Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft
File:                     bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft (raw, json)
Hash identifier:          h5iedpMaTyqvdV0XFjeglQzz1gaPBGF20STBFrRGff4=
Subject key identifier:   B3:E5:3F:5D:E2:F4:96:37:48:36:1D:A5:11:70:57:CC:D8:5A:AB:24
Authority key identifier: 6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
Certificate issuer:       /CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Certificate serial:       01A0C5C572988DA415CD18DC9F83BE9AC08E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft
Manifest number:          1AB5
Signing time:             Mon 21 Sep 2026 21:00:46 +0000
Manifest this update:     Mon 21 Sep 2026 21:00:46 +0000
Manifest next update:     Tue 22 Sep 2026 21:00:46 +0000
Files and hashes:         1: 1-Wl5nNIYq_W3pgo34yEVZQdbxyU.roa (hash: G+7+XKaWZcYGhV9Z4DnGNMnW/7HpmVdpN8SBoPugm7A=)
                          2: 6R28sM8NerO2u18G_AMWCWlWH18.roa (hash: NDy+Juig3WdCXI1JH5AcQ2fEURwLEtaXUjO+rQmeRKY=)
                          3: NFl71PMJau8OoVT-JEiyhHLSIZE.roa (hash: 3lKUsUjSDTNYTFbKVTbGnC0rr8zeipPM6TGCp1smax4=)
                          4: PFVc5BAK70p3Vmf86UTReTfUHsA.roa (hash: tXQaExvpiAm59XavOkqrv4KBgL817eSwAqiUyiq6cLE=)
                          5: Qcb6MBj1jVMY5YJV__nFQrA67wU.roa (hash: eNJ8rbIWqEmXeV+vpidHVif1VOtq0n7KG9qEAuZBikM=)
                          6: TYbMVOnA1vB-wjFD6xsvHrGkVuw.roa (hash: gch7cDWOheOnpIwvXzaiQbw92kRVsDtErv7998avG0Y=)
                          7: XU-lnejjTfdYfkel9cu2qcj3jOg.asa (hash: 162FwGPbBSAqHbgij5iWFOSWYdvU5C2K98+sNPEBfXc=)
                          8: bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl (hash: wooOo+NabcLA+baN/ZJZ8JiWfbm17pV/I4+vDD12paU=)
                          9: cpt1ugrQd2rHwxe5DoZShXs9qzA.roa (hash: mY1xZ8RVFs4GaD6HtiYmaN9LhtKWxyqpPX89QA8Zdpk=)
                          10: eQvbuB-WIfPaU-Lzc20AVEFS6m8.roa (hash: kWCTa5bd0F2DthD4hV3kmVTOiwhDV1nanw9wkMyWs8c=)
                          11: lOg--qFlBmx76-ubYUaKmA6pugY.roa (hash: aef1dmSLDMXhGIpZWewz/Jm1+VbIUIAUbF9tc8qTQqk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c5:c5:72:98:8d:a4:15:cd:18:dc:9f:83:be:9a:c0:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
        Validity
            Not Before: Sep 21 21:00:46 2026 GMT
            Not After : Sep 22 21:00:46 2026 GMT
        Subject: CN=b3e53f5de2f4963748361da5117057ccd85aab24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:94:f6:52:91:73:33:a9:bf:7c:e4:07:bf:48:
                    b4:81:ab:05:e0:bf:61:2f:d6:7c:1e:60:2c:3c:24:
                    a9:60:5d:61:d5:c1:6e:58:3f:6b:85:08:f9:e8:68:
                    e1:7c:2a:a1:2c:b9:13:6a:bf:6e:13:ae:45:8f:5f:
                    6b:2b:5e:f6:74:b5:33:ca:e5:dd:d5:cb:4f:21:02:
                    38:71:4f:d9:3f:6d:71:c4:db:6c:a1:16:ba:ca:f7:
                    cb:7d:34:ca:e5:fb:e3:05:3f:d8:45:b4:ad:01:14:
                    ac:30:73:37:bc:77:89:90:6c:f4:c0:c3:f9:08:38:
                    a0:2e:b5:de:87:f6:13:29:86:0a:cd:ca:33:66:e2:
                    a5:37:9d:4c:2e:af:b8:01:8c:91:d3:9c:d6:b5:33:
                    b1:bf:a0:f0:f8:da:08:70:d7:68:e7:08:a5:3d:28:
                    a5:21:a8:f2:40:73:37:74:80:2a:07:e7:27:02:4b:
                    a5:38:1e:be:02:26:46:2e:74:55:d7:ee:2d:6a:fb:
                    09:5b:ce:35:3e:30:1a:b4:33:b9:b1:93:03:45:5a:
                    63:ce:0a:9f:85:ce:e9:3e:21:7f:9e:21:da:52:05:
                    da:01:99:12:29:59:91:78:89:64:de:fd:34:fb:55:
                    e5:9a:45:d4:ab:9c:d7:32:a4:ad:68:0b:50:59:af:
                    a1:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:E5:3F:5D:E2:F4:96:37:48:36:1D:A5:11:70:57:CC:D8:5A:AB:24
            X509v3 Authority Key Identifier:
                keyid:6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:b8:d2:03:07:51:bb:05:ff:55:4f:2c:0e:ca:1c:47:93:10:
         23:11:e6:d9:f5:36:d8:c0:8b:26:34:30:31:80:28:66:cf:36:
         08:09:1e:66:3f:99:a3:78:8e:0f:28:0d:33:35:f2:08:e4:3f:
         54:76:30:38:57:87:d3:10:42:88:e3:b0:f0:bd:02:96:a6:51:
         f8:d9:49:8e:00:21:6b:91:73:d3:46:6c:fc:37:c0:70:7d:24:
         8a:d8:12:af:f6:b6:41:ca:c3:10:08:1f:cd:7c:26:46:87:49:
         26:bf:fc:ae:e6:42:4c:02:5c:34:eb:b4:11:bc:19:97:ba:ad:
         89:9c:b5:66:a6:92:83:8b:1d:e6:45:27:59:db:a4:20:c6:a7:
         cb:fc:f2:26:46:a7:bd:38:c1:5c:61:12:9a:c3:b4:fe:19:e9:
         90:23:38:9c:2f:da:66:f1:7a:8b:66:1e:7a:30:e5:38:52:08:
         4f:1b:ba:39:4a:fe:7b:ae:0c:09:10:38:f9:21:0c:bb:75:6d:
         55:9b:06:ab:33:97:7d:e0:25:5a:2e:be:b2:b4:bf:45:2f:f2:
         6b:fb:2e:b0:1e:8d:6d:2b:9a:f7:55:82:7f:f5:22:bf:87:86:
         e8:a4:5c:f5:09:8d:b0:61:f0:24:ab:10:76:10:8b:d9:7b:6f:
         c7:35:0e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:24:13 2026 by rpki-client