Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.mft
File:                     45Dy7gpwvK7-AZWj2LN300KXqUM.mft (raw, json)
Hash identifier:          LWHJBXU6vzlRH++6DMLm6Qp3jPuZsxABjw/rlZTjsd8=
Subject key identifier:   6B:19:C2:ED:1C:D2:2F:22:27:71:39:01:3F:B1:C5:59:6D:43:0C:00
Authority key identifier: E3:90:F2:EE:0A:70:BC:AE:FE:01:95:A3:D8:B3:77:D3:42:97:A9:43
Certificate issuer:       /CN=e390f2ee0a70bcaefe0195a3d8b377d34297a943
Certificate serial:       01A13CDC7B36B740D5998235656BDA511162
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/45Dy7gpwvK7-AZWj2LN300KXqUM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.mft
Manifest number:          1AA6
Signing time:             Thu 15 Oct 2026 00:00:44 +0000
Manifest this update:     Thu 15 Oct 2026 00:00:44 +0000
Manifest next update:     Fri 16 Oct 2026 00:00:44 +0000
Files and hashes:         1: 45Dy7gpwvK7-AZWj2LN300KXqUM.crl (hash: /3MF2VIyEzqIaxxDprPXALLZI4dE1UJjzniw0MH+a/Q=)
                          2: acUHfVCy5j8WfhXBkKrvtIIZ6u4.roa (hash: A0ZoDSyXeoOjiHDBQQXTi7qUdiWgsEQgspWWgoPcjbU=)
                          3: cF3qnJKFEMZXRZq7zdCYtm8KbnY.roa (hash: cNbAonFQuEJHBesvMR+/RIy+1x7Yr2gguvFx6ZlL2FQ=)
                          4: mflNPwnPi4f5wBAod8r23N6IFVQ.roa (hash: eCHOBETtrQl/yFYeuqvktndVXTn5G2F5otfDMkWdMXY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/45Dy7gpwvK7-AZWj2LN300KXqUM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 23:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3c:dc:7b:36:b7:40:d5:99:82:35:65:6b:da:51:11:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e390f2ee0a70bcaefe0195a3d8b377d34297a943
        Validity
            Not Before: Oct 15 00:00:44 2026 GMT
            Not After : Oct 16 00:00:44 2026 GMT
        Subject: CN=6b19c2ed1cd22f22277139013fb1c5596d430c00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8d:da:cc:f1:51:5d:9e:6e:f1:ac:20:9b:9a:
                    f4:79:f5:88:58:5b:f9:74:95:ff:fe:94:c6:5c:1f:
                    ee:de:a7:20:64:04:1d:eb:11:d3:01:1e:fc:fc:07:
                    fe:28:ed:5f:1b:c8:04:ea:41:a7:4a:9d:75:ff:83:
                    3d:21:c7:72:ce:89:ff:8d:9d:4b:d6:49:08:01:b5:
                    a2:fb:d3:aa:6e:ec:be:4a:00:bc:76:35:24:3e:0b:
                    41:8f:28:b2:f4:66:fe:3a:cf:9e:31:d9:b3:56:e9:
                    e6:c8:91:cb:06:19:2a:3f:a3:13:34:ed:d3:cb:c1:
                    09:09:c6:0f:58:cf:b0:e0:b5:23:f6:ec:6f:91:d7:
                    2b:cc:ab:e3:1c:07:a0:ed:28:a2:06:d8:20:37:38:
                    16:e4:7a:50:06:75:cc:56:7f:6d:03:96:92:62:ff:
                    c7:43:58:9e:2e:ff:a1:00:3b:ff:08:6c:61:db:af:
                    93:e2:fb:95:35:0e:e5:49:c7:d1:78:68:02:b1:c7:
                    26:a6:0b:a1:1c:64:c9:72:d9:2a:a2:1a:0b:ec:dd:
                    68:7a:f3:13:bc:ec:56:62:a4:16:d0:8b:d9:b2:c9:
                    b6:06:c9:eb:ed:18:e3:f5:1c:85:e5:91:3d:81:4f:
                    d0:8d:6b:fd:b4:a5:2a:69:d1:93:19:00:4e:18:6c:
                    75:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:19:C2:ED:1C:D2:2F:22:27:71:39:01:3F:B1:C5:59:6D:43:0C:00
            X509v3 Authority Key Identifier:
                keyid:E3:90:F2:EE:0A:70:BC:AE:FE:01:95:A3:D8:B3:77:D3:42:97:A9:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/45Dy7gpwvK7-AZWj2LN300KXqUM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:07:d9:74:a0:62:e8:a7:5c:01:d2:77:31:06:c1:9f:fd:3a:
         6e:6d:ea:ec:31:19:5d:f2:15:85:c7:47:38:3b:bf:81:73:56:
         f5:26:81:73:85:4f:0a:49:ba:9b:6d:11:c9:c4:bf:9f:e7:e4:
         3f:b3:9c:c2:68:24:83:ca:fb:48:33:e1:79:bb:4f:a7:cd:96:
         0c:13:67:2e:a0:17:3e:69:15:bd:91:f4:79:90:ce:fe:c2:59:
         a5:9b:87:8d:ad:40:e7:82:ab:4a:c8:41:b5:a3:5c:18:15:a5:
         8a:2d:a9:7b:48:02:2b:a0:e5:dc:56:b7:c6:63:fd:83:86:c8:
         9e:41:32:b6:7a:8a:c8:99:bf:c5:35:19:44:eb:f8:e8:0e:36:
         e0:57:51:cb:1d:6c:df:f4:89:03:98:8e:a0:83:75:7b:40:7c:
         a8:93:37:b0:46:89:44:ac:ed:75:a7:03:23:35:69:2f:c5:8c:
         18:36:be:cb:cc:54:e1:d0:b1:63:ce:30:18:18:5e:cc:57:f4:
         5d:c9:d5:b8:e6:fb:3c:60:46:40:d5:f1:04:9a:75:32:9f:d6:
         75:41:cf:c6:df:2f:f1:5d:13:7e:06:04:13:7f:11:08:90:c2:
         90:1c:29:5a:6d:fd:ff:b0:dc:0a:c3:6a:d2:e4:ca:d1:85:70:
         88:16:17:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:31:03 2026 by rpki-client