Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.mft
File:                     AozMjYF4yenS_8Uy_LXNaL6qd20.mft (raw, json)
Hash identifier:          OPUBkQSUgMsWxBZXMds1pBZR9oJmCzejLeuU7690aCw=
Subject key identifier:   B0:CB:F7:F3:F5:C7:13:38:D3:01:65:79:8D:0B:AD:06:CF:40:32:4F
Authority key identifier: 02:8C:CC:8D:81:78:C9:E9:D2:FF:C5:32:FC:B5:CD:68:BE:AA:77:6D
Certificate issuer:       /CN=028ccc8d8178c9e9d2ffc532fcb5cd68beaa776d
Certificate serial:       01A0CBC7B8BA16427C48DE977F5F862EC410
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AozMjYF4yenS_8Uy_LXNaL6qd20.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.mft
Manifest number:          04B2
Signing time:             Wed 23 Sep 2026 01:00:58 +0000
Manifest this update:     Wed 23 Sep 2026 01:00:58 +0000
Manifest next update:     Thu 24 Sep 2026 01:00:58 +0000
Files and hashes:         1: AozMjYF4yenS_8Uy_LXNaL6qd20.crl (hash: hW0ypeCQVfGGHrx7FEY9wSO5DUXPEA1/WXmDBIzvcUQ=)
                          2: nmpgPMBFt9dLqNX0M81_MpAwEgA.roa (hash: 4RQmSgy56Vqmok8SF0GYYTjto7wxmhh7LR4/RfXSDMg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AozMjYF4yenS_8Uy_LXNaL6qd20.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cb:c7:b8:ba:16:42:7c:48:de:97:7f:5f:86:2e:c4:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=028ccc8d8178c9e9d2ffc532fcb5cd68beaa776d
        Validity
            Not Before: Sep 23 01:00:58 2026 GMT
            Not After : Sep 24 01:00:58 2026 GMT
        Subject: CN=b0cbf7f3f5c71338d30165798d0bad06cf40324f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:2c:3f:ee:c2:d7:c5:e5:e4:c6:e5:be:4f:53:
                    f2:c5:ae:dd:cb:78:a8:98:ee:4d:92:53:82:21:71:
                    e7:b0:24:a7:22:54:63:b9:ea:3e:12:0c:30:b0:99:
                    dc:37:de:c5:b9:69:f5:1a:a0:ee:75:e9:31:f1:3a:
                    56:c1:83:5c:1a:b2:7a:6c:f5:3f:a3:a8:7c:47:c4:
                    98:2a:bf:25:19:d9:26:c3:fc:c1:47:b8:67:0f:29:
                    1c:5f:a2:28:0c:c3:99:37:21:e2:c8:54:a8:6f:d3:
                    22:eb:a9:e9:7a:73:d8:1f:ef:eb:d0:f0:15:14:90:
                    8b:bd:43:ac:ca:5d:5d:c6:9a:50:85:b9:2b:7d:31:
                    c5:3d:1e:39:76:cb:be:86:be:35:8d:dd:fb:8e:99:
                    ab:a2:4e:e4:f3:71:b8:69:a7:ea:fd:8e:cf:b0:17:
                    fb:83:48:9b:62:29:12:40:33:6a:c6:15:5c:1d:01:
                    ca:94:1e:47:4a:d6:6f:0b:d0:b3:31:2c:a7:c9:8b:
                    a4:ce:1f:42:d0:ff:b0:bc:8e:30:25:99:cf:1d:03:
                    3d:6c:d8:a0:61:55:d2:7f:ca:37:ed:06:c6:c7:bd:
                    fa:58:7c:ba:a3:8b:3a:cb:cd:1b:d5:4f:10:3d:b8:
                    f7:34:36:3c:ec:f9:67:82:fa:1c:3e:02:40:2f:97:
                    0e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:CB:F7:F3:F5:C7:13:38:D3:01:65:79:8D:0B:AD:06:CF:40:32:4F
            X509v3 Authority Key Identifier:
                keyid:02:8C:CC:8D:81:78:C9:E9:D2:FF:C5:32:FC:B5:CD:68:BE:AA:77:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AozMjYF4yenS_8Uy_LXNaL6qd20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:16:da:47:53:2b:6f:3b:c3:93:36:8b:7c:67:1a:7c:82:08:
         61:e9:79:35:ed:69:cc:15:8f:3a:73:cd:10:d9:2a:42:a7:e0:
         21:c4:fe:ba:f8:43:fb:73:8f:e6:4d:76:ad:f1:0f:df:34:29:
         93:31:8f:7c:b0:7a:b7:67:3c:0b:14:e9:90:b1:f4:a9:ab:c1:
         0f:ed:d4:da:ae:cd:5f:a5:ea:a0:5c:15:15:c2:00:a9:4b:24:
         35:48:37:a6:4b:72:f7:35:15:b4:95:1e:84:91:48:20:fe:f2:
         45:28:96:f8:59:b9:39:06:b5:b2:36:73:fa:9f:f5:d9:34:fa:
         d7:ac:f1:d1:ce:ad:b2:3a:f7:86:ac:2c:cb:90:2c:6a:5b:1d:
         37:ab:50:65:98:92:07:59:da:2a:bb:f8:e6:34:29:07:55:9b:
         26:32:d5:da:d0:8f:c7:c3:c1:f8:a7:5f:68:5b:cc:11:71:48:
         2b:69:7c:43:02:9e:e7:8e:90:4e:ab:1e:69:0f:56:71:8e:f0:
         30:03:c1:32:b8:51:d5:2e:82:7d:e6:31:18:f4:e1:50:72:62:
         5e:88:ba:5f:bd:35:f7:7f:87:ad:0e:e9:43:80:bd:5e:93:33:
         2b:9b:13:9a:bd:93:97:0c:54:9d:68:1f:72:cc:0c:61:14:6e:
         38:8d:05:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 06:39:29 2026 by rpki-client