Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft
File:                     G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft (raw, json)
Hash identifier:          X5km1d+5x55iBo4O+8yu6rv9NiUyX5mwihW5PfJz484=
Subject key identifier:   B4:1B:6C:91:9F:77:F9:0F:26:DE:27:01:E1:09:31:EE:C6:4A:EC:B6
Authority key identifier: 1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D
Certificate issuer:       /CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d
Certificate serial:       01A0C66A3FC7E5F12C38B311F0F55333CCAB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft
Manifest number:          1653
Signing time:             Tue 22 Sep 2026 00:00:46 +0000
Manifest this update:     Tue 22 Sep 2026 00:00:46 +0000
Manifest next update:     Wed 23 Sep 2026 00:00:46 +0000
Files and hashes:         1: 9qVysKkpJcousd0uhgObfap5vOI.roa (hash: 7wb1dM8oWCdmIGCbBq7UC2/K0TDx+6ruYxVeiWGJSIg=)
                          2: A3dfbS-b6385QXbD4gqPyZDygnI.roa (hash: eMk+m8VzfNpB4AhSwjxnwTq5SWYabewWTjTtFBj+jG4=)
                          3: G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl (hash: rQrt3/WImyTPdmbt3BqEEZr9BZ6cBRmW+BO/ow3WyjY=)
                          4: KLhPBL2V1p6eH8MFMD4KISIZMPw.roa (hash: i3XrWoh37U4fK2ppSLoxAjBzRfTAeH85VC2nk0unVUA=)
                          5: M3X3dm-8It7aMXQj1y54UfL58OM.roa (hash: 7bUApRHysWlBDgJo+0traB3WXa7dB6bicxRUCK/I0eI=)
                          6: RxzZhT8fBiEGIwzJcpEaVq4187g.roa (hash: hquVSPsZNeqlCDz0r9h6cmg+2UHwUyJ0mqDqk+VOViY=)
                          7: URKvTjDp4aRxdSZ3jqDjwv8D8go.roa (hash: 0rxLDrLwqqP9CnkuagDXnUpxuRr/vAmcV/9SQj91sog=)
                          8: VIoe5vtniIMNu_oPEWff-lwSqrw.roa (hash: 3k0VjZdIDMeiSnCUwM6+f+LSTU02mg7Bx1Owb60WuIE=)
                          9: _eOaEicMkKKbiwUmCfYmS46987o.roa (hash: BD38gTS64MApM1VCH/ZNlIeeCLbbXCbnCN+Xqd56/3o=)
                          10: bSb1vKlFqm6Lgoy9mUt1MbjszKU.roa (hash: 8Rm1aKWGejiopvOQal7M9IGwEZUMfEE7E/dgp4snH3E=)
                          11: dfU9-qhAOPIpRHtI7pg9049xOfE.roa (hash: ckxo+NWohdUNYjvvt6rTVaOl1HC1z5u5A4J3Qvv8VqY=)
                          12: ecI9WwfCcCzWrmDmHhs2EyFDQJM.roa (hash: F5YXv2pp9vRYKIztKcSv4xzwJ07F66Zhmicw5zjO8J8=)
                          13: ktxPtq6QBIdiSOZ68pA9GADZGkA.roa (hash: nKwrZvWFwYhUKsU2Xr6N7bIKsHUx8g94vR6U6JSn7Rw=)
                          14: oDF8isOJjyEJhYEJCgEsnjBbHWk.roa (hash: 6eDaCiZYBtD9bJDiBCS6z1HiWa8aHX6Yc2oe3UfDymI=)
                          15: pUWzol-7IsEVFwivJCsdeNOLoCA.roa (hash: ihBXzOrxaX+3ULCeQHTxwVVAR46TXRnS+YBxBrTsMIg=)
                          16: rgf2lL7Jgw6RK7qaXmbChVwSTf0.roa (hash: fKOP4EOCaTf8IRTys1S3nRNruXyXKFbHVkVvbzbYHaY=)
                          17: uFmKQIOM22Gf0n9NsjnDx0c77jY.roa (hash: fUJaWhjz/0nSENjm+Jnurdoq9gCX5ybznrqsrDoG2QQ=)
