Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.mft
File:                     Rk3PqWOZcWaS0kWoBIh8CdpFH48.mft (raw, json)
Hash identifier:          eQpP78HBal/x50FBkBnBVXz1jahnIFnlkfveajnA6s8=
Subject key identifier:   08:61:1B:44:3F:67:AF:FB:F0:20:38:D3:CC:F4:9B:D0:74:2F:A4:81
Authority key identifier: 46:4D:CF:A9:63:99:71:66:92:D2:45:A8:04:88:7C:09:DA:45:1F:8F
Certificate issuer:       /CN=464dcfa96399716692d245a804887c09da451f8f
Certificate serial:       01A0F230FBF2F151CADAD560F66E5E932B00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.mft
Manifest number:          191A
Signing time:             Wed 30 Sep 2026 12:01:31 +0000
Manifest this update:     Wed 30 Sep 2026 12:01:31 +0000
Manifest next update:     Thu 01 Oct 2026 12:01:31 +0000
Files and hashes:         1: 1H9YHalQ74Abbv3sXsUKQSDoMVE.roa (hash: f2UqrTu+rTVQYyRTJRyRotq9l86Y4aGXMKz+QTY2ILk=)
                          2: 2S7uFkbSO-czpY7zbwj6z2QbI9I.roa (hash: SH3jErffYx2mXExMTCZzsNaB8q9HLfNDIPRMlxgvCYw=)
                          3: L3204t5xqv_RGAUaDjepK8F4Hqw.roa (hash: vbMIqhNdM6+SVCu/75ex+GgHrK58xyd+mi2MfbKpNh0=)
                          4: PyBjXQZrLm_XoSes6Qp8-TYErJE.roa (hash: JNNn9PiNuypGKN/ipfjnvlB7BQDoZPs1ToLY5JVlOUM=)
                          5: Rk3PqWOZcWaS0kWoBIh8CdpFH48.crl (hash: wsn9cYJEJTLIucF53hMlPf0dbA9Fqb0pjj1xecubr6I=)
                          6: S7WXL-Nx9MlA3zg4adYRLPxrpBo.roa (hash: mX6+SayjpKMIocVqlVrM4qpi0n+3CKCDO1ooCblBO5Y=)
                          7: VeExbCBM04z_5eeOS8006EH3K5w.roa (hash: i0/J43ADWGsJraeM1oQhbEis6mYiwMnFDpLvwBsheV4=)
                          8: gItssa-B0b0X--YWiS_dUYtbwpY.roa (hash: iVUV0DWttepgFWqqg65SaE3OlJIh4Ep6A/pLvMT4l8I=)
                          9: qc_dQh5RKoHE-mlJq9abZyl5JUI.roa (hash: B95dhYhAYCE48Hv3JKdbp0E5RF/uMFx9nFUHRc4ClXk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 Oct 2026 11:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f2:30:fb:f2:f1:51:ca:da:d5:60:f6:6e:5e:93:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=464dcfa96399716692d245a804887c09da451f8f
        Validity
            Not Before: Sep 30 12:01:31 2026 GMT
            Not After : Oct  1 12:01:31 2026 GMT
        Subject: CN=08611b443f67affbf02038d3ccf49bd0742fa481
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f8:d4:73:df:c3:96:a7:a7:95:e8:de:f0:b1:
                    e3:b1:03:1f:8f:f4:91:15:1e:0e:3e:7c:85:63:cb:
                    b0:e9:5f:c9:99:56:8e:bc:ef:82:a6:87:e7:ad:9d:
                    96:bd:79:1b:de:e9:5b:ac:0f:c4:40:1c:ce:24:8d:
                    12:a6:a4:f0:b2:b6:a3:a1:bc:7e:e3:1f:d6:57:c8:
                    31:bc:82:e8:1d:36:4e:6a:24:84:9b:71:81:ff:f8:
                    b8:84:42:0f:4e:b7:58:c0:74:80:e9:52:02:9d:1c:
                    9d:b0:e4:46:b2:6a:9d:8e:89:10:d9:90:f6:24:84:
                    b7:d0:f7:d9:06:2f:6a:01:34:d7:3e:b3:d5:fa:3f:
                    eb:80:6a:34:b7:c7:89:a7:23:5b:73:ef:3e:2c:d3:
                    e2:ce:e6:be:35:61:ce:e5:a1:4b:aa:71:dc:d3:9e:
                    e7:eb:98:8c:09:ba:b1:fb:d5:ec:ef:1f:e8:d6:18:
                    91:2d:2f:48:af:1d:fe:e5:27:2f:65:fe:f9:9e:6c:
                    ca:ce:ab:b7:a8:9b:50:3f:93:93:01:ef:62:13:73:
                    c2:ec:68:bb:32:e7:49:1e:4a:96:9c:17:01:ae:f7:
                    1e:bb:fe:33:3f:85:e2:2b:a8:8b:32:c1:a0:a1:f2:
                    9a:97:3b:c2:83:9e:30:47:42:94:2b:2c:3b:4d:35:
                    48:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:61:1B:44:3F:67:AF:FB:F0:20:38:D3:CC:F4:9B:D0:74:2F:A4:81
            X509v3 Authority Key Identifier:
                keyid:46:4D:CF:A9:63:99:71:66:92:D2:45:A8:04:88:7C:09:DA:45:1F:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:bc:79:33:70:89:d1:c1:95:b3:8e:f0:25:d7:0e:e0:95:4b:
         ce:cd:4f:78:d4:01:2b:ab:51:a7:d7:15:eb:7a:17:62:ea:2c:
         42:34:07:c0:ae:8b:db:57:04:61:d3:fa:d1:4a:58:a1:4e:1e:
         0f:cd:a9:1e:f0:ab:a0:e2:0e:8f:20:92:f7:fd:47:e6:5f:25:
         48:78:48:6b:0c:6e:6d:27:07:c7:fc:38:78:95:fb:12:2e:ad:
         69:2a:c4:74:2d:dc:19:c7:fa:39:22:8a:34:ac:64:f7:81:86:
         c5:9b:81:d5:3e:9e:01:7b:33:70:d0:a4:67:a4:c8:19:53:82:
         18:52:11:d2:8a:49:96:64:09:78:02:c6:d3:0f:19:e3:79:a5:
         f3:22:2e:ca:71:ae:c3:a1:96:5a:54:dc:5d:b3:7f:04:a6:17:
         b4:a4:d4:0d:3b:93:6d:14:e9:d7:2b:d6:0b:85:94:ec:99:07:
         b5:9d:37:a5:31:ed:d8:2c:b7:e5:09:a6:d6:dc:0c:0d:4d:dd:
         7c:05:95:96:d4:73:47:84:c0:69:2e:a7:94:a8:81:68:cb:fe:
         c6:c9:3e:60:6a:b5:36:e5:6b:d9:d2:9b:40:15:00:9c:83:4b:
         4a:9f:b8:b4:da:27:f5:06:f7:c5:8e:38:76:a3:ed:c1:0e:ad:
         ec:9a:da:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 21:04:47 2026 by rpki-client