Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.mft
File:                     aRLQSrDDekc7H8gaNp_JrV2f_UQ.mft (raw, json)
Hash identifier:          GRd6WAiA7JErqgg0y/WeREV85dskWLXbT35d8s4IlQE=
Subject key identifier:   E7:C9:78:60:84:44:CF:C6:F5:ED:59:D0:CE:EF:9E:7F:5A:18:06:16
Authority key identifier: 69:12:D0:4A:B0:C3:7A:47:3B:1F:C8:1A:36:9F:C9:AD:5D:9F:FD:44
Certificate issuer:       /CN=6912d04ab0c37a473b1fc81a369fc9ad5d9ffd44
Certificate serial:       01A0DF8577316B7990A993DC02B089C13152
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aRLQSrDDekc7H8gaNp_JrV2f_UQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.mft
Manifest number:          079A
Signing time:             Sat 26 Sep 2026 21:01:00 +0000
Manifest this update:     Sat 26 Sep 2026 21:01:00 +0000
Manifest next update:     Sun 27 Sep 2026 21:01:00 +0000
Files and hashes:         1: aRLQSrDDekc7H8gaNp_JrV2f_UQ.crl (hash: tT9JratzNVQGuDWW+ZYMTusdH8swOBXj+Qy/141H7Pw=)
                          2: cpHuJJY8mhmaGPZw_OaTNbkNxdQ.roa (hash: UR08Hy/azzQ+483DEHzJsxzgFkrpBPCwomIM+T0eyWk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aRLQSrDDekc7H8gaNp_JrV2f_UQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:df:85:77:31:6b:79:90:a9:93:dc:02:b0:89:c1:31:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6912d04ab0c37a473b1fc81a369fc9ad5d9ffd44
        Validity
            Not Before: Sep 26 21:01:00 2026 GMT
            Not After : Sep 27 21:01:00 2026 GMT
        Subject: CN=e7c978608444cfc6f5ed59d0ceef9e7f5a180616
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6c:6b:54:07:f1:ae:f2:41:be:0a:22:e0:3a:
                    af:d8:0f:03:96:f6:d2:0b:2b:dd:1e:a9:7f:a5:72:
                    d7:a0:95:ed:ba:b4:c6:5d:f2:5b:d4:03:fe:ff:fb:
                    c0:bf:c3:02:00:92:e7:ac:53:cb:7f:5e:84:12:c0:
                    dc:50:a0:66:0c:40:0b:aa:07:c0:13:69:86:5f:38:
                    5b:e0:06:9b:2a:9a:aa:33:45:d2:5a:9e:93:63:69:
                    28:a6:7f:fd:af:bb:99:ee:a2:6d:4e:b0:eb:44:90:
                    78:30:49:2e:59:31:23:7a:88:8d:01:05:df:c6:46:
                    66:dc:ba:e5:2e:dd:30:2e:7f:f9:3e:05:5c:c5:4e:
                    c1:30:65:44:ad:64:b8:85:9a:20:c3:83:1f:57:a2:
                    e9:47:39:14:3b:af:e4:75:8e:05:55:32:a3:f6:1e:
                    71:70:21:b2:dc:a2:d8:66:10:d3:91:0e:b8:54:1f:
                    78:8e:95:58:4c:0c:ca:d1:d6:b7:84:6d:6b:e2:ff:
                    0f:54:27:ab:15:63:c1:d9:ae:1a:bd:6b:02:d7:54:
                    91:ed:3a:10:08:0a:af:e5:31:e4:1b:c9:29:16:24:
                    94:ad:a9:ba:2b:aa:28:79:e1:4d:22:15:f4:cf:b2:
                    52:cc:86:07:ca:54:d7:f3:d8:92:0b:ed:01:ad:6e:
                    af:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:C9:78:60:84:44:CF:C6:F5:ED:59:D0:CE:EF:9E:7F:5A:18:06:16
            X509v3 Authority Key Identifier:
                keyid:69:12:D0:4A:B0:C3:7A:47:3B:1F:C8:1A:36:9F:C9:AD:5D:9F:FD:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRLQSrDDekc7H8gaNp_JrV2f_UQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:9b:74:4c:2b:b9:d4:bf:86:a4:04:1d:c2:2b:4c:ee:31:84:
         2c:34:af:88:b1:69:e5:68:43:77:21:10:ee:1c:b5:0e:73:6a:
         ea:6d:06:cf:7b:54:42:02:d1:97:ac:23:a4:9d:83:8d:f8:37:
         7f:4a:81:bd:d8:e4:49:ed:e8:07:b8:62:dd:91:70:a8:23:94:
         a4:4d:32:6e:a2:54:77:2e:d8:ca:ef:0a:04:59:b6:d6:6b:62:
         db:58:94:19:b2:2c:dc:b8:8a:db:f3:d9:ab:34:76:b7:96:c3:
         df:1e:61:27:d2:bf:60:2b:e8:9e:97:11:4f:2e:c5:bf:ec:77:
         71:68:f2:94:8a:7c:8d:f2:92:23:49:42:ac:80:42:d6:38:2f:
         91:de:b8:ad:84:7b:95:9f:dc:e8:43:5a:a5:c1:bb:0f:ed:d3:
         11:9f:4b:05:9f:61:3b:c3:f1:07:49:27:ff:4a:df:60:af:b4:
         7f:5e:5c:77:07:58:6a:58:40:a1:b4:29:44:e2:a2:1a:7a:ee:
         58:e6:58:d6:31:09:66:7b:99:17:c2:30:ff:f3:aa:a2:26:88:
         de:21:98:d0:01:73:17:e5:97:9e:f5:65:66:72:37:72:42:d1:
         4c:42:0a:56:e6:5a:f9:4b:4d:ed:9a:4f:26:e6:cf:cd:04:89:
         bc:76:de:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:01:28 2026 by rpki-client