Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft
File:                     bYAjo4F9UCFR-9BIRKfDw17pm0M.mft (raw, json)
Hash identifier:          sDJRnhRrqUiVcxbYgr+1ROkwWk5QYWMp0H2NF10xyDM=
Subject key identifier:   6C:06:5C:2B:4D:1E:30:A1:74:81:FE:1B:32:8C:C9:A8:84:92:A4:C5
Authority key identifier: 6D:80:23:A3:81:7D:50:21:51:FB:D0:48:44:A7:C3:C3:5E:E9:9B:43
Certificate issuer:       /CN=6d8023a3817d502151fbd04844a7c3c35ee99b43
Certificate serial:       01A0C70ED429689AC787B33F05E0C39266C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bYAjo4F9UCFR-9BIRKfDw17pm0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft
Manifest number:          15CA
Signing time:             Tue 22 Sep 2026 03:00:32 +0000
Manifest this update:     Tue 22 Sep 2026 03:00:32 +0000
Manifest next update:     Wed 23 Sep 2026 03:00:32 +0000
Files and hashes:         1: BihTx85T_ESHb2zFBIoBZsH3gQg.roa (hash: /c4yJ2wjcspqKTfyrW9dw2FpqsUdzBSrrjQh7X8q2sc=)
                          2: WY-lTtSR4lgUnNhXebRStC-pRhw.roa (hash: /NGhP1km+JC9FCjg02M4Qh5LmgoXvpkQB9VUdDyzAsA=)
                          3: bYAjo4F9UCFR-9BIRKfDw17pm0M.crl (hash: xv6s51D9zEk00VtaFnQhdOo52lZ2ZqGNfr5lMP/GQ2w=)
                          4: hwijRhZ95zu2fzBu0boOesOms6U.roa (hash: HDiWzBkayEcGgyJWBbNXaqDrPFIhI/bMMXg8al08Sh8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bYAjo4F9UCFR-9BIRKfDw17pm0M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 19:45:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c7:0e:d4:29:68:9a:c7:87:b3:3f:05:e0:c3:92:66:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d8023a3817d502151fbd04844a7c3c35ee99b43
        Validity
            Not Before: Sep 22 03:00:32 2026 GMT
            Not After : Sep 23 03:00:32 2026 GMT
        Subject: CN=6c065c2b4d1e30a17481fe1b328cc9a88492a4c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:8c:65:d4:2b:f0:b4:05:47:eb:17:73:ce:93:
                    69:0f:84:de:79:69:3e:d4:21:49:25:a7:00:19:5f:
                    64:01:bb:fb:54:a2:8d:a6:e5:ca:97:12:73:e8:f1:
                    90:28:cc:bf:d9:94:93:25:00:a2:03:7e:0f:38:a3:
                    36:ad:05:c5:77:95:f5:fd:8a:dd:99:7c:f5:a9:b0:
                    cf:40:a4:59:c2:56:24:56:38:15:51:0a:c4:98:d3:
                    b0:36:cb:47:4d:2a:92:39:1d:1d:4d:f7:2e:98:87:
                    86:9f:74:1f:2c:ee:ab:55:eb:dd:54:6c:cf:68:e3:
                    11:b4:07:3b:0d:89:97:d7:18:1b:ef:15:a6:31:5c:
                    86:fc:6c:5b:ec:d7:c6:64:3a:4a:1e:8d:b5:7d:b8:
                    de:d7:e2:2f:19:1c:8e:9d:16:01:d3:02:3a:63:9f:
                    80:ab:43:d7:0d:f2:b4:ad:73:65:55:d9:84:aa:b5:
                    38:7e:1b:11:8f:7c:f6:61:76:ba:f7:a1:d2:af:5f:
                    69:ff:76:b5:20:f9:12:bf:3b:65:aa:da:bf:89:b1:
                    3a:91:41:04:cd:aa:5c:95:2c:d4:d6:8d:a2:e5:bd:
                    a0:b3:29:14:db:61:a5:53:1a:37:a5:14:9d:58:3b:
                    07:31:ad:7a:9f:b5:20:ee:74:49:86:d2:c6:ef:fa:
                    f0:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:06:5C:2B:4D:1E:30:A1:74:81:FE:1B:32:8C:C9:A8:84:92:A4:C5
            X509v3 Authority Key Identifier:
                keyid:6D:80:23:A3:81:7D:50:21:51:FB:D0:48:44:A7:C3:C3:5E:E9:9B:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYAjo4F9UCFR-9BIRKfDw17pm0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:a4:7d:48:73:3c:5f:71:2b:2c:ab:b3:33:24:ff:43:bb:77:
         37:d7:62:40:62:be:47:b4:2b:42:12:9d:14:1e:4d:8b:ca:58:
         a6:cc:bf:cd:9d:12:d3:43:6e:25:eb:96:4f:a9:3c:c7:61:53:
         f7:31:57:3a:6d:88:84:64:e5:73:ea:f1:25:11:45:71:d7:03:
         dd:5b:e2:08:a8:77:be:c1:e6:d8:b3:18:5c:e7:5e:b7:fa:1d:
         8b:98:3a:96:5e:64:c6:71:f8:ac:1b:b4:ea:61:d8:a5:50:43:
         1e:f1:0e:56:b9:a7:42:f6:6b:52:e1:18:0f:a2:15:b4:de:0a:
         56:2a:d0:b8:0e:94:4c:c4:46:5f:92:90:df:83:cb:f8:d0:2c:
         68:ab:a3:a7:15:32:e9:a9:0c:b4:8f:1d:d2:e6:88:ca:b4:b7:
         58:31:62:c5:ee:cd:15:a8:56:4c:f6:01:98:b9:71:ea:87:2b:
         d8:42:ee:ee:f9:5f:0c:d8:31:3e:ce:f5:dd:c0:29:af:d1:3f:
         65:06:92:3e:75:5c:d0:10:b9:92:fb:68:77:8b:1f:87:71:78:
         18:34:10:ec:c4:00:9d:b8:c4:63:66:56:d1:14:bd:4a:6c:26:
         fa:59:d8:a0:e8:a6:c7:15:ee:88:e7:f8:dd:ed:fd:80:8c:b5:
         ba:13:5e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:23:34 2026 by rpki-client