Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft
File:                     rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft (raw, json)
Hash identifier:          hZ6CS/XYChsK1OVazjOSEw0FLTJalfzuQM7Km6/HxlQ=
Subject key identifier:   1D:BA:10:B6:1A:EA:6A:37:51:3E:28:2F:85:02:71:DC:9F:02:AF:CC
Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
Certificate issuer:       /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Certificate serial:       01A0C633045974DFFF482F32C2FAABD7EBE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft
Manifest number:          1AC7
Signing time:             Mon 21 Sep 2026 23:00:27 +0000
Manifest this update:     Mon 21 Sep 2026 23:00:27 +0000
Manifest next update:     Tue 22 Sep 2026 23:00:27 +0000
Files and hashes:         1: 1-Dw7363-gcZT5BcZS3h3DULOLy8.roa (hash: ycAjWS2LKG3rf+AnuA7L1QjlHbaxU1ClqDSIOlIjNCE=)
                          2: BiYRVVML9NNTA_8LHQsEIyn-udM.roa (hash: MQi6PP1rzRM1KN1VV4mGhoaMI5G3SPq1bp7SEkx+KmA=)
                          3: Nc3Qv6HWCUL0coHdhzehCvqorjQ.roa (hash: 1cr7/XMm8bJJ1VGTZJBo+emXZtefD8zXujejZu9BwnE=)
                          4: UBIi44YElhqYA3_XPQMiMHY33Ug.roa (hash: oMX079Hs0rsRW/ukFok6HicF7IaxGAO9FzHNhpkuS/A=)
                          5: cd86fuGEpcvGitdJ6j4qmONtrs4.roa (hash: OyWo2jddiuk9oXVabZhwBWcG9HobQGDOXj6VfpvDkjo=)
                          6: deTEkBZi5H7AIejV16ysjHwAbxY.roa (hash: l0JbGg+HLxrf5Ag/2z2pTojVken0ajBmDjhItX+Hm3I=)
                          7: i-f-GFNW7EWY7uYw_DjdHPLZIEc.roa (hash: Lu14Av/K1ThdwY4U86jUJpa6Z2xIOpuEfesYLD//+vY=)
                          8: oKVovXTv2aNAyZu9y-AHgX6RbJ8.roa (hash: UsgdfjEOvyD+5ioDpDRHljoPckkLzWdsqZQnU51Gug0=)
                          9: ocHryKy0JCZoZXuWFydbiaPAXvA.roa (hash: VJkfS4R1R0/kVOkQFygl/eqzEOXMlTWCdbkGDaHwbCQ=)
                          10: our5ihUuGcgcU0KjT-Q2_hJRSYY.roa (hash: fFr4tZX1VGxnmEddwX1C01U/hs/f3oFzPhvXVoAW6YQ=)
                          11: pGPZirCKZzbNWc11cAMZui5y53g.roa (hash: x16id1SP+uWE4b9i/PFLiuYNReYseV++lthZDwFfk5U=)
                          12: pKSlP4qI-iIWoFFAgY7hZYUI5lE.roa (hash: fJiLeKrrQ0jkNTOG3gU1SfB8kCZt5PRpsv9OHklxoM8=)
                          13: rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl (hash: /tg0ayMKBLgD685SEkuYqDKs2LlcCg3pM8QoXYMO2rw=)
                          14: sQ8qQg5RChJp9JsfMBZ7VZwT8WE.roa (hash: obNWII8S7VxaHifOdhDpl8/q/V3M1i4VuliV8Z+MBow=)
                          15: vfuime7XKLq_IMU4DAnX4Nx6jzE.roa (hash: kg5X5HNbnuBqdxjeSjsj/XEZpdxo6lTx2YGUed/0woM=)
                          16: wGWwo0E6K55d816ADtVpaqGsYoE.roa (hash: Qv1Am1EocmBUM6XTSjIqfN+fr9y61yBhGrH08ROvpPo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c6:33:04:59:74:df:ff:48:2f:32:c2:fa:ab:d7:eb:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
