Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/f9725f-2255-4991-a530-05da79981472/1/45O5IN8BJJyYW580rQEz6Py4JEI.mft
File:                     45O5IN8BJJyYW580rQEz6Py4JEI.mft (raw, json)
Hash identifier:          356+Cqol9q7Ft18hBrnysgMGu4Gl9zsJT77fo/Pe9v4=
Subject key identifier:   29:B1:30:70:1D:A5:33:32:42:2F:C3:22:5F:80:D4:1C:51:B9:65:9D
Authority key identifier: E3:93:B9:20:DF:01:24:9C:98:5B:9F:34:AD:01:33:E8:FC:B8:24:42
Certificate issuer:       /CN=e393b920df01249c985b9f34ad0133e8fcb82442
Certificate serial:       01A03FA9D2F20CF25D5F838BA1F8912B51EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/45O5IN8BJJyYW580rQEz6Py4JEI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/f9725f-2255-4991-a530-05da79981472/1/45O5IN8BJJyYW580rQEz6Py4JEI.mft
Manifest number:          64
Signing time:             Wed 26 Aug 2026 20:01:29 +0000
Manifest this update:     Wed 26 Aug 2026 20:01:29 +0000
Manifest next update:     Thu 27 Aug 2026 20:01:29 +0000
Files and hashes:         1: 45O5IN8BJJyYW580rQEz6Py4JEI.crl (hash: 16xTtjIi1/R69S9tr23+HX7knUGI15R2pqAXhWIuOIQ=)
                          2: 9oFy5MWnDJgvTu1V_C5QchqZ9yo.roa (hash: 5AX6MRnHuWcXdrtdnzJjZhgd4c756gQGGy0Ky+HY9n0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/f9725f-2255-4991-a530-05da79981472/1/45O5IN8BJJyYW580rQEz6Py4JEI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/f9725f-2255-4991-a530-05da79981472/1/45O5IN8BJJyYW580rQEz6Py4JEI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/45O5IN8BJJyYW580rQEz6Py4JEI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 20:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:3f:a9:d2:f2:0c:f2:5d:5f:83:8b:a1:f8:91:2b:51:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e393b920df01249c985b9f34ad0133e8fcb82442
        Validity
            Not Before: Aug 26 20:01:29 2026 GMT
            Not After : Aug 27 20:01:29 2026 GMT
        Subject: CN=29b130701da53332422fc3225f80d41c51b9659d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:3e:29:ae:9b:e6:35:a3:8c:7b:df:3f:94:22:
                    e2:4a:26:f4:cf:c5:a7:4f:60:35:78:1c:ca:f0:f5:
                    fa:d6:1e:6b:e8:d2:2e:b9:c2:1e:94:76:49:c7:81:
                    d0:96:40:a0:1c:46:2a:b5:2c:b7:67:3c:a4:16:7f:
                    00:42:73:9b:ac:7d:4c:66:0e:71:da:b3:c5:50:19:
                    09:d9:ec:f6:72:8b:76:8b:0b:0f:f3:b8:72:06:e9:
                    da:ca:b7:20:af:d0:81:a3:0b:d4:3f:ae:9e:30:d8:
                    4b:fd:bd:2d:78:58:4e:5f:ce:88:12:2d:ac:f7:fb:
                    66:4b:20:7a:90:d9:02:59:11:0b:34:3c:e8:4c:3a:
                    4b:63:0d:8c:75:03:6f:1f:c6:cd:4a:cd:87:e7:dd:
                    a7:a6:d7:a5:b5:c7:3f:e7:e0:e0:31:c6:b8:d8:03:
                    ae:e5:91:89:6c:b3:b3:56:8c:ef:5a:1a:8b:4b:c5:
                    f7:38:b8:f0:56:c1:c4:8d:ce:0c:f8:d1:fb:54:dc:
                    74:c9:d2:c3:62:4f:99:99:4f:4c:b6:3a:70:0e:b8:
                    61:78:8b:a0:a8:ba:b8:56:7b:b0:e7:d4:18:ee:d5:
                    4c:46:99:b3:bb:22:d3:c0:83:5c:da:b6:32:50:81:
                    96:10:c4:16:33:8d:37:c6:40:33:a7:d9:f3:fb:83:
                    fb:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:B1:30:70:1D:A5:33:32:42:2F:C3:22:5F:80:D4:1C:51:B9:65:9D
            X509v3 Authority Key Identifier:
                keyid:E3:93:B9:20:DF:01:24:9C:98:5B:9F:34:AD:01:33:E8:FC:B8:24:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/45O5IN8BJJyYW580rQEz6Py4JEI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f9725f-2255-4991-a530-05da79981472/1/45O5IN8BJJyYW580rQEz6Py4JEI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f9725f-2255-4991-a530-05da79981472/1/45O5IN8BJJyYW580rQEz6Py4JEI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d9:72:0b:b2:9e:24:95:40:a4:48:d4:c0:cd:cd:c8:92:c7:74:
         1d:5d:8e:fc:de:f6:ae:ae:55:3a:e7:2c:74:1f:93:fd:a9:17:
         a7:dd:f3:c2:b3:25:20:0e:a0:96:7b:d5:54:be:8b:54:e8:4e:
         8c:6f:6d:56:57:b1:17:ab:7d:a6:d3:fb:04:ae:d0:d6:40:d9:
         ae:be:91:54:e2:65:59:b4:e3:e6:64:0e:a6:1e:9a:4f:32:d3:
         26:06:1c:f9:75:ff:69:7f:11:ab:3b:40:69:a8:72:a0:47:7c:
         fb:6d:11:73:1b:94:50:7a:36:a1:1c:bf:bb:36:9c:d4:b1:fb:
         26:85:3b:80:fd:fb:4e:53:da:50:8b:b2:95:42:40:55:25:68:
         0e:d0:9d:18:fb:3a:29:89:db:60:c9:72:ae:85:cf:a1:91:a4:
         17:cf:37:08:33:69:19:df:5a:ba:73:07:29:91:41:41:06:c2:
         a3:00:e2:99:8e:96:38:1a:d8:b0:bc:72:12:82:5f:14:84:1d:
         b5:44:c0:bd:7d:58:99:50:e9:fc:ba:79:94:28:55:11:e0:71:
         83:b1:c8:4f:cd:97:b2:7e:a6:e9:26:61:f6:da:eb:7a:71:60:
         2e:ca:cb:46:ce:a8:d2:2b:05:11:5c:2a:4a:58:0b:20:02:79:
         c8:31:23:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:50:39 2026 by rpki-client