:
                    6e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:C8:36:0C:0D:B1:5D:05:39:CF:D0:5D:D2:4F:CA:63:71:DD:BD:07
            X509v3 Authority Key Identifier:
                keyid:47:66:C6:D9:AD:21:CD:41:18:A0:44:82:64:D6:FB:35:D5:5F:14:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2bG2a0hzUEYoESCZNb7NdVfFMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:6e:6f:f0:e5:82:1e:e1:32:0d:0f:96:c4:fb:67:da:7c:8a:
         43:eb:b2:ac:bb:ea:41:36:fa:d7:d7:17:9a:f2:e9:f9:41:55:
         7b:8f:0c:30:3f:d7:ea:d9:70:cb:40:87:a3:15:65:07:29:28:
         7d:07:2b:57:fd:2c:b5:65:49:54:01:ee:58:81:49:4a:9b:0d:
         62:59:a6:bc:9a:fa:fe:14:98:3b:e2:bb:f2:a2:8c:36:37:8b:
         76:1f:ca:a1:33:84:fe:b7:c0:f4:86:72:bf:62:db:57:c8:56:
         1f:56:b1:04:de:3f:26:11:94:c9:84:0a:e7:40:d9:dd:42:45:
         e7:aa:9b:ab:ea:85:dc:8f:69:b5:02:33:bd:e7:49:06:12:a1:
         6f:c5:f9:8e:9e:4a:52:a7:46:ff:9f:11:a5:26:54:08:6f:4b:
         c1:bd:c3:ff:d4:8f:e5:86:09:20:3e:fa:fa:cb:28:51:76:bd:
         fb:ed:7a:88:03:dc:c7:d9:68:28:95:50:5b:64:9d:0d:96:28:
         92:94:2a:f8:df:a1:f4:27:6a:e4:c0:a7:1f:e4:53:ce:d5:2d:
         d3:ac:d2:bf:6f:4b:af:64:cc:db:c0:ef:d3:17:42:45:27:d5:
         ab:75:cf:2b:79:ef:6f:68:72:35:3d:9b:5b:e7:0e:1c:66:69:
         94:ad:4d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 15:43:41 2026 by rpki-client