Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/_jecWObPq6RMIIdrfVmMCFBLUws.mft
File:                     _jecWObPq6RMIIdrfVmMCFBLUws.mft (raw, json)
Hash identifier:          VhSauY04ASsQ+Odkztc37Kx9IeVsm0msEtT8tfz6HvA=
Subject key identifier:   69:30:68:48:76:E0:2C:AF:51:D5:EA:BC:51:3F:D1:B8:E0:81:72:B9
Authority key identifier: FE:37:9C:58:E6:CF:AB:A4:4C:20:87:6B:7D:59:8C:08:50:4B:53:0B
Certificate issuer:       /CN=fe379c58e6cfaba44c20876b7d598c08504b530b
Certificate serial:       01A0C858480472A6043C4D044AC39E7F3930
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_jecWObPq6RMIIdrfVmMCFBLUws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/_jecWObPq6RMIIdrfVmMCFBLUws.mft
Manifest number:          E1
Signing time:             Tue 22 Sep 2026 09:00:23 +0000
Manifest this update:     Tue 22 Sep 2026 09:00:23 +0000
Manifest next update:     Wed 23 Sep 2026 09:00:23 +0000
Files and hashes:         1: 1f3chHH8Vzxj3ocJFNDQRkHByxM.roa (hash: Yj5a6Anj2XGpmwiiCO9eJxIVZQ77+YUsqu5JfZN+lyo=)
                          2: 3M6LA-oo_M8iW0WHMWzqNuawrXI.roa (hash: mbA8j0JMCwuQFEr3+eq0m532/7RxJbUAb2My/6/L17o=)
                          3: DC6F0mfYavqmIkVWp9CoS3ORJPY.roa (hash: H/N8+lVCJsVtR4s7AZv6JX/uXYchHAlYepuRHlvMSmQ=)
                          4: DqGXOOpUBDyIo6-xMv0lfI01neI.roa (hash: cY+avgvPvcXEHIu9Wj7BmeU7KYCi5ZbN7lhO24Q9+hg=)
                          5: _jecWObPq6RMIIdrfVmMCFBLUws.crl (hash: 3+lCdR38hck/bFYfr6aC6p4yQd1Ze/bY/WJoTXDu9yg=)
                          6: bIqQRYp65ffuhEfiWgURnnYmOLA.roa (hash: 2t1dhMXRId6Ep0qRGdrx3Oonk4YhaxQhU/sq1I6fhLA=)
                          7: ixHLgv4HQ_wAiB8H1aG1cnHYC0U.roa (hash: Q6evZsXBO9hhV+6BK2xuyToyVzZwGNdUppGvsisAOWo=)
                          8: mQgZ_aeQizevYwNKMCfXAMQNacA.roa (hash: zBq8HYNkmYsx3l9a089U7aq9li/mu5uJZF8m8sHR/3U=)
                          9: wsLBMp1xRJgr69K7X57Is-5d0GE.roa (hash: mpGX3UZzDQtu714gFa7DML2FgzYlJk2cK8dfIFZYaDk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/_jecWObPq6RMIIdrfVmMCFBLUws.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/_jecWObPq6RMIIdrfVmMCFBLUws.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_jecWObPq6RMIIdrfVmMCFBLUws.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 09:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c8:58:48:04:72:a6:04:3c:4d:04:4a:c3:9e:7f:39:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe379c58e6cfaba44c20876b7d598c08504b530b
        Validity
            Not Before: Sep 22 09:00:23 2026 GMT
            Not After : Sep 23 09:00:23 2026 GMT
        Subject: CN=6930684876e02caf51d5eabc513fd1b8e08172b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ab:ef:a7:64:f8:bb:ec:69:6a:d1:21:f0:2b:
