Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/b27704-ef52-44a7-bdd1-f9f91e4e31fa/1/d3JBEvAoXYMMh-4yVtUZaPFbuQs.mft
File:                     d3JBEvAoXYMMh-4yVtUZaPFbuQs.mft (raw, json)
Hash identifier:          kO1Oz2xKfgXZErF1ZULz7XkHgt7wSnXGp/d3y07RY0s=
Subject key identifier:   E1:B8:BB:D5:6C:60:FC:46:A5:01:C0:76:FF:7B:2E:80:CA:3D:4C:8E
Authority key identifier: 77:72:41:12:F0:28:5D:83:0C:87:EE:32:56:D5:19:68:F1:5B:B9:0B
Certificate issuer:       /CN=77724112f0285d830c87ee3256d51968f15bb90b
Certificate serial:       01A0DC4E03E9F24B6BCFD2B36AE74124F6BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d3JBEvAoXYMMh-4yVtUZaPFbuQs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/b27704-ef52-44a7-bdd1-f9f91e4e31fa/1/d3JBEvAoXYMMh-4yVtUZaPFbuQs.mft
Manifest number:          022F
Signing time:             Sat 26 Sep 2026 06:01:35 +0000
Manifest this update:     Sat 26 Sep 2026 06:01:35 +0000
Manifest next update:     Sun 27 Sep 2026 06:01:35 +0000
Files and hashes:         1: 6p1ednwrZQ_JDbcmNlbUx0LPSFQ.roa (hash: hIJJSdmlqRlS5NfeTFhoCLt5Vs93+x5E1RzMdfdB3oA=)
                          2: d3JBEvAoXYMMh-4yVtUZaPFbuQs.crl (hash: txx3h1Yait7o/7TKiP4O95EIpNKtkm4/PEVQNRsFXis=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/b27704-ef52-44a7-bdd1-f9f91e4e31fa/1/d3JBEvAoXYMMh-4yVtUZaPFbuQs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/b27704-ef52-44a7-bdd1-f9f91e4e31fa/1/d3JBEvAoXYMMh-4yVtUZaPFbuQs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d3JBEvAoXYMMh-4yVtUZaPFbuQs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dc:4e:03:e9:f2:4b:6b:cf:d2:b3:6a:e7:41:24:f6:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77724112f0285d830c87ee3256d51968f15bb90b
        Validity
            Not Before: Sep 26 06:01:35 2026 GMT
            Not After : Sep 27 06:01:35 2026 GMT
        Subject: CN=e1b8bbd56c60fc46a501c076ff7b2e80ca3d4c8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e7:1d:ea:b2:fb:ce:82:5d:8d:d1:fd:9c:f7:
                    4b:cb:1f:b7:98:7e:b9:da:8e:05:30:df:8c:42:ce:
                    e2:be:a8:67:e3:ad:38:f9:0c:8c:58:c8:46:2c:7c:
                    8a:a6:dd:41:7f:89:1b:3e:96:49:1e:34:1d:74:d6:
                    0f:51:85:46:bb:c9:48:88:a0:b2:b3:4b:ee:43:3a:
                    41:12:97:5e:6e:21:11:58:5f:dc:98:b1:9a:32:e4:
                    4f:e7:b6:1e:4d:c1:16:92:85:1e:8a:20:87:4b:ef:
                    4e:e0:e9:72:e5:c3:60:95:f5:7c:2f:57:dd:f3:9f:
                    51:e1:1b:5e:eb:15:ad:4a:db:ea:c7:e6:51:db:24:
                    44:7a:60:18:dd:4c:91:eb:4f:2b:ab:36:9f:6b:5d:
                    b3:c8:07:12:3f:b0:23:3b:59:01:b6:55:f2:9e:b4:
                    ee:0c:b1:b3:da:90:b3:68:7d:84:fb:e1:16:50:e6:
                    79:27:c0:5d:78:43:08:6f:dd:da:35:3a:b2:d5:d6:
                    73:2e:89:0e:0c:89:f3:cd:a9:85:23:b6:73:94:f6:
                    04:83:e7:ed:b5:fe:53:7c:6c:13:53:14:c5:16:a4:
                    5b:b2:b4:8b:06:fb:d2:0e:25:31:70:f3:bf:12:a9:
                    12:d3:99:4f:13:f7:9b:1f:8b:16:0e:e4:60:4d:00:
                    ed:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:B8:BB:D5:6C:60:FC:46:A5:01:C0:76:FF:7B:2E:80:CA:3D:4C:8E
            X509v3 Authority Key Identifier:
                keyid:77:72:41:12:F0:28:5D:83:0C:87:EE:32:56:D5:19:68:F1:5B:B9:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3JBEvAoXYMMh-4yVtUZaPFbuQs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/b27704-ef52-44a7-bdd1-f9f91e4e31fa/1/d3JBEvAoXYMMh-4yVtUZaPFbuQs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/b27704-ef52-44a7-bdd1-f9f91e4e31fa/1/d3JBEvAoXYMMh-4yVtUZaPFbuQs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:b0:db:f2:68:63:b0:bd:5f:07:b9:5b:fa:da:b8:2f:dc:5c:
         c7:26:c6:88:55:b6:bb:5d:60:68:2e:e7:c8:78:10:51:5a:fa:
         ad:d9:45:b1:09:26:8d:1c:cd:88:7a:a4:88:ac:d8:2a:8f:e3:
         cd:bb:77:3d:7b:28:86:61:e6:06:af:84:a8:46:e5:92:98:1c:
         57:ef:e1:f6:22:5c:c2:f2:f9:50:f7:94:b3:67:23:58:27:31:
         da:fd:31:4c:d0:53:09:0f:f3:23:53:86:b5:69:64:ea:1c:29:
         7a:34:1c:4d:94:d8:fc:4a:28:4c:78:17:b3:9c:ca:83:73:5d:
         41:9c:38:b6:1c:dc:64:e5:2d:c6:d1:ee:37:4c:b7:2f:0f:c8:
         f6:e2:1b:f9:b6:da:58:d5:cd:74:2d:45:e9:c3:ab:35:49:36:
         08:fa:00:d1:89:f4:5f:b6:32:62:6d:86:30:19:66:61:15:99:
         08:5a:5c:fa:df:c8:bd:a9:a5:ef:69:5e:ea:55:7a:5b:ff:6d:
         19:4b:e0:c7:a0:8f:21:b0:3e:15:7f:a6:37:b0:a4:8e:b8:5b:
         0d:56:59:da:d3:08:2c:3e:6d:07:be:e6:34:9d:75:86:5a:4c:
         e3:70:02:7e:f6:95:a1:bc:a6:53:c0:58:63:62:4f:c1:94:dd:
         24:44:fc:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:30:34 2026 by rpki-client