Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/30_pyXBh_5n12lqE9OMulGpOeIk.mft
File:                     30_pyXBh_5n12lqE9OMulGpOeIk.mft (raw, json)
Hash identifier:          WgHjZ9fHepRo8apKwvDEFeY7jhAQm7Eu/pb76JGFMSo=
Subject key identifier:   46:02:F1:A1:8C:06:BC:A8:CF:82:25:DF:B0:45:0A:BF:A6:4D:05:FA
Authority key identifier: DF:4F:E9:C9:70:61:FF:99:F5:DA:5A:84:F4:E3:2E:94:6A:4E:78:89
Certificate issuer:       /CN=df4fe9c97061ff99f5da5a84f4e32e946a4e7889
Certificate serial:       01A14BAB4180BDD7BD42B4F9092A505C839C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/30_pyXBh_5n12lqE9OMulGpOeIk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/30_pyXBh_5n12lqE9OMulGpOeIk.mft
Manifest number:          0125
Signing time:             Sat 17 Oct 2026 21:01:16 +0000
Manifest this update:     Sat 17 Oct 2026 21:01:16 +0000
Manifest next update:     Sun 18 Oct 2026 21:01:16 +0000
Files and hashes:         1: 30_pyXBh_5n12lqE9OMulGpOeIk.crl (hash: wMKqnvp5LDHs3KC5FeuAzXiCMAOmVFngKZV8FRe/ZHk=)
                          2: 8ZvH2moT5LWA0pvGUb_nhaecrRA.roa (hash: vQ6P8MGQM1plUIoOIqS+HYiN2U0Ko89LQ4s+pHmv7B0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/30_pyXBh_5n12lqE9OMulGpOeIk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/30_pyXBh_5n12lqE9OMulGpOeIk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/30_pyXBh_5n12lqE9OMulGpOeIk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Oct 2026 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:4b:ab:41:80:bd:d7:bd:42:b4:f9:09:2a:50:5c:83:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df4fe9c97061ff99f5da5a84f4e32e946a4e7889
        Validity
            Not Before: Oct 17 21:01:16 2026 GMT
            Not After : Oct 18 21:01:16 2026 GMT
        Subject: CN=4602f1a18c06bca8cf8225dfb0450abfa64d05fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:32:4b:37:0b:79:05:2d:d9:92:86:42:c5:69:
                    7c:f4:35:79:ba:83:1e:0d:c7:a3:ad:19:5e:b5:4b:
                    ce:18:49:7c:d9:0f:5f:71:2b:ff:68:2d:20:96:df:
                    7d:16:62:38:da:16:b3:1a:1b:1c:95:7e:b3:61:5f:
                    36:cf:e7:5c:57:36:3e:81:58:9f:85:24:ec:4d:10:
                    c8:4d:aa:fd:50:b7:a4:74:09:71:06:40:5c:ab:51:
                    de:f3:4b:e2:13:b4:15:cf:c5:a3:70:c4:c2:89:2f:
                    16:d7:2c:9d:c8:82:2f:d4:3b:ff:cf:a2:bc:ae:a5:
                    03:39:90:7f:e4:6d:91:06:3f:56:bf:12:17:91:02:
                    6f:ba:a6:5d:48:48:f0:74:01:97:32:37:85:99:56:
                    26:9d:e5:29:ed:35:a5:af:91:46:5b:ef:6f:5e:aa:
                    8b:84:52:fa:91:f6:3a:0b:45:e5:e9:40:06:55:44:
                    ad:10:71:61:74:d7:bb:cd:11:d0:81:74:69:6c:65:
                    4f:00:5a:3a:ae:61:bb:f6:e0:a3:d7:19:80:f5:4a:
                    f7:ca:ec:45:e1:3a:3f:3a:a2:5e:46:45:43:4c:27:
                    c0:cb:78:48:ad:c4:3b:89:c7:f7:86:ac:8a:a8:d0:
                    d4:91:f5:9f:f4:2f:0c:05:cf:b0:64:ec:26:18:df:
                    bb:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:02:F1:A1:8C:06:BC:A8:CF:82:25:DF:B0:45:0A:BF:A6:4D:05:FA
            X509v3 Authority Key Identifier:
                keyid:DF:4F:E9:C9:70:61:FF:99:F5:DA:5A:84:F4:E3:2E:94:6A:4E:78:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/30_pyXBh_5n12lqE9OMulGpOeIk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/30_pyXBh_5n12lqE9OMulGpOeIk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/30_pyXBh_5n12lqE9OMulGpOeIk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:3d:19:50:3a:7e:37:a2:28:b0:2e:fe:e6:2d:2c:77:06:0f:
         f3:44:b7:79:44:a7:79:3a:66:3a:3a:1a:a4:7e:52:22:94:0d:
         55:71:a9:7b:c8:e9:37:9f:79:89:b8:3c:e6:04:95:93:18:38:
         5f:96:0b:96:26:ea:e6:85:6b:d4:c9:4a:7a:c2:b6:e5:6c:92:
         d1:a0:1d:e1:b0:ca:57:da:81:18:a3:7c:d9:3c:a2:69:06:e4:
         a7:eb:7e:4f:94:39:9c:6d:2d:02:de:d3:b2:6c:f2:9f:0f:1c:
         9f:ce:fe:0b:9c:4c:ab:ee:a3:85:31:cd:8f:b8:d1:b2:00:04:
         d2:68:c5:c1:aa:12:06:97:28:c2:57:47:4b:62:42:69:70:d1:
         9d:dd:75:44:ae:0e:9b:9d:2a:21:54:30:fe:e6:57:df:cf:d2:
         c4:36:08:36:d8:e7:4e:60:b9:47:f7:02:0e:88:8c:76:7f:45:
         b7:d8:63:a2:22:78:cc:ac:3b:81:51:fc:af:69:37:02:1c:d6:
         4b:1b:6a:a5:fd:f0:8d:a3:cb:0f:3f:a0:f6:44:cf:8a:3c:1f:
         c2:da:9e:44:cf:22:5c:9c:dc:09:c4:69:47:33:b6:18:4e:dd:
         d9:a0:56:e6:4c:92:a5:fc:8f:0a:13:9b:34:3b:d8:74:44:6d:
         5c:96:c4:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 23:50:55 2026 by rpki-client