        Validity
            Not Before: Sep 21 23:00:27 2026 GMT
            Not After : Sep 22 23:00:27 2026 GMT
        Subject: CN=1dba10b61aea6a37513e282f850271dc9f02afcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b4:52:11:bc:91:2b:fa:31:42:13:05:b1:2e:
                    15:c8:e2:e3:89:24:7b:ff:3c:47:cc:47:87:97:05:
                    a3:2a:8f:cc:9e:ba:25:0d:5b:d2:42:c7:47:0a:70:
                    45:6c:a0:9d:a8:20:f9:5a:aa:03:c4:d4:41:78:bb:
                    b3:e0:80:a9:da:26:e4:3b:ce:b4:38:07:e0:a3:0e:
                    f8:18:6b:37:2d:b8:69:d0:8c:03:b4:ce:b7:cd:0a:
                    03:30:e6:23:74:1f:85:07:80:76:ab:ae:c1:f7:3b:
                    4f:65:56:53:da:20:d1:c8:f4:00:c7:3f:b6:b5:c0:
                    38:81:0a:3a:b4:91:80:32:ad:67:e8:e8:2b:b3:e7:
                    b4:d2:8c:f8:1b:03:c1:15:2e:7a:93:01:09:e3:14:
                    07:14:73:fd:04:23:bf:7a:b1:7e:9a:94:cf:fb:d1:
                    2b:bf:73:7c:aa:1b:d2:d1:00:26:9a:57:c1:77:2b:
                    82:a9:96:62:78:69:27:07:88:8b:df:e5:e1:df:2e:
                    44:9a:56:25:91:81:9b:ab:cc:67:b4:05:16:3f:98:
                    9a:09:4d:47:bc:e3:70:e8:31:c7:79:9c:12:0e:1e:
                    08:98:a3:91:e7:73:21:7c:7d:10:b3:e2:b6:f8:1e:
                    00:db:f9:a3:e6:0a:f5:d0:14:29:b7:6c:ba:87:22:
                    0e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:BA:10:B6:1A:EA:6A:37:51:3E:28:2F:85:02:71:DC:9F:02:AF:CC
            X509v3 Authority Key Identifier:
                keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:f3:29:ad:2e:bd:15:43:10:4d:d1:a2:da:37:a9:d7:62:41:
         d5:b4:da:f8:a9:26:ae:4a:be:23:e4:ae:32:23:c5:8c:35:83:
         e9:ec:d8:e5:86:5b:b8:ec:9f:97:b4:c2:6b:38:52:75:76:03:
         0b:3a:18:8a:84:7c:46:02:46:82:4b:51:a7:9c:0f:74:fc:aa:
         9f:ef:7c:64:a7:a2:25:1a:6e:e8:dd:a9:c3:a1:fa:79:e7:92:
         5f:01:5e:80:e1:bb:b5:ae:df:26:d4:74:a3:01:fc:6e:0b:89:
         15:12:a7:43:bd:06:b4:b8:3c:e8:31:67:a1:99:8a:1f:7c:ce:
         b8:15:ed:cd:cf:32:ee:1d:0b:69:1f:83:b4:fc:9b:cf:ca:f6:
         c0:e5:32:2a:ad:54:dc:2f:db:52:49:25:26:86:6e:fe:b5:b8:
         2d:df:7f:52:b4:56:62:3d:70:ef:cc:1a:be:dd:db:d7:01:69:
         fc:7a:b5:39:1f:fa:e1:7d:ff:8c:25:89:25:ab:a0:b7:05:f7:
         4c:18:a2:c8:0c:b5:5f:dd:d7:86:ac:ad:ff:64:dd:e9:d3:9f:
         93:83:f1:35:df:0e:5f:ad:ad:43:af:40:f1:4d:4a:df:b6:3a:
         2a:d8:18:ed:ba:99:80:98:e1:70:52:0e:f5:ae:0a:5a:d7:a5:
         9d:63:20:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:34:21 2026 by rpki-client