Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/ed8llh8UGyFYbrmkC11BZtc7uMY.mft
File:                     ed8llh8UGyFYbrmkC11BZtc7uMY.mft (raw, json)
Hash identifier:          PQIi2U2gqE3fvQqIeAQOECku2d8eDSvog5FFG5vUzRk=
Subject key identifier:   12:41:48:FA:9B:1A:5D:0B:AD:32:84:D6:DF:75:CE:82:5B:00:34:CB
Authority key identifier: 79:DF:25:96:1F:14:1B:21:58:6E:B9:A4:0B:5D:41:66:D7:3B:B8:C6
Certificate issuer:       /CN=79df25961f141b21586eb9a40b5d4166d73bb8c6
Certificate serial:       01A0C09F5B87C89918DA4C2EEA8105AA465F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ed8llh8UGyFYbrmkC11BZtc7uMY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/ed8llh8UGyFYbrmkC11BZtc7uMY.mft
Manifest number:          DD
Signing time:             Sun 20 Sep 2026 21:01:04 +0000
Manifest this update:     Sun 20 Sep 2026 21:01:04 +0000
Manifest next update:     Mon 21 Sep 2026 21:01:04 +0000
Files and hashes:         1: 14vJMYWPfWJwLTm41EvJP3dxv0s.roa (hash: 6ta2h79FQjtJwBWFhRNFFHbCANlnZ9ggluTNDumd/P8=)
                          2: 2S_ID7M9u_dFUxvYaa-rOKZfxVo.roa (hash: azGZRtp2vi+dLaLafqy17TsgwENfpndyykRPxlFzCt8=)
                          3: ColFWMx2SicSK2vPCJtdp35IxLw.roa (hash: rN/XHcCGJxpspXE9IogMlXoXWrc2sWRTkNIB4nxC/V8=)
                          4: JfePGHZn8PdBCpyVxuC72hLezmU.roa (hash: qUZTXfZZMQWlR7HAmT2PJRdk8x5fYttpFcNmzhQ5xI0=)
                          5: XsO2HaqGs-17M3S_0Vkj-FO0Hco.roa (hash: hE1KJAdLZvP7FX5UT1YKHBqj5sFEzuymXQsrErEPbpw=)
                          6: ed8llh8UGyFYbrmkC11BZtc7uMY.crl (hash: ZsT5+BKLLR8hSz4eJMWiCyaf1MdF0dKBuebFAmtV95E=)
                          7: z3o1Wljd8fwYujmKWAy7mtR3VdE.roa (hash: E81csimlsIdRleSilJPwt5zMyJxZ+MqkzRlol8b0D5U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/ed8llh8UGyFYbrmkC11BZtc7uMY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/ed8llh8UGyFYbrmkC11BZtc7uMY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ed8llh8UGyFYbrmkC11BZtc7uMY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 21:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c0:9f:5b:87:c8:99:18:da:4c:2e:ea:81:05:aa:46:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79df25961f141b21586eb9a40b5d4166d73bb8c6
        Validity
            Not Before: Sep 20 21:01:04 2026 GMT
            Not After : Sep 21 21:01:04 2026 GMT
        Subject: CN=124148fa9b1a5d0bad3284d6df75ce825b0034cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:db:c9:e6:c4:f8:9f:af:b9:a1:53:84:ab:4f:
                    8f:9f:46:4a:08:e0:8c:9d:88:d9:68:42:1f:93:a3:
                    3b:fe:63:45:d4:89:9f:94:db:1a:f7:19:06:e1:b1:
                    c0:87:ca:2e:3e:ba:16:d1:2f:66:ee:08:cd:fc:9b:
                    1c:63:64:03:63:39:00:66:34:6f:02:41:a8:b4:59:
                    9a:7f:4a:77:54:63:55:40:14:de:86:be:1f:7d:75:
                    fa:c9:29:8a:a8:56:39:9c:12:5c:12:cb:57:dc:e7:
                    1d:5c:48:a5:52:da:12:a3:5a:64:74:f0:72:b9:9f:
                    ed:89:ea:9b:40:54:2f:a4:5b:9d:c0:97:71:84:c9:
                    83:18:75:b3:6d:3a:9b:1a:88:bf:b4:0a:83:1d:70:
                    35:90:c7:72:60:44:fb:cd:39:92:14:cc:ea:84:82:
                    18:e6:ae:3c:89:9b:be:53:cb:97:d8:ab:93:3c:8e:
                    ab:f6:97:8b:ee:7a:12:c8:72:45:de:41:47:eb:30:
                    87:27:9d:b8:2f:5a:51:97:1e:b7:13:b9:54:c0:cc:
                    7c:9a:9d:cf:a4:ae:44:92:90:ee:46:39:17:6e:34:
                    7b:ca:bc:dd:fd:96:0d:c0:95:e2:51:ae:a0:5d:41:
                    7d:c5:f9:4e:74:8f:83:1f:96:33:f2:8f:b4:b3:ad:
                    34:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:41:48:FA:9B:1A:5D:0B:AD:32:84:D6:DF:75:CE:82:5B:00:34:CB
            X509v3 Authority Key Identifier:
                keyid:79:DF:25:96:1F:14:1B:21:58:6E:B9:A4:0B:5D:41:66:D7:3B:B8:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed8llh8UGyFYbrmkC11BZtc7uMY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/ed8llh8UGyFYbrmkC11BZtc7uMY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/ed8llh8UGyFYbrmkC11BZtc7uMY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:bf:25:88:01:09:eb:63:76:37:6d:d6:e8:e6:18:5d:7e:c1:
         a7:d0:36:fd:20:0b:97:ff:e6:7c:bf:57:97:50:fc:7a:df:78:
         91:ca:14:f5:9b:15:6c:b6:bb:26:07:2f:97:66:4c:86:07:3b:
         77:86:0e:9a:c8:04:dd:d4:60:8b:92:6e:d5:54:a6:59:4b:fb:
         1f:83:f0:8c:ab:5b:71:d7:6c:77:f3:63:68:c7:5f:13:d7:6c:
         35:1c:14:82:16:28:c6:48:bb:a3:2d:6a:b6:b4:d4:1f:58:b0:
         7b:49:8a:7c:16:ff:30:60:02:ea:d3:66:e3:d9:88:42:ed:ba:
         c0:08:29:03:0e:e4:b2:3f:34:57:95:08:d7:cf:06:1c:99:89:
         26:48:31:93:0c:41:c8:f7:e8:40:b5:3f:92:b9:5c:9f:f8:db:
         d9:71:ad:c4:04:94:0a:19:83:ab:92:d5:eb:08:11:f9:98:58:
         13:47:64:de:bb:ff:31:b8:1b:26:91:98:7f:29:7d:0d:c7:46:
         d3:91:5a:94:50:ec:02:85:b6:cf:96:8a:a8:6f:3a:e2:0f:d4:
         a0:84:27:14:e2:f2:78:bb:d2:c9:2a:db:0a:16:a8:0a:fd:26:
         70:b1:9c:19:bb:3b:41:bf:ef:66:00:ea:06:a7:16:1c:82:1b:
         b2:14:a3:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 05:18:47 2026 by rpki-client