Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft
File:                     aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft (raw, json)
Hash identifier:          DrYgD3UFBlQNhjsJRIW+sXtXIYkV9q3jSQ6KgLQIpjg=
Subject key identifier:   68:18:1F:C7:FA:C2:47:9C:8F:20:30:8F:19:41:E5:FE:24:05:C5:87
Authority key identifier: 68:D6:60:4C:88:C2:E0:4E:61:67:24:13:15:B7:4A:75:8C:E6:48:C3
Certificate issuer:       /CN=68d6604c88c2e04e6167241315b74a758ce648c3
Certificate serial:       01A0E5BF3365C3ED002AAFDFE3465030FF98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aNZgTIjC4E5hZyQTFbdKdYzmSMM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft
Manifest number:          06D3
Signing time:             Mon 28 Sep 2026 02:01:48 +0000
Manifest this update:     Mon 28 Sep 2026 02:01:48 +0000
Manifest next update:     Tue 29 Sep 2026 02:01:48 +0000
Files and hashes:         1: 3GEW_2CYdwm1qFiN6Bf4QkFNZf4.roa (hash: GVD0ORdvb+m6XHIlxp5vX3KeBU6lYGT3GUkUzZadRxo=)
                          2: BKpDyhprbR3qOgI8XVdXG53_Xoc.roa (hash: plE0GQH5A+MXM6F8uLVbKyzdqxTFAnbM9Z+eYKUfzks=)
                          3: KlLhZE4r7jQs2tah9cefbTTBHYU.roa (hash: woFwHVzKyIlIZhYvOX1GMLLWWWbcJn2gfytBqr6W8nI=)
                          4: aNZgTIjC4E5hZyQTFbdKdYzmSMM.crl (hash: rlQRLj97afusyosWtq+krotobafW10H4CxzCOGX827k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aNZgTIjC4E5hZyQTFbdKdYzmSMM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 19:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e5:bf:33:65:c3:ed:00:2a:af:df:e3:46:50:30:ff:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68d6604c88c2e04e6167241315b74a758ce648c3
        Validity
            Not Before: Sep 28 02:01:48 2026 GMT
            Not After : Sep 29 02:01:48 2026 GMT
        Subject: CN=68181fc7fac2479c8f20308f1941e5fe2405c587
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8a:da:15:c9:d0:9b:dc:c9:bf:9a:36:a3:0c:
                    37:50:19:48:86:3e:5d:23:94:78:a9:44:88:e5:8e:
                    bf:46:c8:24:97:95:52:64:09:2b:9b:5b:cf:bb:68:
                    90:d3:f1:a6:d1:2c:45:3f:b7:02:01:17:20:94:6e:
                    96:30:87:ac:5e:9e:8d:52:71:0a:8f:ca:fd:04:6a:
                    6c:25:ce:36:f3:b5:ab:03:40:9a:e6:9d:28:4d:06:
                    33:75:1c:c3:ee:da:79:26:b2:08:9d:c4:b1:cf:b3:
                    af:39:5d:ce:1c:24:24:30:73:fc:52:9f:d7:25:e6:
                    aa:8a:0a:21:d5:c5:e6:9f:5d:a3:cb:86:6e:40:88:
                    d6:cd:7f:eb:8c:09:49:20:c8:a0:da:26:f6:31:ce:
                    32:d5:dc:12:b3:14:8c:c8:65:79:7d:3f:17:65:5c:
                    c3:1d:47:ab:ed:f6:d6:b8:0a:26:9c:e2:53:b9:be:
                    48:24:a0:58:44:ec:f1:5a:47:b1:89:a9:97:aa:60:
                    15:6a:fb:fc:f0:2c:30:62:e4:22:fd:da:dc:f9:8b:
                    f1:66:39:80:18:e2:8c:b6:db:48:39:29:06:a5:33:
                    75:17:26:97:bf:b9:48:6d:b4:92:42:d2:82:62:60:
                    1c:bc:d3:76:8c:0c:15:59:a6:65:8d:9c:9c:48:70:
                    dc:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:18:1F:C7:FA:C2:47:9C:8F:20:30:8F:19:41:E5:FE:24:05:C5:87
            X509v3 Authority Key Identifier:
                keyid:68:D6:60:4C:88:C2:E0:4E:61:67:24:13:15:B7:4A:75:8C:E6:48:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNZgTIjC4E5hZyQTFbdKdYzmSMM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:8b:2d:14:d0:32:2e:fd:4a:a0:2e:27:68:0d:ab:94:9e:6b:
         34:24:57:be:6c:d9:24:3a:22:65:a3:17:46:64:61:bb:ea:44:
         1b:00:55:58:d3:48:77:c4:f3:62:4d:95:85:22:ba:b9:f7:4d:
         f1:1a:a5:83:8b:8c:52:7c:40:af:12:56:5e:d4:ba:1f:a2:90:
         73:b7:48:97:39:9b:bd:64:f6:9a:45:a8:16:d1:fa:c6:0d:98:
         15:91:39:2c:9c:8c:ec:ab:ee:3a:8c:38:96:d4:0a:d2:07:d9:
         85:0d:ad:83:ad:3b:b0:e8:4b:c7:c1:77:b3:a0:4b:87:33:61:
         16:58:8c:11:08:58:eb:16:c0:d1:ff:80:49:a8:44:24:6e:43:
         78:0f:2f:43:45:8a:7a:06:f4:32:14:57:1e:27:28:65:37:c3:
         2e:52:df:48:6e:06:87:bd:7b:65:23:21:b8:1f:9c:c2:66:29:
         e4:bc:df:0c:5d:95:a6:39:a6:4b:99:c0:f1:6d:12:e9:7a:ce:
         25:94:2b:d6:d4:79:55:6f:3d:20:d2:81:ea:32:b3:0a:cc:0d:
         27:b3:3b:d1:22:f8:73:6b:27:15:98:d4:08:2e:72:b0:8c:e3:
         f7:a9:34:13:8f:b7:b6:68:89:2a:93:05:2f:e3:7c:d8:fe:a0:
         b6:17:d7:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 06:08:08 2026 by rpki-client