Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.mft
File:                     B52QU3F6FqdsEK6Dj1YlBVvgSB8.mft (raw, json)
Hash identifier:          pSVIWSpqj1YtV4jPVYQLk2DDecKSphliWcqtsabD4UU=
Subject key identifier:   94:48:C3:EE:B7:A0:17:08:B7:D5:77:31:A3:9A:67:49:E4:DD:8F:0A
Authority key identifier: 07:9D:90:53:71:7A:16:A7:6C:10:AE:83:8F:56:25:05:5B:E0:48:1F
Certificate issuer:       /CN=079d9053717a16a76c10ae838f5625055be0481f
Certificate serial:       01A0C4B2EE6687EDE5251A704CD08E9A358C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B52QU3F6FqdsEK6Dj1YlBVvgSB8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.mft
Manifest number:          16D6
Signing time:             Mon 21 Sep 2026 16:00:55 +0000
Manifest this update:     Mon 21 Sep 2026 16:00:55 +0000
Manifest next update:     Tue 22 Sep 2026 16:00:55 +0000
Files and hashes:         1: B52QU3F6FqdsEK6Dj1YlBVvgSB8.crl (hash: IVJFeY1l2O0xNux6UTl1lep7Sts1nHsRTTl58avNRGo=)
                          2: UCT9k6BaPPeSMXxJ43Eo6nZzYW0.roa (hash: H/J8BuCj54OjW0xk7YjG+ivFyPL962N+uW8FPOndTZI=)
                          3: _TmmkOapg5NWp5skKiNnYl4USlg.roa (hash: Ulpzhuvm7D4wY1P9Md05o4W8SIvbcVV+X0rM6EDxDjc=)
                          4: ryiFWbpMuqXbHhTaiUR9Bmksn3I.roa (hash: 4enRDEIE99ZnVUOrH1uVQZLMyVdi+VhTW5RGUgkPXEs=)
                          5: szJDTDjk11lPCTowxUuTkr1LOjA.roa (hash: tZ3E5yp9ifwL77hdiUkOobqFo6CYXkARUapRpbadEZc=)
                          6: tVIvfnxeNd5Q4fCCoef2VPaercM.roa (hash: UsZ5qTmb76xuEbD3sjS7Uzqq6fgKmtSM905Jk8/9DNA=)
                          7: wRtbNPKwzn29lLHL-XgfTc7v1-E.roa (hash: HKr7T3FnocuYvThL/hQV2CDARcO253MaFTxSFktB4b8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B52QU3F6FqdsEK6Dj1YlBVvgSB8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c4:b2:ee:66:87:ed:e5:25:1a:70:4c:d0:8e:9a:35:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=079d9053717a16a76c10ae838f5625055be0481f
        Validity
            Not Before: Sep 21 16:00:55 2026 GMT
            Not After : Sep 22 16:00:55 2026 GMT
        Subject: CN=9448c3eeb7a01708b7d57731a39a6749e4dd8f0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:44:5d:3c:55:f6:84:25:3d:db:66:30:32:ff:
                    f8:3a:f4:fb:19:61:e0:02:50:3b:84:e1:5f:76:72:
                    19:aa:40:12:bb:6a:33:b2:96:63:1c:50:d6:d6:81:
                    38:c1:91:81:41:eb:53:30:d1:6f:1e:f2:9c:41:30:
                    e0:04:f6:dc:b3:4f:c2:25:47:a0:3d:0e:5e:6f:a8:
                    b7:8b:e7:fa:a0:97:93:e5:d5:b4:5c:4a:47:53:34:
                    d2:75:14:c0:22:09:73:bf:39:6a:61:03:43:a4:be:
                    8c:fe:f7:6f:fc:d1:b3:51:f7:97:26:42:31:19:f4:
                    21:8e:44:25:1c:93:2f:bb:e3:6a:bb:3a:49:cf:0d:
                    35:67:53:94:2c:41:88:fd:c1:b5:e8:88:b4:3e:be:
                    cb:5a:fa:27:73:69:94:f9:05:43:a7:26:77:49:6c:
                    eb:56:02:f8:03:78:a2:8d:36:d9:8a:32:14:63:90:
                    cf:6c:e9:fd:75:bc:4d:7c:51:54:02:d3:3d:d4:6c:
                    92:32:b7:56:dd:8f:f6:5a:77:a6:94:1e:2e:d2:e1:
                    8d:b8:6a:cc:c5:c4:2d:fb:26:83:69:3f:f2:8d:d0:
                    54:9b:53:2e:a7:bb:6e:e3:bb:f7:68:7b:2a:6e:71:
                    de:37:f6:0d:bb:df:d6:8a:ed:84:38:06:2b:f4:ab:
                    ff:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:48:C3:EE:B7:A0:17:08:B7:D5:77:31:A3:9A:67:49:E4:DD:8F:0A
            X509v3 Authority Key Identifier:
                keyid:07:9D:90:53:71:7A:16:A7:6C:10:AE:83:8F:56:25:05:5B:E0:48:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B52QU3F6FqdsEK6Dj1YlBVvgSB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:c4:f8:42:2e:a6:17:9a:5a:22:c7:c4:85:da:61:e7:18:1f:
         4f:8b:7c:ec:46:fa:60:23:e3:d9:fe:3e:7e:28:fa:40:01:80:
         ec:b1:9f:51:90:18:59:7f:7a:3f:f4:8b:17:c3:9f:a1:36:4b:
         b4:d4:51:7a:a4:75:c6:6d:e5:4c:8e:5b:63:96:b0:44:73:79:
         1a:01:e4:3e:38:26:c5:f8:76:09:b3:ce:ea:f7:00:26:05:23:
         02:8b:dc:f9:c2:6d:13:20:24:e5:d4:54:9a:f1:c7:ac:82:88:
         29:4e:db:b6:b6:7e:43:7f:51:4d:0e:62:3b:7b:19:ab:1f:17:
         d7:3c:8b:10:e6:38:2b:8d:4e:3d:d5:c8:86:89:d8:2d:81:aa:
         6f:95:50:72:06:0a:6f:85:2c:e0:34:3e:70:4f:63:e9:a3:5c:
         ed:b4:02:a4:b7:fd:40:8d:5b:5d:aa:ec:fa:1e:2d:41:c1:ea:
         aa:25:d8:35:6c:fc:ff:69:6b:86:d4:a7:09:1e:e5:a7:03:26:
         3f:35:89:d1:d3:14:bf:5b:16:67:e8:39:37:b6:47:1c:6a:91:
         e0:d0:cd:be:0b:a6:3b:95:2b:cc:d6:cc:bf:3a:7a:f1:c3:25:
         3a:b0:4f:59:c5:38:ca:ba:77:d8:af:44:25:09:94:f9:cb:79:
         a2:5a:10:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:24:32 2026 by rpki-client