Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.mft
File:                     bM82Dfmh9h4jMn2g0sCREuCpvWk.mft (raw, json)
Hash identifier:          0yOmBhKNNXv+B7LnBoQcwLYoc7IUP4qDF3N0epNetZA=
Subject key identifier:   5D:5A:D0:7B:F2:E4:90:68:E1:76:FB:F6:7E:D0:E0:C5:2C:13:55:73
Authority key identifier: 6C:CF:36:0D:F9:A1:F6:1E:23:32:7D:A0:D2:C0:91:12:E0:A9:BD:69
Certificate issuer:       /CN=6ccf360df9a1f61e23327da0d2c09112e0a9bd69
Certificate serial:       01A0C6D7B031A9270DC87DBB7F2A1BBB7E66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bM82Dfmh9h4jMn2g0sCREuCpvWk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.mft
Manifest number:          19D0
Signing time:             Tue 22 Sep 2026 02:00:19 +0000
Manifest this update:     Tue 22 Sep 2026 02:00:19 +0000
Manifest next update:     Wed 23 Sep 2026 02:00:19 +0000
Files and hashes:         1: 5MpTWg7vOC10jLratdl1_iJfqFQ.roa (hash: WBcsUKrOcStpVBrwzN2JImax8LyO4TXbQF8KR2s4TVo=)
                          2: 7XxLz5qNDL2H7uPtkWtQKCrGPL4.roa (hash: ip83J6AGXhu47HDuu0xVvJdsFKRruT8e3fNUtYYItuI=)
                          3: bM82Dfmh9h4jMn2g0sCREuCpvWk.crl (hash: z8RZ3Vn84AQlxKqhF8d07H1yrIyPRPPRoty552Wl63U=)
                          4: de_3vJfXeXhVKgCaiSs44gZCA8A.roa (hash: SZ/DHM8HFtP6XUXr8ZKZg3jTMbbqq1Kkx2fwqWMQRhg=)
                          5: x3YkXAPuFFAQU2qypU85h20QD78.roa (hash: 2sWys96464RaFQza5Xomz0qM/22LLb+sW69zdCIvPPA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bM82Dfmh9h4jMn2g0sCREuCpvWk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 02:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c6:d7:b0:31:a9:27:0d:c8:7d:bb:7f:2a:1b:bb:7e:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ccf360df9a1f61e23327da0d2c09112e0a9bd69
        Validity
            Not Before: Sep 22 02:00:19 2026 GMT
            Not After : Sep 23 02:00:19 2026 GMT
        Subject: CN=5d5ad07bf2e49068e176fbf67ed0e0c52c135573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ea:83:68:ed:e6:29:2f:cb:32:07:02:e0:cd:
                    18:1c:9b:ce:33:83:27:7e:47:80:ba:f3:e2:a0:48:
                    db:93:3b:53:1f:9c:da:a3:ca:e3:73:44:af:9a:71:
                    52:17:27:e4:7e:23:c7:d2:ac:50:93:71:70:0b:a7:
                    48:a5:df:ac:20:79:7c:cc:d8:18:40:79:07:bc:37:
                    39:18:77:d3:4b:a8:31:4d:cf:e0:5b:9a:20:51:48:
                    a3:16:19:8a:0d:a0:96:22:1a:66:47:94:a9:77:76:
                    60:21:b6:a3:45:c7:bd:cb:cd:78:fe:43:54:2e:41:
                    ba:74:27:6b:aa:fb:e2:39:b7:a5:b1:b6:d9:8a:e5:
                    12:3e:0f:49:ed:52:22:10:32:47:39:91:6f:d2:8a:
                    67:24:f0:08:dc:22:d1:15:fd:3e:c5:45:a2:53:8e:
                    24:19:e2:63:c3:b3:4b:5e:32:71:80:2e:1f:9c:3c:
                    f0:0d:4c:5d:ad:5b:78:29:b8:10:46:52:20:46:75:
                    a0:45:e4:fb:d9:e3:cd:7e:67:ef:db:91:08:27:8b:
                    62:50:f0:d0:ae:eb:a0:c4:78:46:ff:10:61:2c:1a:
                    0d:90:ed:09:ba:91:cf:90:57:d3:6b:e8:ba:16:65:
                    d4:a3:49:21:94:d1:d6:85:2d:7f:07:6f:50:2f:85:
                    41:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:5A:D0:7B:F2:E4:90:68:E1:76:FB:F6:7E:D0:E0:C5:2C:13:55:73
            X509v3 Authority Key Identifier:
                keyid:6C:CF:36:0D:F9:A1:F6:1E:23:32:7D:A0:D2:C0:91:12:E0:A9:BD:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM82Dfmh9h4jMn2g0sCREuCpvWk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:2b:79:f7:a0:e1:20:01:33:70:8a:e1:89:3a:23:c4:1b:b2:
         65:ec:30:c8:de:dc:cf:73:0b:eb:52:41:31:c6:03:bd:a4:47:
         9c:20:f5:85:59:96:4a:b4:c8:dd:21:18:75:ce:44:07:e0:f5:
         e6:a7:4f:16:23:03:59:d6:11:7e:89:38:72:e0:b1:cb:6d:3e:
         c2:85:a6:d0:a1:81:a5:3c:87:24:5c:5b:68:49:25:4e:fe:76:
         12:8d:ae:54:88:12:0a:e4:96:c4:f3:24:bc:63:28:9e:15:2c:
         b8:f5:95:72:6d:da:a5:2e:03:a8:34:5f:55:1b:ff:48:79:58:
         e5:c3:b4:ae:99:2b:aa:a9:74:8d:17:95:97:4c:f7:c9:25:c2:
         3b:10:ca:6b:50:72:60:a4:c2:5d:b3:25:29:09:e5:47:ac:0c:
         bf:ae:7a:81:6e:b0:8e:79:3b:02:0a:4e:e5:06:36:bb:6c:eb:
         9a:a9:f0:1d:c1:ba:5e:01:5a:a4:05:be:bb:ea:45:6f:62:57:
         6e:2f:b4:17:db:4c:28:da:82:36:ad:32:fb:68:80:d7:df:08:
         56:fa:44:92:a4:ce:8f:5d:79:86:11:6b:84:80:b9:a9:ca:c6:
         73:a6:cd:b8:41:89:9d:e5:1a:c1:55:29:c5:1f:58:ec:ab:82:
         c2:d0:44:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:50:49 2026 by rpki-client