Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/2b9296-6bd1-49fb-aea0-d893211e6719/1/bbMKQaam8hqbLdflhWog1bXv_hw.mft
File:                     bbMKQaam8hqbLdflhWog1bXv_hw.mft (raw, json)
Hash identifier:          aQ53oVystb5J1eHwSpt8eePmPzZnYBeblYDngUfcXgU=
Subject key identifier:   19:FA:15:5D:28:BC:62:79:B0:13:56:A9:22:0E:61:C9:D3:6A:B2:D0
Authority key identifier: 6D:B3:0A:41:A6:A6:F2:1A:9B:2D:D7:E5:85:6A:20:D5:B5:EF:FE:1C
Certificate issuer:       /CN=6db30a41a6a6f21a9b2dd7e5856a20d5b5effe1c
Certificate serial:       01A0D2DDE737EB13A5BBA43B6D139AEF3E26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bbMKQaam8hqbLdflhWog1bXv_hw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/2b9296-6bd1-49fb-aea0-d893211e6719/1/bbMKQaam8hqbLdflhWog1bXv_hw.mft
Manifest number:          02DE
Signing time:             Thu 24 Sep 2026 10:02:33 +0000
Manifest this update:     Thu 24 Sep 2026 10:02:33 +0000
Manifest next update:     Fri 25 Sep 2026 10:02:33 +0000
Files and hashes:         1: HxyJ0VIuo-5QCdby3h9utQPfqr0.roa (hash: y5QqmXh4WKxc3YfWMLRJZuc5ufgudUqOp7HmDc/F9MU=)
                          2: KmzjptRoJ7fRzVMuAbPyGaNlK4U.roa (hash: HTQ4SqU1gbnyzbZ9VFLXWOk6V34twlkajlodOkPujZU=)
                          3: bbMKQaam8hqbLdflhWog1bXv_hw.crl (hash: ePv5XHkAMDwCF96offDGEuAu1mNMVNmmaDV4F2aoKEk=)
                          4: dFsfHDXFAVvIPBP5nRJqNmbKuXM.roa (hash: YiThV6hGoAFFghLAZu6/Suaci71yHsUeFK7P3D3y8FQ=)
                          5: gSng8bmqZiw6jb1bs3NjfDpX7wM.roa (hash: rLCdrSPUSpTEnkTQiU5fDOLCEMchnh4Nxl216udf2yU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/2b9296-6bd1-49fb-aea0-d893211e6719/1/bbMKQaam8hqbLdflhWog1bXv_hw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/2b9296-6bd1-49fb-aea0-d893211e6719/1/bbMKQaam8hqbLdflhWog1bXv_hw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bbMKQaam8hqbLdflhWog1bXv_hw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 10:02:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d2:dd:e7:37:eb:13:a5:bb:a4:3b:6d:13:9a:ef:3e:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6db30a41a6a6f21a9b2dd7e5856a20d5b5effe1c
        Validity
            Not Before: Sep 24 10:02:33 2026 GMT
            Not After : Sep 25 10:02:33 2026 GMT
        Subject: CN=19fa155d28bc6279b01356a9220e61c9d36ab2d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a6:f4:65:7a:58:81:b2:f1:05:92:7b:0c:d7:
                    67:14:9c:8e:52:42:4d:0f:69:b6:49:f6:df:92:d6:
                    79:45:7d:fb:6f:52:4d:9e:59:aa:3d:bb:3f:d7:b1:
                    56:68:0f:f6:8b:23:29:7d:fb:a6:fa:2e:64:d0:f5:
                    8f:22:2e:78:84:dc:90:ae:14:2d:16:b2:e2:c3:3f:
                    f4:20:44:66:e9:e6:d7:0e:a6:6e:c4:49:0b:58:31:
                    57:35:53:e8:8e:21:47:7f:5b:f1:bc:07:8d:f3:7e:
                    94:ed:08:66:1c:08:b4:99:9b:30:60:0e:81:59:c6:
                    73:aa:d0:fd:9f:30:dc:db:21:a3:20:de:37:81:a1:
                    96:59:6e:3a:e8:2e:c0:f2:a9:38:50:4f:be:6e:26:
                    fd:52:3a:c9:3f:fc:f5:e9:2d:41:02:f0:45:93:e3:
                    fa:87:dd:b7:96:b1:f9:3b:84:6e:0a:2d:88:24:3e:
                    cf:82:bd:d7:df:ff:b6:b4:2c:fb:8b:42:2c:35:70:
                    ee:6b:39:7d:bc:b6:9a:08:61:d4:42:fa:e6:02:ca:
                    00:98:59:47:67:94:c6:c3:0b:bf:c2:b3:a6:29:4e:
                    97:98:7b:53:39:5a:84:c9:aa:8c:9c:04:f6:be:fd:
                    41:41:d9:a0:23:4a:e4:87:0e:c9:c1:bc:ab:48:7b:
                    7e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:FA:15:5D:28:BC:62:79:B0:13:56:A9:22:0E:61:C9:D3:6A:B2:D0
            X509v3 Authority Key Identifier:
                keyid:6D:B3:0A:41:A6:A6:F2:1A:9B:2D:D7:E5:85:6A:20:D5:B5:EF:FE:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bbMKQaam8hqbLdflhWog1bXv_hw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/2b9296-6bd1-49fb-aea0-d893211e6719/1/bbMKQaam8hqbLdflhWog1bXv_hw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/2b9296-6bd1-49fb-aea0-d893211e6719/1/bbMKQaam8hqbLdflhWog1bXv_hw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:d0:60:df:90:a5:95:5e:40:f9:79:2f:d8:73:41:bb:15:1b:
         47:43:16:d3:04:a6:10:2e:cc:01:5e:ca:7c:72:b7:31:5f:75:
         70:a1:8c:38:fd:89:59:1f:ca:a4:8a:38:b8:34:4f:a5:38:21:
         05:b8:68:3e:35:16:71:f2:39:d9:07:19:76:2d:4f:25:4a:28:
         d0:08:29:ab:d8:d7:07:6e:ca:cf:d4:d0:38:93:ad:ec:a8:f0:
         2f:a3:3e:0f:94:f2:19:25:17:2b:70:93:3d:29:0b:00:8e:7e:
         2c:75:6e:2a:24:a1:ba:96:7c:be:39:87:bd:d5:17:74:28:89:
         e0:a6:73:27:7b:f3:90:64:fe:99:cb:11:73:55:51:ce:2b:27:
         2e:7a:4b:0f:07:28:74:06:8a:9c:03:47:c2:aa:86:47:6f:7a:
         e6:37:86:40:7d:7c:17:9a:fe:36:67:29:27:d9:ce:d0:a0:d4:
         54:cd:ea:8c:19:c4:7a:b4:33:45:b8:5a:d4:94:9e:bb:d8:38:
         c0:b9:46:f9:08:a1:fa:36:28:4f:21:5b:64:56:c2:c5:c3:b0:
         a1:e5:cf:30:46:3f:ed:cd:39:de:1b:8c:1c:19:38:17:32:fa:
         df:d3:79:10:2f:8c:76:86:74:87:96:32:ff:79:cb:b5:35:7a:
         f3:63:10:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:43:30 2026 by rpki-client