Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft
File:                     aRJCwzvC4unkWFCg_GSrLHUGpLg.mft (raw, json)
Hash identifier:          AKBBbwmB4ibWSUvtuNAVbdjeqSdGwEK573RYgOUtG7g=
Subject key identifier:   1D:50:16:0F:02:4E:0D:45:A3:85:B6:56:39:BF:43:66:14:F9:C2:20
Authority key identifier: 69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
Certificate issuer:       /CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Certificate serial:       01A0BF5585A63026B04AB7FA9199A9C96458
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft
Manifest number:          1955
Signing time:             Sun 20 Sep 2026 15:00:47 +0000
Manifest this update:     Sun 20 Sep 2026 15:00:47 +0000
Manifest next update:     Mon 21 Sep 2026 15:00:47 +0000
Files and hashes:         1: 9Tx6X9m9kHnyZo6Sbb77ie6N9JU.roa (hash: 51qlFEt7ImYM42zkx6CqPj6U5NF6HAtJZkurWYKoa7k=)
                          2: EzRGNzhdlKjrbsDuAmITDc0zggQ.roa (hash: Bi2YLEA9YF03NCwaBNKNXeFcw1yeMv46EtFHmDY/TH8=)
                          3: HFUXrWib3cLz8rTtStx7pLSts40.roa (hash: 96N/dVun4UvEatMwgA8wS1Cv0SN64AyZ/K5utVWayag=)
                          4: HG3YvVVl9lXqqG-gJlg1NjTaZAo.roa (hash: dSK/D5z2ZtFnegudAJnV9TUDuJyO1UlbvLNBkTDWBcg=)
                          5: YeiyJoy5H_MNeil65OjoObeNzwo.roa (hash: RcUl/pWFLN4opKw53YV9g0qIhTFEHzbUwIM8agvIUmk=)
                          6: aRJCwzvC4unkWFCg_GSrLHUGpLg.crl (hash: Pip7zR1SXwr5dDMmnB1aDQ2PGdweCplvS+HTdLtYd48=)
                          7: klr0KTSXAoZ5Zqon-VpZgYzoMss.roa (hash: yjOCOxwG1aJ7xjLzJqDW9mX3xmg5oMVtBIP5nqHz3qQ=)
                          8: nQD1CGA0fFxqB5jFdVE9KyClo5c.roa (hash: 14Z5xwdLDF0hr7ZlyjxAbNr7/dynl3kWmXO/VVy34xQ=)
                          9: ndP5FL5P0NgyaX8bGr9alOA9HO0.roa (hash: Q7zGnzRCWrQDq88He7wb77+6qa5kJX5tVhXixyT+fsY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 15:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:bf:55:85:a6:30:26:b0:4a:b7:fa:91:99:a9:c9:64:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
        Validity
            Not Before: Sep 20 15:00:47 2026 GMT
            Not After : Sep 21 15:00:47 2026 GMT
        Subject: CN=1d50160f024e0d45a385b65639bf436614f9c220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ca:4b:44:a7:34:73:72:e5:d2:f7:5c:51:b5:
                    a7:00:c1:68:fa:f8:a2:da:eb:b4:bd:cc:cb:7c:3c:
                    25:7c:24:ab:80:ef:9f:c1:19:0b:8d:b7:ed:13:f0:
                    2c:96:7e:32:4b:0f:e2:21:53:60:ba:45:bc:39:9a:
                    27:7a:70:08:f3:3a:26:fb:74:52:89:61:7e:51:b9:
                    91:44:66:47:8a:d0:81:a1:91:ce:d7:e5:31:da:cc:
                    03:0a:dc:bf:c9:4f:58:f3:f5:8a:a5:28:0f:47:fc:
                    c2:f1:bc:3e:7e:dd:f4:6f:e4:03:b3:96:7b:19:5c:
                    37:a2:8f:e9:47:e5:f5:47:64:26:fe:24:7f:94:f8:
                    4b:8e:65:18:61:fc:49:43:73:95:ec:62:8e:5f:5c:
                    1b:cd:05:33:7b:b5:5d:2e:60:1e:7d:9b:27:af:e4:
                    d8:7c:2c:76:01:8f:0d:c4:92:37:90:47:ba:d9:5b:
                    27:2b:b2:24:69:b1:97:6d:f4:e1:49:36:8c:a3:90:
                    a8:a1:ee:9a:33:9f:f7:49:0a:8f:7e:3b:66:e5:8c:
                    7a:e4:4e:ef:c9:6b:67:13:9e:f0:0f:d7:05:fc:0b:
                    62:e6:24:3c:48:37:bf:07:12:7d:01:7b:fe:e1:c8:
                    63:39:21:fc:07:a4:f2:16:af:ab:8e:4c:fb:f2:9f:
                    cf:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:50:16:0F:02:4E:0D:45:A3:85:B6:56:39:BF:43:66:14:F9:C2:20
            X509v3 Authority Key Identifier:
                keyid:69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:6e:00:e1:6a:97:6e:e0:13:51:0b:8a:5e:9d:c6:51:02:df:
         62:db:99:0c:9c:29:35:17:72:58:76:d2:a3:ac:1c:7f:b7:0f:
         47:69:dc:c3:62:f6:79:57:8a:32:f1:12:64:3a:aa:33:db:2a:
         83:39:59:11:66:95:af:e1:b4:c9:5d:71:d2:6d:11:ce:b5:23:
         77:29:c8:0b:43:d2:db:e5:8d:dd:59:2c:c6:d8:ac:4a:89:70:
         56:5c:fd:58:3e:fd:94:b7:87:5d:85:82:1a:f0:27:5e:dd:21:
         e7:c4:56:b7:db:e2:5b:2d:59:6e:16:8f:ee:5a:78:c3:8b:9e:
         07:33:68:62:b7:91:57:aa:9f:0a:a3:02:1d:17:67:25:0a:2a:
         69:07:8d:b4:b4:8d:11:80:7a:e9:54:d3:f0:b7:a6:ba:d3:9b:
         68:64:b9:da:22:54:fa:9f:c4:6c:7d:66:b1:f5:3b:3f:cb:a2:
         1a:8c:6b:ef:2d:5c:43:40:c8:1c:9e:3f:72:da:a0:10:ea:f7:
         d0:0f:3f:19:ae:b8:88:b2:46:75:50:f4:8a:3d:d6:d7:43:c4:
         f9:c5:53:8a:b4:9f:63:25:55:3f:99:0c:96:b3:05:ac:5a:80:
         84:73:91:59:b4:90:a9:c3:67:72:70:9f:02:4f:ce:3c:5f:bf:
         a0:6d:97:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 02:53:27 2026 by rpki-client