                          18: wdbxHLFVBNdWh2qGHilCZZD7-g0.roa (hash: 90fXHeqU2neAZl01CJ/fB5l+GTvQAN5HQEWOMc2pyGg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 00:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c6:6a:3f:c7:e5:f1:2c:38:b3:11:f0:f5:53:33:cc:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d
        Validity
            Not Before: Sep 22 00:00:46 2026 GMT
            Not After : Sep 23 00:00:46 2026 GMT
        Subject: CN=b41b6c919f77f90f26de2701e10931eec64aecb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:93:93:80:c1:f5:20:5a:af:0e:bb:4d:ad:8f:
                    8e:6f:67:7f:3e:b7:54:56:4b:11:d5:8b:7e:ce:68:
                    7d:86:89:3c:99:59:3b:da:c9:e6:b4:ba:3b:da:dc:
                    f6:81:fd:89:7c:ee:c7:97:90:e9:d2:58:35:3d:bc:
                    87:cd:77:37:2a:ac:dd:7d:fa:06:18:8f:56:3f:5d:
                    c7:27:76:a0:c0:2e:58:16:0e:36:39:9f:5a:31:83:
                    1e:c3:48:d0:05:2c:0b:3e:98:ec:89:19:86:34:3e:
                    e1:e0:dd:23:89:86:f7:47:b5:16:57:48:06:d9:8e:
                    33:7e:50:45:1f:ae:57:c6:75:70:3b:9b:92:9a:23:
                    e8:85:d3:c1:e0:ed:55:2d:bd:a0:37:26:33:c2:3f:
                    9e:15:b6:d9:03:3e:d0:07:1b:39:ff:86:6e:4e:8c:
                    96:eb:db:4c:fb:96:06:da:96:62:78:95:67:0a:d0:
                    26:7a:e9:f2:f2:e6:05:d1:15:6c:65:fb:97:07:90:
                    93:bb:cf:83:42:ed:8d:80:b3:91:1f:0e:bf:b4:9c:
                    19:4f:49:6d:e4:64:76:2d:80:e1:11:54:16:90:38:
                    aa:f1:15:4e:00:bb:92:2e:d8:60:0a:5f:0e:6f:bc:
                    af:90:e2:40:c1:8c:90:6c:20:9c:ae:0a:e1:fc:58:
                    66:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:1B:6C:91:9F:77:F9:0F:26:DE:27:01:E1:09:31:EE:C6:4A:EC:B6
            X509v3 Authority Key Identifier:
                keyid:1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:55:66:65:1c:0f:08:c1:48:dc:fa:da:81:67:c6:6d:df:94:
         7b:c4:9c:6c:71:da:2b:04:c1:6c:ca:47:9a:1d:e2:c3:9b:71:
         3a:bc:90:e7:ff:bf:3a:41:50:12:c1:c7:c1:0e:8d:6b:fc:3c:
         18:4f:f8:b8:d5:f5:b0:60:67:18:1d:63:82:8d:60:71:71:02:
         2f:a4:46:5e:19:65:6c:5a:e6:a9:20:72:e7:dd:d2:d8:0b:04:
         a3:3b:9e:7f:07:c9:24:55:80:3e:73:b3:2f:b1:af:7e:bd:64:
         72:49:bd:4c:db:df:bb:9f:45:c7:e0:f0:16:0e:c8:24:ea:95:
         41:f2:42:1d:0e:20:7a:cf:61:88:4f:4c:02:1d:0f:00:6c:56:
         e8:a8:0e:ff:6a:ee:c3:c9:85:a8:0e:5e:28:02:ec:a2:83:02:
         5a:d5:43:35:6e:c1:44:03:dc:7e:18:9f:09:4c:72:d9:6f:9c:
         ad:27:f3:d6:76:bf:52:53:c6:85:8c:7e:a6:5b:c6:df:40:6b:
         eb:69:8e:22:14:db:71:ea:e6:d4:95:74:66:c0:2b:d7:85:1a:
         57:30:bf:8c:6b:48:f5:2d:da:31:99:f7:0e:a3:9d:eb:2f:c1:
         b6:79:12:cd:f1:4f:22:6b:fd:18:cb:a7:e7:67:0d:ee:b5:ce:
         e7:59:a6:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:57:37 2026 by rpki-client