Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/adfbf0-0c07-4a07-8954-9d8a18e7b252/1/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.mft
File:                     d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.mft (raw, json)
Hash identifier:          8RAtHeRS6ROWZjk9ybuN1WZY+UhqVFFUGScsIVouqBI=
Subject key identifier:   C9:E1:1A:B8:4C:81:58:BB:8B:A0:D2:60:02:8A:ED:1C:2F:22:30:86
Authority key identifier: 77:40:2F:F8:15:EE:BC:61:A9:3C:F1:B0:D0:BC:DC:EC:7A:29:F1:9F
Certificate issuer:       /CN=77402ff815eebc61a93cf1b0d0bcdcec7a29f19f
Certificate serial:       01A0D15C3E2B9D756A3F8BD88168743A5279
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/adfbf0-0c07-4a07-8954-9d8a18e7b252/1/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.mft
Manifest number:          1A6B
Signing time:             Thu 24 Sep 2026 03:01:18 +0000
Manifest this update:     Thu 24 Sep 2026 03:01:18 +0000
Manifest next update:     Fri 25 Sep 2026 03:01:18 +0000
Files and hashes:         1: cjO-JSKeIeKfhSr8BfkC9JUrsaw.roa (hash: FDKs6XQEKS17A+eX40GCtBIucy/T4VULlaGZ/uQb+zQ=)
                          2: d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.crl (hash: P7nG/1LKu2349c4quirnqEvNLXCapl35SMYA/DrAgQM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/adfbf0-0c07-4a07-8954-9d8a18e7b252/1/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/adfbf0-0c07-4a07-8954-9d8a18e7b252/1/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:5c:3e:2b:9d:75:6a:3f:8b:d8:81:68:74:3a:52:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77402ff815eebc61a93cf1b0d0bcdcec7a29f19f
        Validity
            Not Before: Sep 24 03:01:18 2026 GMT
            Not After : Sep 25 03:01:18 2026 GMT
        Subject: CN=c9e11ab84c8158bb8ba0d260028aed1c2f223086
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c3:2f:2e:8b:65:25:da:3d:bd:0a:ce:93:39:
                    e7:d8:bc:b8:5c:42:ba:6e:fd:3a:55:0a:6f:fc:7c:
                    6f:e4:e0:b2:86:f0:74:18:47:c5:34:f9:8b:04:c9:
                    09:77:9d:d4:d1:8c:22:03:3c:7a:92:82:c3:2e:e9:
                    d6:9c:0e:4f:57:d4:76:6b:f6:ca:f2:1c:93:13:0e:
                    e8:f1:e0:58:1a:e8:88:a9:69:f1:31:07:20:55:b4:
                    f6:38:57:63:86:b7:bf:59:59:18:89:c7:ef:21:7f:
                    57:8e:d8:de:cd:28:50:16:87:c1:13:c6:01:eb:fc:
                    24:9e:4f:7d:1e:47:0a:b1:2d:c2:10:02:bd:a3:64:
                    81:5d:51:34:74:c4:f1:47:90:fb:1e:19:3a:a1:cb:
                    14:52:cc:ce:97:2e:ae:dd:fc:c4:e0:c4:55:26:c0:
                    36:d5:5b:5f:b1:94:aa:fb:a1:90:3a:19:99:8d:6c:
                    ea:71:f4:95:f4:b8:b0:bf:e1:05:e5:03:2b:cd:aa:
                    0d:95:8a:0b:4b:5c:1b:8c:24:29:2f:f8:86:76:66:
                    0d:9b:d6:17:86:25:b4:2f:06:7f:94:b5:ac:cd:99:
                    b4:51:e7:c8:b7:8c:11:6c:f0:10:bc:0e:73:c3:ee:
                    d5:3a:56:cb:23:d1:f1:7f:f2:79:a1:6c:8f:96:7a:
                    e3:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:E1:1A:B8:4C:81:58:BB:8B:A0:D2:60:02:8A:ED:1C:2F:22:30:86
            X509v3 Authority Key Identifier:
                keyid:77:40:2F:F8:15:EE:BC:61:A9:3C:F1:B0:D0:BC:DC:EC:7A:29:F1:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/adfbf0-0c07-4a07-8954-9d8a18e7b252/1/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/adfbf0-0c07-4a07-8954-9d8a18e7b252/1/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:02:54:39:bf:3b:85:33:0b:fe:08:a7:96:9e:ab:bd:3b:65:
         23:c8:c3:ed:a5:7c:a8:17:80:59:3d:ec:c2:85:ae:18:9b:87:
         22:d2:b1:ec:07:f6:28:3c:fd:65:fe:ae:c7:71:6f:27:c7:e7:
         39:1f:13:c5:02:c5:71:d9:71:99:c2:98:fd:72:e9:31:8d:c3:
         55:e8:47:ea:43:42:05:53:8a:e1:f9:97:99:5a:6a:0d:59:6b:
         a3:37:7c:40:a6:29:03:ef:57:b5:46:bb:a5:2a:54:fc:19:93:
         e5:9b:70:db:46:91:fb:4a:c3:c2:bb:01:d7:4f:37:06:55:a2:
         3f:de:eb:d2:97:ca:d4:dc:f2:30:b6:a3:6f:b6:8b:dd:db:97:
         24:ad:6b:ba:38:5a:92:10:ad:26:e3:70:b8:a8:60:e6:cf:79:
         9e:0f:23:33:2f:82:d1:93:7f:3a:39:2d:c0:4f:e8:64:1f:ef:
         01:52:0d:58:27:9c:a1:6c:a8:58:57:b6:2d:48:09:80:55:77:
         43:83:6c:9b:1f:eb:cb:7f:0f:06:3b:50:33:04:92:b2:03:23:
         d7:52:6c:7f:0f:fc:1a:6d:ac:07:c6:7e:9c:f5:34:3d:d7:c4:
         99:e7:18:4c:97:c6:23:6b:76:84:cc:d5:d8:ca:02:46:62:19:
         7d:9d:5b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:11:42 2026 by rpki-client