Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.mft
File:                     v124EbXV0FvsN-6dCaTsUu7tGtU.mft (raw, json)
Hash identifier:          fXH6FWU98C0iPitqsJXjb6/V4qWjkVi7fsH4nsqEQkY=
Subject key identifier:   43:5E:F1:C0:42:0A:71:22:89:4D:03:C7:CF:1A:E7:01:31:8B:9D:DB
Authority key identifier: BF:5D:B8:11:B5:D5:D0:5B:EC:37:EE:9D:09:A4:EC:52:EE:ED:1A:D5
Certificate issuer:       /CN=bf5db811b5d5d05bec37ee9d09a4ec52eeed1ad5
Certificate serial:       01A08B688A98A1747F6C136362112C224F66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v124EbXV0FvsN-6dCaTsUu7tGtU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.mft
Manifest number:          1A4D
Signing time:             Thu 10 Sep 2026 13:01:19 +0000
Manifest this update:     Thu 10 Sep 2026 13:01:19 +0000
Manifest next update:     Fri 11 Sep 2026 13:01:19 +0000
Files and hashes:         1: KIh3iVyzYzBFwGCfMvIVwpDbwps.roa (hash: 0aqbny00NM5+aliDEhOtMTVMWp3rSs0L91g1Lzq7VNE=)
                          2: TFL4paU1haNnRInCWqOJo9sZT2Y.asa (hash: mHqD6U6ln2GlV4OWaVbyFcs+NJUkiBYoMa3GtoILhzg=)
                          3: cK35oW3CRoDVTabPCj-bao3z8NI.roa (hash: Ebd+i8ctjoE4+ZV/syWp95hkz3ZcP0gcjB71tiszUJs=)
                          4: ftWl42XlVR06kFIc2c0GqMJzHUE.roa (hash: nYy1i5V68Ehly7gVpP19Cgh2GN1U/c5mj8ykEj8Zqek=)
                          5: v124EbXV0FvsN-6dCaTsUu7tGtU.crl (hash: kQorpAZglFht0T7aclmVk+gxj9Gpy9xkHuS1fIyA2Bk=)
                          6: wAYSOlZXIwRTXJ1_sEHsvUg6_Hk.asa (hash: sD8ye+o6KlRiRfxK9grgMbdXDN9cGHkO49QpZZCQGaY=)
                          7: wsCCmspEM6WspzHVHs3VS2kVt5s.roa (hash: hed0UXeEzgYWiVtnJDozjUnK8u7srJbOFxteQGQPqbY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v124EbXV0FvsN-6dCaTsUu7tGtU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 13:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8b:68:8a:98:a1:74:7f:6c:13:63:62:11:2c:22:4f:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf5db811b5d5d05bec37ee9d09a4ec52eeed1ad5
        Validity
            Not Before: Sep 10 13:01:19 2026 GMT
            Not After : Sep 11 13:01:19 2026 GMT
        Subject: CN=435ef1c0420a7122894d03c7cf1ae701318b9ddb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:63:a1:e1:91:17:94:4a:e0:9c:61:32:f8:dc:
                    31:ed:09:93:ba:b8:6a:57:65:11:85:2d:05:1c:17:
                    af:80:62:ea:14:5e:6e:00:b1:ab:a3:9e:6c:69:d7:
                    7d:7d:60:f9:1f:68:52:e5:ac:f0:20:52:0d:68:e8:
                    0e:c3:fc:aa:82:7b:18:9e:20:f9:0c:d0:90:74:3c:
                    84:ab:23:6f:6b:c8:d0:79:a8:15:37:bf:7d:87:b9:
                    1a:c2:c1:8e:b0:7e:b2:8e:8a:23:33:85:c2:82:b8:
                    7d:ba:ef:53:25:de:97:3d:13:14:70:66:9e:12:8d:
                    9c:c8:20:53:02:fa:4f:21:c6:9d:06:82:a7:91:5e:
                    62:02:df:15:35:e6:de:46:07:a1:67:ce:3f:a8:e8:
                    79:c1:7b:7f:07:7e:c8:a6:d5:ab:a8:c4:c9:0f:ff:
                    f5:79:c4:46:4e:70:13:eb:3f:0a:a9:2f:68:83:f3:
                    31:93:5c:df:2a:9e:33:98:dd:90:d1:fd:98:79:f4:
                    1a:e8:3a:92:c8:36:88:da:5e:dc:52:08:ef:cd:07:
                    66:2b:f3:03:14:25:5f:23:7e:bf:29:cf:16:de:57:
                    43:64:04:35:0f:94:95:eb:0e:bc:87:0d:3b:5f:2f:
                    72:d8:e5:ff:1c:44:2d:90:fa:97:cb:5f:a6:67:84:
                    9b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:5E:F1:C0:42:0A:71:22:89:4D:03:C7:CF:1A:E7:01:31:8B:9D:DB
            X509v3 Authority Key Identifier:
                keyid:BF:5D:B8:11:B5:D5:D0:5B:EC:37:EE:9D:09:A4:EC:52:EE:ED:1A:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v124EbXV0FvsN-6dCaTsUu7tGtU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:10:b7:9e:82:1e:4f:8b:1f:cc:e4:4a:fb:70:5b:68:e1:eb:
         1d:59:4c:e0:61:95:6f:c1:f0:3d:07:55:c5:bd:1a:1e:36:19:
         58:3d:3f:24:44:8c:19:17:b4:25:9a:44:51:8a:54:3e:18:8a:
         11:fb:25:70:18:8d:13:2b:34:10:e3:42:0c:4d:0d:5a:d1:30:
         3e:7f:56:ed:9d:fe:e5:e8:58:9e:20:ff:fe:8b:a2:a8:f8:6c:
         1e:03:34:59:bd:48:d5:4c:bc:b4:4b:a7:1e:6f:ba:af:f2:9e:
         a1:7c:3d:8f:75:39:a0:d0:bb:9f:1e:b0:74:c7:b0:41:3e:ad:
         1c:9c:e1:e1:ba:1c:da:dc:74:f3:e9:89:0b:a2:b1:c0:b8:81:
         11:a3:d9:23:a8:a7:a6:2a:c5:54:76:3e:80:83:ac:c0:3f:73:
         81:b1:18:db:98:29:a0:22:71:92:20:fd:d4:b3:45:af:29:4b:
         aa:97:73:91:aa:2b:a0:af:b2:0f:57:f5:f6:aa:b7:71:dc:2e:
         02:2a:b0:db:74:32:23:91:5b:9e:f2:43:b1:9d:24:ca:1e:ba:
         1c:1a:7c:45:c6:94:03:df:d5:ee:0a:74:86:c3:18:42:95:69:
         ea:ef:ee:db:37:00:f0:78:46:0f:74:97:39:77:a2:b7:bc:62:
         6b:2f:a4:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:23:42 2026 by rpki-client