Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/fe455d-f6ce-436c-8327-db6ddb4a44e5/1/aKfCyE_6STTPD3PvGhoaM3hzGCY.mft
File:                     aKfCyE_6STTPD3PvGhoaM3hzGCY.mft (raw, json)
Hash identifier:          RKxo6gsBWk6673Amsu5HxMdWJxTxxcXTyV//Dyy76tU=
Subject key identifier:   5E:69:F8:89:FB:3D:82:B5:7E:5F:76:D2:37:EC:F6:D5:E5:00:A1:5A
Authority key identifier: 68:A7:C2:C8:4F:FA:49:34:CF:0F:73:EF:1A:1A:1A:33:78:73:18:26
Certificate issuer:       /CN=68a7c2c84ffa4934cf0f73ef1a1a1a3378731826
Certificate serial:       01A0C77D083382C62B74E23E4D017BB6B378
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aKfCyE_6STTPD3PvGhoaM3hzGCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/fe455d-f6ce-436c-8327-db6ddb4a44e5/1/aKfCyE_6STTPD3PvGhoaM3hzGCY.mft
Manifest number:          114D
Signing time:             Tue 22 Sep 2026 05:00:55 +0000
Manifest this update:     Tue 22 Sep 2026 05:00:55 +0000
Manifest next update:     Wed 23 Sep 2026 05:00:55 +0000
Files and hashes:         1: 7Mj5v1lcOBzmcBBC8jLwVKnmF6E.roa (hash: FZGMBdbWDI4SBVgHGU6EFIDpQ6waV160tdsD6LVMmXc=)
                          2: aKfCyE_6STTPD3PvGhoaM3hzGCY.crl (hash: K3aFn5KlqJb6RvYKXxfW/JxH/c7gSKbAAUEMtszWER8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/fe455d-f6ce-436c-8327-db6ddb4a44e5/1/aKfCyE_6STTPD3PvGhoaM3hzGCY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/fe455d-f6ce-436c-8327-db6ddb4a44e5/1/aKfCyE_6STTPD3PvGhoaM3hzGCY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aKfCyE_6STTPD3PvGhoaM3hzGCY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c7:7d:08:33:82:c6:2b:74:e2:3e:4d:01:7b:b6:b3:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68a7c2c84ffa4934cf0f73ef1a1a1a3378731826
        Validity
            Not Before: Sep 22 05:00:55 2026 GMT
            Not After : Sep 23 05:00:55 2026 GMT
        Subject: CN=5e69f889fb3d82b57e5f76d237ecf6d5e500a15a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:90:ad:a2:cc:33:bb:2c:86:97:0f:35:47:76:
                    63:ee:10:0f:f3:04:a0:60:5d:4e:3d:98:a0:f8:a4:
                    ca:81:a7:a7:90:98:8d:ab:e7:32:c5:85:65:a5:47:
                    65:16:4f:ff:fb:a7:c5:3f:9f:5f:7c:6f:24:2c:01:
                    46:18:67:0c:d9:d6:69:63:f9:64:4b:cb:79:ee:07:
                    5c:a2:1a:c9:6a:b9:fc:b8:c6:96:c6:17:73:54:a8:
                    63:d9:2e:fc:58:23:d9:74:50:00:82:83:33:e4:46:
                    e5:ec:0b:8b:2e:67:92:9b:0e:2c:77:eb:e5:55:0f:
                    74:ba:59:bc:7c:d9:41:7c:b9:a3:ce:1b:be:9b:8f:
                    80:66:ba:39:e0:1a:6c:5e:9a:62:35:c9:25:47:13:
                    93:42:f2:70:10:6b:d4:b0:c5:e3:e5:07:e7:24:d9:
                    16:a8:93:4b:fe:e8:cb:db:dc:3b:d0:5e:e6:0a:96:
                    6b:4f:71:1f:19:26:ed:b3:fa:99:22:74:3a:b4:cc:
                    a9:56:e0:18:05:b0:d7:10:13:b3:76:d0:2d:8e:ec:
                    7b:6f:77:1a:b5:80:cd:75:8b:c6:0e:e4:b6:a0:fd:
                    68:e2:b3:41:19:3b:7e:6f:fe:12:4d:f9:fb:01:b3:
                    83:7a:a2:53:d9:fe:7c:ba:ec:50:5c:ba:58:1d:4b:
                    1f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:69:F8:89:FB:3D:82:B5:7E:5F:76:D2:37:EC:F6:D5:E5:00:A1:5A
            X509v3 Authority Key Identifier:
                keyid:68:A7:C2:C8:4F:FA:49:34:CF:0F:73:EF:1A:1A:1A:33:78:73:18:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aKfCyE_6STTPD3PvGhoaM3hzGCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fe455d-f6ce-436c-8327-db6ddb4a44e5/1/aKfCyE_6STTPD3PvGhoaM3hzGCY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fe455d-f6ce-436c-8327-db6ddb4a44e5/1/aKfCyE_6STTPD3PvGhoaM3hzGCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:f6:10:ea:fd:e3:37:8c:fc:39:e8:b3:a0:b0:32:0d:a9:e7:
         7f:c8:21:8d:01:cb:cd:01:b1:03:67:61:72:29:87:04:24:5b:
         86:78:d4:4b:d5:a1:e0:ee:4c:88:f0:2c:78:98:ce:f7:c7:64:
         7e:42:1b:3f:81:5a:74:a8:96:e8:c4:36:39:9a:cb:c9:32:c5:
         58:1b:ff:7c:3d:d7:1b:6b:3d:05:7a:bc:50:2b:96:3d:f1:83:
         e8:05:f1:ff:4f:53:3f:bb:38:33:03:06:77:ca:e5:42:15:e5:
         85:de:b8:16:9f:60:0c:d3:4e:8f:b3:d5:62:ce:59:96:49:20:
         19:2f:17:97:26:b1:ba:b9:70:46:10:06:55:b5:fd:31:43:52:
         23:8b:cd:1f:68:ce:15:a2:b6:5d:06:ea:c4:78:24:36:4e:15:
         59:f0:12:16:d4:c5:2a:d0:de:ca:0d:82:e3:88:fd:7f:4a:c4:
         82:49:0f:5f:a9:b5:bf:ae:b6:e2:1c:0a:53:b9:d9:ee:cf:69:
         6d:78:52:51:0b:37:ec:19:ef:cb:59:32:26:29:19:08:8e:4b:
         b1:80:a6:11:07:d1:13:e3:de:75:18:fc:31:66:51:8e:d9:c0:
         49:03:5a:5a:20:6b:f4:6d:9e:f1:ed:89:d8:8b:c0:ed:60:73:
         e3:23:7f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:33:11 2026 by rpki-client