Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/3d54b9-a763-4514-9467-8aaef76c2e98/1/aYROE3TxxFgb-_etRjihEtMW--Q.mft
File:                     aYROE3TxxFgb-_etRjihEtMW--Q.mft (raw, json)
Hash identifier:          rVhBklZjf5wUv0OJ0uyedDmIrOYFo0CKtu1qAhX9eaw=
Subject key identifier:   7D:C6:29:50:A1:33:6B:F1:26:BF:95:D8:12:0A:56:CB:8C:D8:20:D1
Authority key identifier: 69:84:4E:13:74:F1:C4:58:1B:FB:F7:AD:46:38:A1:12:D3:16:FB:E4
Certificate issuer:       /CN=69844e1374f1c4581bfbf7ad4638a112d316fbe4
Certificate serial:       01A0C8FD0F0CB14C9221512F5D1D3671C0E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aYROE3TxxFgb-_etRjihEtMW--Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/3d54b9-a763-4514-9467-8aaef76c2e98/1/aYROE3TxxFgb-_etRjihEtMW--Q.mft
Manifest number:          02B4
Signing time:             Tue 22 Sep 2026 12:00:22 +0000
Manifest this update:     Tue 22 Sep 2026 12:00:22 +0000
Manifest next update:     Wed 23 Sep 2026 12:00:22 +0000
Files and hashes:         1: _YyM5Fz0fRt9WBEEudyzbZgfybs.roa (hash: 4qY+Fv3RexE/YICr0m64zJ0sFOUpiGhvhqq4dKDZLy4=)
                          2: aYROE3TxxFgb-_etRjihEtMW--Q.crl (hash: NGfmIt2gQSNeJty5JQOZnuZp+37towJBOGFcmoVeeHo=)
                          3: rYhwjOOa4-7RvBsKuPyCuJ2kOac.roa (hash: EeI2oHDpvRTGlcgIn02601fBNayk3lM8V1SAStGUI1w=)
                          4: seE8MA1IAHQhkFxKO3DiabXwc2k.roa (hash: 3toCWdrJKeaWZ1jR0rxFlsqTNbw+YdEAy/zdrsfgu1c=)
                          5: zvV261hgmMdkR1G7Cy93JC-Zxsw.roa (hash: hneXIhVn6/jTbVYrQJSFmDE3v0R1YG1vWQx+UejdDSs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/3d54b9-a763-4514-9467-8aaef76c2e98/1/aYROE3TxxFgb-_etRjihEtMW--Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/3d54b9-a763-4514-9467-8aaef76c2e98/1/aYROE3TxxFgb-_etRjihEtMW--Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aYROE3TxxFgb-_etRjihEtMW--Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 12:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c8:fd:0f:0c:b1:4c:92:21:51:2f:5d:1d:36:71:c0:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69844e1374f1c4581bfbf7ad4638a112d316fbe4
        Validity
            Not Before: Sep 22 12:00:22 2026 GMT
            Not After : Sep 23 12:00:22 2026 GMT
        Subject: CN=7dc62950a1336bf126bf95d8120a56cb8cd820d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:29:6a:00:07:b2:04:84:ab:fc:fd:cb:91:f5:
                    a3:89:40:db:0c:a9:ca:81:8f:63:dd:4e:53:2a:a6:
                    26:6c:81:16:1f:15:de:2f:66:ad:8e:43:fc:d5:03:
                    ae:01:51:01:cf:d6:75:39:ae:6d:9d:c0:25:eb:82:
                    8d:68:d7:e8:f8:98:de:7f:e8:5a:8b:ca:3c:8e:4a:
                    d8:56:4f:02:53:ba:f5:9c:58:db:7f:80:ec:bc:88:
                    6b:d9:b6:c7:2e:c2:df:b7:07:8c:1f:36:59:64:d8:
                    15:e0:91:43:a3:81:23:c2:58:44:4b:62:79:45:c7:
                    b9:e6:98:14:17:28:44:df:b8:96:bd:32:ee:2f:46:
                    dc:20:bb:d3:af:45:fb:88:b3:db:36:e7:c4:54:d7:
                    33:14:77:63:46:d9:64:6e:71:2b:da:09:20:a2:0f:
                    f5:7b:d3:82:3f:3d:ec:4b:8e:08:75:d4:e9:c3:f3:
                    92:16:f0:7e:3a:d9:60:b9:79:b5:f9:99:81:3e:0e:
                    04:56:d8:ea:4e:13:b8:1e:84:df:19:9c:65:46:9c:
                    92:e9:ba:b8:b6:73:d4:44:7b:aa:02:c5:56:b5:f0:
                    71:65:f4:3a:85:80:64:7c:56:9c:a1:ae:ca:07:8a:
                    90:62:6c:75:bb:d3:6a:43:3d:6c:33:50:d8:26:75:
                    03:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:C6:29:50:A1:33:6B:F1:26:BF:95:D8:12:0A:56:CB:8C:D8:20:D1
            X509v3 Authority Key Identifier:
                keyid:69:84:4E:13:74:F1:C4:58:1B:FB:F7:AD:46:38:A1:12:D3:16:FB:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYROE3TxxFgb-_etRjihEtMW--Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/3d54b9-a763-4514-9467-8aaef76c2e98/1/aYROE3TxxFgb-_etRjihEtMW--Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/3d54b9-a763-4514-9467-8aaef76c2e98/1/aYROE3TxxFgb-_etRjihEtMW--Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:e1:2d:52:5a:fc:35:cb:49:40:03:c4:fe:97:2c:b9:d4:c1:
         70:3f:d1:66:6c:77:14:d6:cc:e0:53:46:18:27:9b:86:79:d1:
         27:1d:c2:fa:e4:c1:c6:5f:58:33:98:78:93:65:18:ca:7d:16:
         99:84:ea:a7:1a:35:9b:84:7e:3d:75:41:18:61:bf:06:75:3e:
         53:84:ad:d5:2b:cb:74:53:61:30:41:61:be:d1:5c:a0:1a:16:
         3b:66:6b:53:02:72:40:f6:62:62:72:69:a9:89:c0:f1:02:98:
         d5:81:8a:ef:f0:78:92:b8:37:f0:57:7f:5f:f7:dc:79:73:23:
         a5:3e:f9:cc:df:09:27:f9:e0:19:f5:3b:b4:bf:32:41:60:5e:
         43:d8:1f:c8:28:6a:f7:2b:e7:98:68:9e:43:ed:ac:71:16:fe:
         ac:55:de:b7:3c:17:a3:a3:1f:a9:b7:d4:56:ff:17:d8:97:e1:
         03:ea:ce:b8:c2:d8:74:d1:ce:8e:c3:20:62:bd:d4:77:83:df:
         b4:c1:8a:fe:09:14:4f:59:89:9a:8a:e5:83:fe:55:ca:b2:4c:
         8d:29:06:be:d4:d3:76:47:89:41:0d:dc:b9:29:47:79:09:6c:
         e1:13:cf:ad:20:c2:1d:6d:30:99:9d:37:22:de:23:8f:8a:60:
         cb:b6:f9:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:20:25 2026 by rpki-client