                    62:5c:b1:a9:82:76:e7:a6:35:08:dd:9e:76:e8:eb:
                    2e:5c:3d:7e:ce:17:88:21:b1:a7:9e:68:07:e1:f0:
                    b5:98:5f:df:67:90:f8:16:0b:13:63:05:7d:3c:a5:
                    b9:0c:5f:9c:2e:21:ef:dd:b7:2e:a8:07:3e:f6:f8:
                    16:ca:7b:e5:54:db:97:41:8d:13:1e:8b:31:6c:85:
                    d7:0d:e2:07:3c:6e:07:d8:1b:3e:e8:cb:e3:a6:2c:
                    a7:ab:06:ff:6f:87:64:8f:74:21:77:7f:d7:c8:c5:
                    df:e9:a1:5e:5c:e5:a9:10:e7:82:a5:ed:3a:2e:a6:
                    34:c5:a8:c5:40:3e:ed:1e:a0:bf:34:47:4b:62:3b:
                    96:bb:9e:ae:18:01:d8:a6:37:ff:9f:25:27:42:6b:
                    a8:a3:ea:0b:bf:c6:fd:ca:2a:af:96:96:2d:fb:3f:
                    5c:03:ee:b9:c2:fc:db:32:e7:b7:38:31:cc:5b:2f:
                    ad:bc:e0:bc:e8:d2:4f:fc:82:b5:b8:3e:30:61:50:
                    ee:a0:1b:37:d2:4f:48:bc:f1:2e:e6:c3:dd:a5:c7:
                    1b:2d:66:ee:dd:5c:e0:e2:b4:58:4f:07:63:db:59:
                    56:ec:49:fa:ff:c6:fe:32:92:f0:3e:d9:ce:bf:4c:
                    64:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:30:68:48:76:E0:2C:AF:51:D5:EA:BC:51:3F:D1:B8:E0:81:72:B9
            X509v3 Authority Key Identifier:
                keyid:FE:37:9C:58:E6:CF:AB:A4:4C:20:87:6B:7D:59:8C:08:50:4B:53:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_jecWObPq6RMIIdrfVmMCFBLUws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/_jecWObPq6RMIIdrfVmMCFBLUws.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/_jecWObPq6RMIIdrfVmMCFBLUws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:7e:a9:07:33:9a:2b:8d:ab:9e:29:1e:19:db:97:b8:32:40:
         7b:8b:27:cc:ff:2b:81:e3:48:0e:25:6b:d7:b9:77:84:01:09:
         d5:39:14:1e:b6:d3:ab:b3:e2:33:69:15:5b:c9:40:9f:2e:0d:
         4b:30:1a:de:68:6e:25:fb:51:a0:19:bc:8d:a7:ea:e3:f4:59:
         08:b3:c4:57:17:79:f2:e0:b5:f8:16:1f:d6:0f:0c:2f:97:48:
         a4:21:f0:5e:97:75:ce:6a:b3:01:c9:de:88:c2:1a:e0:49:1a:
         26:60:0f:69:42:8b:81:76:ed:b7:03:61:a9:9a:cf:6f:56:2c:
         e5:5a:8b:e8:95:0b:70:cd:f6:f3:cb:40:16:6b:fc:42:b1:de:
         ed:60:b1:c9:51:ee:6f:71:10:fa:f6:e8:ab:cf:65:3b:9d:2e:
         b5:dd:b1:27:a8:61:2f:57:00:5b:8f:41:74:ba:0e:c0:98:5d:
         bc:b4:e2:df:35:dd:01:a0:6b:5b:61:f9:2c:82:d7:80:fc:fc:
         4c:23:a6:45:c7:f1:ce:70:5a:e8:48:fb:9b:8e:9d:0d:b3:9f:
         83:bb:15:ff:d9:18:7a:e0:3c:a1:c7:b1:16:45:27:ce:ca:16:
         42:2b:51:f6:ec:2e:69:99:75:f1:7b:0d:c4:cb:94:07:ed:bd:
         ab:a3:25:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:54:13 2026 by rpki-client