Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/RT-MpoQDfFQzpLRAYhGzHXbhPqs.mft
File:                     RT-MpoQDfFQzpLRAYhGzHXbhPqs.mft (raw, json)
Hash identifier:          v4iZIH6mwi+S0USZuNyADfo2rYL3kMTUflQfJvf7ORk=
Subject key identifier:   E8:36:7D:4E:10:A8:D8:F3:EC:EA:61:B8:7C:D1:39:D0:87:2D:5C:A9
Authority key identifier: 45:3F:8C:A6:84:03:7C:54:33:A4:B4:40:62:11:B3:1D:76:E1:3E:AB
Certificate issuer:       /CN=453f8ca684037c5433a4b4406211b31d76e13eab
Certificate serial:       01A0B688E36E89E8A377E250F598A7262D52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RT-MpoQDfFQzpLRAYhGzHXbhPqs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/RT-MpoQDfFQzpLRAYhGzHXbhPqs.mft
Manifest number:          1A60
Signing time:             Fri 18 Sep 2026 22:00:19 +0000
Manifest this update:     Fri 18 Sep 2026 22:00:19 +0000
Manifest next update:     Sat 19 Sep 2026 22:00:19 +0000
Files and hashes:         1: RT-MpoQDfFQzpLRAYhGzHXbhPqs.crl (hash: EEhG3T6r/NDzXUbqbH3Wazw0HxzayM7NnEM5TyYReYk=)
                          2: mQOpqLaDGvgovaJyvLyQ5sBrw84.roa (hash: MhfMc5IHy7Q2RpMmEQc+IAMBkW+5nzpl9I5JKbxrZ6A=)
                          3: vKfh_-tsEstDK_pHiwP3rsQ6SOk.roa (hash: UDcDB4CQNfkJ685xuZBpEtrUZDLT9OaVBo1hay5J/3o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/RT-MpoQDfFQzpLRAYhGzHXbhPqs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/RT-MpoQDfFQzpLRAYhGzHXbhPqs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RT-MpoQDfFQzpLRAYhGzHXbhPqs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Sep 2026 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:b6:88:e3:6e:89:e8:a3:77:e2:50:f5:98:a7:26:2d:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=453f8ca684037c5433a4b4406211b31d76e13eab
        Validity
            Not Before: Sep 18 22:00:19 2026 GMT
            Not After : Sep 19 22:00:19 2026 GMT
        Subject: CN=e8367d4e10a8d8f3ecea61b87cd139d0872d5ca9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:73:e5:27:f5:82:0b:ab:e1:fb:72:61:17:4e:
                    44:ed:6e:51:93:97:6c:5a:72:f7:4f:e9:ac:92:cf:
                    86:26:f7:12:5c:18:96:a0:75:06:a2:bc:18:95:47:
                    b5:32:62:5a:5a:4c:1a:ad:8f:8a:7a:a1:47:a5:e2:
                    20:0d:50:ab:5d:90:4f:a5:74:c0:85:7d:c9:de:fd:
                    41:9d:5e:ed:83:e7:84:21:d2:1d:13:eb:ed:2e:24:
                    62:6c:a5:f0:9c:a6:d8:43:19:19:20:9d:99:9b:03:
                    1e:a8:7f:ab:1f:ea:74:61:6f:c9:39:4c:b2:d5:d4:
                    3b:cf:40:e9:20:2d:08:4d:0d:f1:36:e1:a4:cd:42:
                    91:e5:1a:18:6e:55:14:16:3d:f6:c5:6c:57:9e:56:
                    1f:52:6f:6e:9e:90:05:1d:25:25:99:58:de:28:ce:
                    5f:5f:55:e1:a5:3b:72:22:ae:0b:74:6c:bf:38:7f:
                    47:6d:78:9d:5c:38:e0:6c:6f:20:bf:cc:fd:b1:0e:
                    34:54:27:43:cd:41:fb:72:be:ce:1b:d1:3e:8d:07:
                    3f:7f:5a:41:3c:60:8f:a5:19:80:37:26:09:8f:23:
                    13:60:93:16:f6:7b:fd:ef:46:10:87:c8:fc:20:7d:
                    c6:33:8c:b6:86:d5:de:c5:ab:85:3c:57:0a:3e:02:
                    cb:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:36:7D:4E:10:A8:D8:F3:EC:EA:61:B8:7C:D1:39:D0:87:2D:5C:A9
            X509v3 Authority Key Identifier:
                keyid:45:3F:8C:A6:84:03:7C:54:33:A4:B4:40:62:11:B3:1D:76:E1:3E:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT-MpoQDfFQzpLRAYhGzHXbhPqs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/RT-MpoQDfFQzpLRAYhGzHXbhPqs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/RT-MpoQDfFQzpLRAYhGzHXbhPqs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:28:23:25:de:9e:8e:24:b0:a7:d4:58:34:d1:81:9b:7f:fe:
         da:dd:d6:03:b3:20:1b:7e:b5:b5:66:58:c0:eb:08:61:d7:24:
         0d:84:5e:27:0d:09:8b:11:15:9b:72:67:d0:ac:01:c1:c2:2d:
         d8:b6:6c:21:cb:4c:81:4d:ec:53:9d:89:9b:cf:c8:c6:7d:ee:
         ce:ab:58:d7:b5:d2:7f:bf:77:ba:aa:a7:78:f3:0f:3d:fd:c0:
         ac:4b:58:e4:c4:a1:4f:3f:db:c1:4f:9c:a3:3c:8f:c0:55:76:
         38:a6:88:1d:33:2a:44:74:05:dd:76:1f:da:5e:d5:e9:72:d1:
         4d:77:d3:4d:27:7f:00:b1:ba:ea:73:63:40:98:51:ca:b2:4c:
         0f:08:12:7c:0f:3d:d3:d5:fc:aa:ea:b6:a9:17:30:e6:39:0a:
         9c:be:1d:1c:ab:f9:92:3a:0b:b4:eb:fd:f8:b8:c1:57:fd:67:
         12:0c:77:4d:eb:a7:3b:d8:4c:ee:e0:de:9b:0c:1c:bd:ab:b3:
         99:bb:de:d0:4a:4a:36:41:f9:57:e1:5a:71:a4:5b:23:7e:84:
         33:fc:4a:e7:6c:37:a8:4d:12:06:5a:fb:1b:4b:87:8d:a6:75:
         e0:69:71:3a:1e:1d:46:58:f6:ca:de:f5:4c:fe:ee:ca:cc:1f:
         94:05:7d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 03:41:40 2026 by rpki-client