Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/e38fc5-13a9-4906-b55e-79453adff1bd/1/m1bbbkurl01Zvy7tECKgLu49N64.mft
File:                     m1bbbkurl01Zvy7tECKgLu49N64.mft (raw, json)
Hash identifier:          LolP9VEi23rXozN465x7kcMnIFDi389Ave1D7MVEx90=
Subject key identifier:   B2:F5:46:92:D2:95:08:4D:58:E9:F7:5F:8D:36:79:A2:25:AE:53:65
Authority key identifier: 9B:56:DB:6E:4B:AB:97:4D:59:BF:2E:ED:10:22:A0:2E:EE:3D:37:AE
Certificate issuer:       /CN=9b56db6e4bab974d59bf2eed1022a02eee3d37ae
Certificate serial:       01A0E73F84E5366EA9BF5929C8FFFE68D5A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m1bbbkurl01Zvy7tECKgLu49N64.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/e38fc5-13a9-4906-b55e-79453adff1bd/1/m1bbbkurl01Zvy7tECKgLu49N64.mft
Manifest number:          F1
Signing time:             Mon 28 Sep 2026 09:01:34 +0000
Manifest this update:     Mon 28 Sep 2026 09:01:34 +0000
Manifest next update:     Tue 29 Sep 2026 09:01:34 +0000
Files and hashes:         1: MhgYeI3nHsQ7EnEqBs3ix3URXK4.asa (hash: OMQ4Jfqr1uKSBnWc8VFQoJ2KmKvXwz+ZT7n6PnlnJ/k=)
                          2: m1bbbkurl01Zvy7tECKgLu49N64.crl (hash: 3aB84YTDFnM3oYtT5Pv3YkLbSWdRvZ7O5pRDvyQSKWI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/e38fc5-13a9-4906-b55e-79453adff1bd/1/m1bbbkurl01Zvy7tECKgLu49N64.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/e38fc5-13a9-4906-b55e-79453adff1bd/1/m1bbbkurl01Zvy7tECKgLu49N64.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m1bbbkurl01Zvy7tECKgLu49N64.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 08:02:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e7:3f:84:e5:36:6e:a9:bf:59:29:c8:ff:fe:68:d5:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b56db6e4bab974d59bf2eed1022a02eee3d37ae
        Validity
            Not Before: Sep 28 09:01:34 2026 GMT
            Not After : Sep 29 09:01:34 2026 GMT
        Subject: CN=b2f54692d295084d58e9f75f8d3679a225ae5365
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:73:36:ab:6c:69:3a:98:e9:72:4f:54:3e:9b:
                    c5:8c:72:89:55:b6:30:3f:dd:ce:35:ca:2c:03:48:
                    df:7d:7e:8c:26:43:b1:95:50:94:15:f4:51:cd:11:
                    d9:c2:73:ae:28:52:a4:7e:9a:e3:63:9e:f4:92:7d:
                    00:e6:95:f4:a5:ab:63:57:93:97:90:de:1e:2c:4a:
                    2a:a2:86:3f:57:85:b7:a9:0c:5c:1f:7e:55:bc:f4:
                    85:d0:31:62:7f:6e:85:49:77:1e:c4:77:7d:21:c4:
                    42:c2:bf:96:ca:08:39:86:34:e2:3b:5e:a0:3b:11:
                    07:8c:24:98:93:6a:e8:4a:4f:53:ef:02:17:c2:88:
                    5c:e6:49:d5:13:e6:65:49:38:9e:26:e3:b8:af:d8:
                    f3:2c:83:cb:d7:32:4f:e9:db:37:8c:9e:51:9c:73:
                    74:db:04:91:db:a3:db:b4:de:31:45:2a:21:04:71:
                    be:10:fb:dd:3a:c5:d5:88:68:ec:0d:d0:c2:26:fc:
                    98:7d:5b:47:b0:87:c9:ec:e0:2b:4b:c4:3d:9e:78:
                    f4:1f:ed:b6:6e:90:73:3b:74:f3:a4:f9:47:3b:84:
                    d0:9f:aa:11:91:a3:1b:40:01:04:3e:4c:da:bd:8d:
                    f3:6d:c9:64:2d:ff:db:75:59:e6:a2:2b:c4:35:2f:
                    7f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:F5:46:92:D2:95:08:4D:58:E9:F7:5F:8D:36:79:A2:25:AE:53:65
            X509v3 Authority Key Identifier:
                keyid:9B:56:DB:6E:4B:AB:97:4D:59:BF:2E:ED:10:22:A0:2E:EE:3D:37:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m1bbbkurl01Zvy7tECKgLu49N64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e38fc5-13a9-4906-b55e-79453adff1bd/1/m1bbbkurl01Zvy7tECKgLu49N64.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e38fc5-13a9-4906-b55e-79453adff1bd/1/m1bbbkurl01Zvy7tECKgLu49N64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:0f:42:2f:0c:93:95:59:8b:2d:52:3c:1e:53:24:91:63:f2:
         e0:1d:90:19:06:50:c5:8b:61:9a:6c:97:fa:2e:8d:45:0a:11:
         2c:bd:7f:48:36:48:7b:7b:06:1f:04:d7:5c:a7:f8:3a:85:48:
         d9:83:0c:2d:d5:50:b7:45:68:2f:89:a5:37:3c:ed:ec:9a:3f:
         34:17:4b:81:5d:8d:e4:94:66:e3:a2:f2:15:a7:4a:6d:f8:76:
         f1:c2:54:24:e0:f2:a3:0b:f1:76:ae:8f:d3:07:6a:b3:64:7c:
         46:9e:34:c9:49:8b:c7:c6:8d:ef:fe:68:1e:87:b2:ed:ac:e7:
         25:81:ca:80:50:9f:c4:03:31:9d:c7:cd:cf:21:61:99:48:c0:
         47:de:87:54:e1:f1:aa:9d:32:a1:16:e4:2d:be:c5:00:10:91:
         93:21:5d:63:7a:cf:1d:fd:22:fe:3d:90:99:50:d1:8a:df:c0:
         66:6b:de:94:e1:c4:49:5f:44:a7:93:b8:a0:64:8e:f0:56:b0:
         88:cf:1f:37:d1:39:2f:1e:7c:31:72:9f:a4:66:d5:30:aa:f3:
         24:08:0a:86:23:2a:00:17:b8:3c:30:68:8a:a2:98:53:5d:71:
         61:3c:1f:a1:db:1e:5b:33:77:9d:22:d4:33:1c:16:6d:1b:e9:
         37:93:61:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 14:10:17 2026 by rpki-client