Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.mft
File:                     _dlCLeliA-XYc-CZVZGjppDdPZI.mft (raw, json)
Hash identifier:          vEIFkqyfCpkxq6kpszUoNcJoyd/UAHjmA1B0Pc/LRzQ=
Subject key identifier:   C8:6F:4B:F7:12:CA:1B:EA:49:97:22:E6:E7:B6:13:1B:F5:73:8D:F2
Authority key identifier: FD:D9:42:2D:E9:62:03:E5:D8:73:E0:99:55:91:A3:A6:90:DD:3D:92
Certificate issuer:       /CN=fdd9422de96203e5d873e0995591a3a690dd3d92
Certificate serial:       01A0C70EB52E14FA211E10C9D7A0613E7912
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_dlCLeliA-XYc-CZVZGjppDdPZI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.mft
Manifest number:          1A6D
Signing time:             Tue 22 Sep 2026 03:00:24 +0000
Manifest this update:     Tue 22 Sep 2026 03:00:24 +0000
Manifest next update:     Wed 23 Sep 2026 03:00:24 +0000
Files and hashes:         1: 1-ijVMFl6GCcC6GGP7jpRptAbkME.roa (hash: 6WwqDb4fLLuH7fqrOWTiw7oz+ZLJGp2PJoPRlWydUCs=)
                          2: 41PdyGaqWfuZrGCiI7A6Pe8er08.roa (hash: fqabz9d9YrXMSNvuc4clJBMP1zUaniqoWE3YHtZWSoc=)
                          3: RpRW9hgIjPMfAZ842QdrIrNI7fk.roa (hash: 3sOUZl0+LvcVI79+33YVuGWAx3JxO70FfZgzplNUMc0=)
                          4: _dlCLeliA-XYc-CZVZGjppDdPZI.crl (hash: N9sEuvhHftrap5FC8EWOxMxmUSu9s3cI1CMCWBmWGQc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_dlCLeliA-XYc-CZVZGjppDdPZI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 19:45:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c7:0e:b5:2e:14:fa:21:1e:10:c9:d7:a0:61:3e:79:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdd9422de96203e5d873e0995591a3a690dd3d92
        Validity
            Not Before: Sep 22 03:00:24 2026 GMT
            Not After : Sep 23 03:00:24 2026 GMT
        Subject: CN=c86f4bf712ca1bea499722e6e7b6131bf5738df2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a8:62:94:1e:30:3b:aa:66:5d:22:0a:b3:51:
                    c3:ca:74:d8:73:10:bd:10:54:4c:78:97:aa:1c:2a:
                    f0:24:b3:7a:06:bb:3c:4f:8e:9d:d7:d1:ab:a9:0c:
                    c4:e8:95:50:93:ca:e5:f2:20:24:2a:ff:f8:74:0d:
                    0a:24:71:4f:b8:70:c6:4e:4c:5b:df:f1:d0:1b:ab:
                    95:6f:0a:eb:69:6d:18:b4:28:d6:03:ea:ab:66:e5:
                    4b:7e:e7:31:90:2c:a3:f7:9e:ed:d2:b2:6d:d3:87:
                    3c:21:a6:10:37:a2:b7:4c:c7:8a:6a:54:e0:8e:7e:
                    7c:01:31:ec:3d:b6:62:b1:59:c3:16:0e:ed:e9:60:
                    eb:c9:cc:08:ab:dd:da:7d:b8:ff:a0:af:14:eb:28:
                    bb:0a:e9:93:fb:fe:8e:fb:6a:d5:fc:e4:63:5e:60:
                    46:e8:8a:f5:37:17:b2:c0:c7:9d:bd:39:a7:5c:3a:
                    8b:31:1a:9e:12:e7:4f:12:0a:81:71:76:09:d8:49:
                    0f:fc:2a:f2:da:7b:b0:25:1a:fa:d4:03:32:92:cc:
                    9a:1f:24:e4:06:5e:00:98:e5:8f:36:16:be:6a:8e:
                    3c:87:47:82:fe:d1:f2:92:33:e8:ab:d6:f5:56:9e:
                    1b:fa:4b:22:2b:65:ba:be:93:3d:79:9c:3c:7c:59:
                    33:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:6F:4B:F7:12:CA:1B:EA:49:97:22:E6:E7:B6:13:1B:F5:73:8D:F2
            X509v3 Authority Key Identifier:
                keyid:FD:D9:42:2D:E9:62:03:E5:D8:73:E0:99:55:91:A3:A6:90:DD:3D:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dlCLeliA-XYc-CZVZGjppDdPZI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:25:b8:f5:f1:85:0d:ac:66:29:fe:3f:29:67:16:c9:89:0c:
         eb:81:2b:ee:5f:d9:a1:4f:78:1d:1d:5b:dc:45:48:87:78:6c:
         37:c1:f4:5d:3a:1c:dd:b9:46:61:cd:1e:37:ee:e7:29:58:dc:
         a8:04:40:ca:33:3c:38:e3:7c:4b:ad:09:96:59:86:61:4c:a3:
         bd:f7:1b:ab:35:00:58:20:43:fc:8e:df:fa:47:57:38:85:54:
         d5:ee:38:5c:00:59:d6:5e:f6:f6:ce:00:10:48:c3:8e:1d:43:
         6b:ac:25:fa:27:33:8d:1a:3d:6d:f1:81:c7:01:16:93:6b:4c:
         f5:56:5d:c0:79:d3:31:46:ff:cd:78:da:0e:8b:78:90:dc:b4:
         54:ee:7a:9b:01:23:38:46:5d:46:1c:9e:db:ff:a9:2f:91:6b:
         ec:a3:2f:40:cf:7a:34:03:9f:0d:99:58:e3:28:b4:52:0b:2d:
         8a:f4:99:f0:a5:ca:34:c8:f6:b2:62:73:21:c3:ac:56:ca:53:
         71:e6:e5:60:c6:5c:4d:dc:89:b7:b1:e1:2b:47:ae:2e:e4:8a:
         7b:a4:58:e3:d9:c4:5c:a6:52:a7:e0:f7:72:fd:f5:0e:a5:10:
         7e:01:9f:64:8a:a0:c0:34:7a:25:72:71:bc:c9:7f:51:64:39:
         56:5c:7b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:52:50 2026 by rpki-client