Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.mft
File:                     psb8p1JpxrAQpvpxCeQxXgagg9w.mft (raw, json)
Hash identifier:          0YQRQ/BOkLylUkMvTjaTKyh/sLcbzZ2GpMy6YzxHvtM=
Subject key identifier:   34:3E:4E:FC:CD:58:92:18:9E:BE:65:A7:63:F4:D8:06:50:28:1B:6C
Authority key identifier: A6:C6:FC:A7:52:69:C6:B0:10:A6:FA:71:09:E4:31:5E:06:A0:83:DC
Certificate issuer:       /CN=a6c6fca75269c6b010a6fa7109e4315e06a083dc
Certificate serial:       01A0C82178AFCCA95E62B8943778CD16C37B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/psb8p1JpxrAQpvpxCeQxXgagg9w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.mft
Manifest number:          1A6B
Signing time:             Tue 22 Sep 2026 08:00:31 +0000
Manifest this update:     Tue 22 Sep 2026 08:00:31 +0000
Manifest next update:     Wed 23 Sep 2026 08:00:31 +0000
Files and hashes:         1: YB8uK3pVluHiYzZPZMIZIoTnMfI.roa (hash: 7tVqBE7ngonAMrRLqWAl1nUrhE0O3jGUi08m3ADIJNY=)
                          2: psb8p1JpxrAQpvpxCeQxXgagg9w.crl (hash: AGxt2qKWl95q2EObZAfH02nmI/AEjG5U00dySOJ4bSo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/psb8p1JpxrAQpvpxCeQxXgagg9w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 05:59:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c8:21:78:af:cc:a9:5e:62:b8:94:37:78:cd:16:c3:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6c6fca75269c6b010a6fa7109e4315e06a083dc
        Validity
            Not Before: Sep 22 08:00:31 2026 GMT
            Not After : Sep 23 08:00:31 2026 GMT
        Subject: CN=343e4efccd5892189ebe65a763f4d80650281b6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:37:4e:e1:39:b4:f9:75:00:7a:87:a7:1c:40:
                    b7:c8:45:a6:1f:b7:10:72:06:22:64:28:d6:1f:5d:
                    06:dc:da:05:4e:84:b0:e5:f2:73:b3:20:e0:3b:c0:
                    66:49:eb:68:61:17:9d:86:da:ff:89:40:5d:65:1a:
                    2c:c7:b4:7f:ed:cb:30:b5:b7:e1:cb:cb:16:af:e1:
                    b4:a1:cc:2c:34:8d:c4:f3:0e:88:79:6b:69:a8:f8:
                    1c:ed:e5:11:50:34:5d:dd:84:48:f2:c5:77:d5:3c:
                    35:07:8e:99:aa:50:0e:8d:27:40:00:1c:31:e9:16:
                    d8:e8:63:00:54:24:fa:e2:84:d3:2e:3c:12:e8:49:
                    99:58:3b:2d:1c:8a:b4:57:8c:aa:0a:dd:41:fe:0e:
                    b6:8d:50:9b:b6:fc:53:ec:b3:a6:a2:cb:e3:8f:78:
                    ab:4e:40:44:31:b5:e0:d4:ff:5d:2d:f7:69:d0:d8:
                    ec:07:16:72:f5:a6:03:77:34:b3:fd:b6:01:3c:1c:
                    ff:ba:68:bb:09:ab:2c:b9:a1:85:6f:7a:9f:28:c2:
                    4a:bd:c6:7b:f9:4e:ac:0b:f2:b5:8d:ac:f4:fb:5b:
                    62:88:d6:a4:62:d1:4d:45:57:2f:a5:0c:07:d9:b9:
                    86:90:b5:4b:e3:3c:e1:63:f4:92:13:c1:1d:50:ef:
                    e0:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:3E:4E:FC:CD:58:92:18:9E:BE:65:A7:63:F4:D8:06:50:28:1B:6C
            X509v3 Authority Key Identifier:
                keyid:A6:C6:FC:A7:52:69:C6:B0:10:A6:FA:71:09:E4:31:5E:06:A0:83:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/psb8p1JpxrAQpvpxCeQxXgagg9w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:3b:12:6d:8b:cf:39:55:3c:ad:72:ea:9f:40:af:2c:9a:bf:
         2e:58:d7:27:d8:84:4d:3a:a2:b0:e4:5c:60:86:2d:a0:78:91:
         14:12:69:00:70:4f:ad:b8:7d:10:08:01:57:61:23:1c:f8:95:
         1d:f0:b0:6f:81:73:e5:46:39:cf:bd:50:d6:51:03:43:f9:14:
         02:44:c5:1e:8d:3c:73:e4:73:ae:7b:12:13:c3:c2:00:72:a2:
         42:f5:56:76:75:84:1b:dd:33:5c:39:26:f1:46:d5:d7:04:8a:
         6a:c6:4b:84:9c:94:c1:f6:e1:fc:70:f3:f5:cc:3a:be:ad:ff:
         94:f9:24:a6:1a:50:ed:5f:1d:26:73:c1:e8:a3:30:a4:42:64:
         f7:51:1a:01:01:3d:b3:f0:b8:11:4b:17:ef:c6:cf:4d:28:f4:
         cb:85:f4:e4:b7:d7:68:15:e5:45:80:d1:9f:86:06:87:19:81:
         80:6e:48:99:51:26:8b:67:3a:8b:bb:25:dd:bc:fa:c9:02:cd:
         3b:f2:28:ab:6b:74:47:a3:4e:c3:7a:d5:7b:36:72:ed:53:9b:
         67:3d:fc:35:b2:5a:41:8d:66:6b:6e:b1:c2:6b:83:4a:47:b6:
         9e:53:4a:eb:dc:a9:31:e0:56:2e:7f:8c:0d:31:fc:96:7e:a3:
         77:2d:91:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 15:57:23 2026 by rpki-client