Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft
File:                     bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft (raw, json)
Hash identifier:          jfQzTG0Z0Xk0KA5mX4FxHJ+IcptpTq3vGFGlvOkSNX4=
Subject key identifier:   D7:83:64:EA:D3:9B:6D:0A:98:A1:3E:2D:BD:A9:B5:F8:09:21:58:C1
Authority key identifier: 6D:30:06:DC:D2:89:C4:7F:9F:58:E1:28:EB:29:75:72:39:14:4B:B6
Certificate issuer:       /CN=6d3006dcd289c47f9f58e128eb29757239144bb6
Certificate serial:       01A0C6D8479E17E2C59B7100614BC9E8BD1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft
Manifest number:          1015
Signing time:             Tue 22 Sep 2026 02:00:57 +0000
Manifest this update:     Tue 22 Sep 2026 02:00:57 +0000
Manifest next update:     Wed 23 Sep 2026 02:00:57 +0000
Files and hashes:         1: HyA5Aw8PN5ndJ6j_RcxKArpHfDU.asa (hash: 4QQ9SNBzgzf3DvLGYjJLAuCHrtbrf5TM2gu+sVt7aYM=)
                          2: bTAG3NKJxH-fWOEo6yl1cjkUS7Y.crl (hash: Y59r643jtoP2/LNRbd20VKh11G/SPQcC/t8oeiJmGVA=)
                          3: xByyab3Vrz3Ef2rAb6P2eDrMVOE.roa (hash: kIu292fLCuL6Bxl5IG18vmja0jYF3hwZuE7UgYdGv/Y=)
                          4: zHx4boZUx9mQ4kmi1AyAMn8HdYg.roa (hash: 2evdzACk+oevIsq4yxjXZwXVQi4UVdSShl8e3fPWgbU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c6:d8:47:9e:17:e2:c5:9b:71:00:61:4b:c9:e8:bd:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d3006dcd289c47f9f58e128eb29757239144bb6
        Validity
            Not Before: Sep 22 02:00:57 2026 GMT
            Not After : Sep 23 02:00:57 2026 GMT
        Subject: CN=d78364ead39b6d0a98a13e2dbda9b5f8092158c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:80:47:d8:fc:92:d7:0c:7f:18:c3:84:f6:93:
                    3c:c9:48:1e:56:9b:72:79:fa:61:bf:f6:66:20:56:
                    71:a7:65:ca:98:9c:67:fd:7e:96:99:03:2d:9b:55:
                    2f:7c:70:48:96:67:a7:7a:93:48:f3:88:55:17:32:
                    71:78:ba:cc:4b:d6:68:1e:6e:7c:a7:2f:4d:d0:9e:
                    08:71:41:52:18:69:d1:63:7c:2d:e0:14:8d:5f:b2:
                    a0:50:11:11:e9:03:a7:aa:35:65:9a:93:5d:dd:c4:
                    8f:0f:c4:9f:06:e2:77:9f:f7:60:e3:ae:02:6c:1e:
                    6b:0d:cc:fe:10:ca:ad:8d:70:7f:b4:a3:bf:e0:59:
                    e3:d6:02:50:e1:0a:14:a0:5e:a5:20:d8:5c:c2:47:
                    62:c6:eb:c1:08:40:2a:fc:f6:91:ca:9e:3b:25:d5:
                    69:dd:86:c1:b8:1c:aa:82:20:11:35:1d:a7:b9:e5:
                    23:89:8b:3f:34:68:30:27:65:68:24:ce:df:d3:09:
                    a9:22:fe:73:70:bf:1e:78:91:ac:55:9a:52:2d:da:
                    af:e1:97:00:a2:96:e4:52:e8:b1:b4:fe:50:46:9f:
                    3a:bb:ba:50:b8:07:d7:41:37:09:39:d6:f8:c7:9f:
                    f3:2b:b4:3f:d5:1e:b8:89:51:3f:6d:d7:ef:9d:ea:
                    f2:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:83:64:EA:D3:9B:6D:0A:98:A1:3E:2D:BD:A9:B5:F8:09:21:58:C1
            X509v3 Authority Key Identifier:
                keyid:6D:30:06:DC:D2:89:C4:7F:9F:58:E1:28:EB:29:75:72:39:14:4B:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:93:a0:45:11:25:2c:23:bf:73:6f:fd:db:ee:d7:ca:bc:b0:
         03:29:65:cb:35:d5:89:bf:75:80:0d:26:6b:53:3f:73:cb:63:
         d3:42:dc:4b:c3:49:c7:4b:63:1b:c0:b9:61:81:df:50:36:37:
         27:e9:a4:d3:14:4a:41:df:19:45:7c:5b:40:bd:2a:76:46:b1:
         e0:00:1a:03:2d:3d:59:98:55:52:9d:5b:f6:a2:f2:f5:47:8d:
         b1:b9:2f:31:47:49:db:40:0f:3d:a9:21:06:ab:d0:43:85:a4:
         f9:0b:36:ec:b6:c5:78:e3:b1:85:34:60:02:b3:fb:a1:29:80:
         98:88:bc:70:c1:30:eb:47:c2:10:f0:9b:c8:cb:27:fd:2d:63:
         d0:84:ca:7e:1c:cc:63:67:86:36:21:11:70:e3:b4:37:13:06:
         93:fd:b0:99:36:04:a1:96:90:e7:14:bc:94:1d:54:81:c2:c9:
         e3:a8:1a:18:eb:36:1c:89:a1:6b:4b:70:5f:a5:d4:4c:d4:a6:
         1b:4d:e7:80:43:ea:2a:00:91:20:4e:07:31:41:6e:c3:c9:48:
         cc:f3:74:b8:ad:1b:fd:ab:35:05:f9:4f:1d:7f:ab:02:45:ae:
         f1:b1:e5:67:dc:9a:50:01:cf:73:ed:9f:89:6f:80:5e:eb:a2:
         46:5b:ea:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:51:40 2026 by rpki-client