Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft
File:                     s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft (raw, json)
Hash identifier:          jlDl0PrlgIJ3hFh7A0WqHJgsP/ZT/vLCbWwGNZcNIec=
Subject key identifier:   9C:FF:6E:EF:D7:AF:04:BC:F9:F3:71:BC:8F:26:F8:FB:CB:28:0C:80
Authority key identifier: B3:8B:B6:2A:47:B1:A2:AE:DB:70:F3:2F:58:C9:79:BA:0C:77:7F:06
Certificate issuer:       /CN=b38bb62a47b1a2aedb70f32f58c979ba0c777f06
Certificate serial:       01A08D56A42DAF506C969CEE59F5917BD624
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s4u2Kkexoq7bcPMvWMl5ugx3fwY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft
Manifest number:          1A54
Signing time:             Thu 10 Sep 2026 22:01:00 +0000
Manifest this update:     Thu 10 Sep 2026 22:01:00 +0000
Manifest next update:     Fri 11 Sep 2026 22:01:00 +0000
Files and hashes:         1: KvgeqJVMtBERBgaWeQ7l2q_TyyI.roa (hash: NJUE6bdAubYbnAUIE6s0c5Wi5PY+ros78NmtfNQmGAk=)
                          2: Of_F0nZx4uUMsyu_MFlv9vqYM6A.roa (hash: V1xfi16Y3WhXqWRGet3YcxqXtnKz/3AWs7HoDzA48YM=)
                          3: ck22982XPjtgcPjy954uVGCKcK0.roa (hash: xSnMILKaL4KrwNXzralU8vyZN836vuMs+IKmeHjf9vw=)
                          4: dw9DFWakqWyGOvPpVMr5LqWzzOU.roa (hash: vpyPXqpUatnsbNFIl69kvcHIfHdO0INTOAaGxcZLEhQ=)
                          5: kSkniVRVZqjXlp9BCZT6zQWlnDU.roa (hash: FfDKz/98X7m6YKQq0UNqzZ0ctHS3WQFyRiYlyLAtxCw=)
                          6: s4u2Kkexoq7bcPMvWMl5ugx3fwY.crl (hash: EuKJHvT8INytBU3fB5tmb1p9Qlgad2Boi4qCnMrFpKA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s4u2Kkexoq7bcPMvWMl5ugx3fwY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8d:56:a4:2d:af:50:6c:96:9c:ee:59:f5:91:7b:d6:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b38bb62a47b1a2aedb70f32f58c979ba0c777f06
        Validity
            Not Before: Sep 10 22:01:00 2026 GMT
            Not After : Sep 11 22:01:00 2026 GMT
        Subject: CN=9cff6eefd7af04bcf9f371bc8f26f8fbcb280c80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:42:84:f3:74:63:2d:a7:d5:1f:29:a2:24:28:
                    33:66:f8:a9:b8:67:3b:40:04:e6:19:2f:fb:f3:ff:
                    09:e7:af:9f:f7:a8:ff:9e:7c:96:2a:05:02:77:35:
                    09:69:7d:87:8c:f9:f0:14:25:4e:e6:f4:b9:08:96:
                    2f:fe:c2:9e:74:d7:85:31:49:52:b2:65:6f:e8:4e:
                    5b:0c:61:0c:05:2a:b1:4f:8d:ed:52:c6:c0:2e:89:
                    a5:b9:72:d1:81:79:6c:b7:cd:ea:0c:a6:6b:86:81:
                    9d:2e:ba:de:ea:48:da:de:5e:ce:6f:67:8f:2a:5c:
                    30:dd:04:54:ab:ae:02:23:1e:c0:68:50:e1:83:32:
                    4c:b9:24:80:93:a3:19:12:8b:3a:eb:c4:56:5d:b2:
                    3f:10:8e:47:61:87:77:7b:15:fb:59:67:2e:bd:ab:
                    1c:24:df:6c:96:cd:1e:0b:42:1a:0e:67:a7:27:ae:
                    a3:16:6f:d7:89:99:e9:60:11:d8:d0:da:8e:e9:2a:
                    39:dc:b9:d5:77:73:60:7d:53:cc:1a:c6:9c:b9:1b:
                    d6:e2:eb:9f:90:66:8b:e5:fd:4e:50:98:99:eb:42:
                    fd:60:2f:25:77:cf:9d:b5:74:dd:76:b3:9b:3e:93:
                    c8:d4:9d:0c:50:64:41:6a:7d:f3:ec:fb:25:d5:ef:
                    27:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:FF:6E:EF:D7:AF:04:BC:F9:F3:71:BC:8F:26:F8:FB:CB:28:0C:80
            X509v3 Authority Key Identifier:
                keyid:B3:8B:B6:2A:47:B1:A2:AE:DB:70:F3:2F:58:C9:79:BA:0C:77:7F:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s4u2Kkexoq7bcPMvWMl5ugx3fwY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:19:37:1f:7e:f0:38:13:b8:0f:78:a7:ed:56:01:e4:f6:fa:
         f7:dd:59:66:a5:14:d6:d2:42:1c:21:c3:75:d5:47:ba:d8:4a:
         81:fd:a6:3c:a0:ee:c0:61:ba:e4:94:97:09:f4:3d:2b:55:f6:
         2b:27:3e:73:8c:62:4c:a8:36:85:38:48:2b:65:37:ab:a3:72:
         df:ff:5b:9a:c1:83:d1:eb:e2:76:ae:f2:e4:f8:cf:84:94:62:
         e4:cd:97:c7:28:56:db:09:8c:4c:11:56:a4:d8:5e:ce:3c:e5:
         9d:a6:2d:99:aa:1e:35:2c:16:28:ca:08:0b:06:3d:ab:37:b5:
         d3:74:c2:c9:0b:0d:e4:63:cb:bb:aa:a5:44:4d:c0:ef:2d:55:
         bf:7e:11:8c:b1:57:0a:22:da:22:5b:23:ad:47:4b:cf:04:f9:
         90:ee:e1:e2:34:c3:0c:42:f6:d2:16:5d:4b:82:cf:76:68:49:
         34:04:1e:a5:bd:10:16:a4:63:14:0f:28:57:ee:6d:2f:a2:51:
         8d:05:57:80:b1:16:f7:3e:97:ca:c8:4c:6e:15:83:20:19:e7:
         f6:fa:0e:67:3a:79:10:68:67:f2:9d:32:fa:bf:d5:76:c1:6e:
         99:32:e1:42:e8:be:50:bb:9f:7c:cf:df:2b:c2:0a:ce:81:d6:
         7a:6b:bd:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 00:56:21 2026 by rpki-client