Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.mft
File:                     dMf46RuB_mSHMHxSJusET5I5bOo.mft (raw, json)
Hash identifier:          9oJCz3HqIxeHhaM37Il1czrqW4U9wp3DYY1CzyjhV0s=
Subject key identifier:   A2:6B:5A:EC:B5:D5:15:CC:E7:96:CB:43:32:1F:9C:96:64:46:93:B5
Authority key identifier: 74:C7:F8:E9:1B:81:FE:64:87:30:7C:52:26:EB:04:4F:92:39:6C:EA
Certificate issuer:       /CN=74c7f8e91b81fe6487307c5226eb044f92396cea
Certificate serial:       01A0C8FD88D5D0FED35C05C7C1AF9D8E366F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dMf46RuB_mSHMHxSJusET5I5bOo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.mft
Manifest number:          19FB
Signing time:             Tue 22 Sep 2026 12:00:53 +0000
Manifest this update:     Tue 22 Sep 2026 12:00:53 +0000
Manifest next update:     Wed 23 Sep 2026 12:00:53 +0000
Files and hashes:         1: ZMUCUaol16FS16uvGYc5LMi3mms.roa (hash: 1PMSBIos5jL1U1+prZU3noEZyRlQ7CsZEb3CRHH/Kmg=)
                          2: dMf46RuB_mSHMHxSJusET5I5bOo.crl (hash: yLnYMUqwEMIPS+vR3bQv/4HBeDuq/Dej5Sy/aXmuDu8=)
                          3: tTSdWCx25FCn0IY4HobZWct52gk.roa (hash: fHmHb3pigGy4UNI0P79QY+ZoI7ILqOgBSDwz0m8aRvg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dMf46RuB_mSHMHxSJusET5I5bOo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 12:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c8:fd:88:d5:d0:fe:d3:5c:05:c7:c1:af:9d:8e:36:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74c7f8e91b81fe6487307c5226eb044f92396cea
        Validity
            Not Before: Sep 22 12:00:53 2026 GMT
            Not After : Sep 23 12:00:53 2026 GMT
        Subject: CN=a26b5aecb5d515cce796cb43321f9c96644693b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6d:2d:3d:d3:74:1a:0c:6d:94:76:8e:de:89:
                    4e:e7:8a:f3:91:53:fa:48:d7:cf:39:53:93:69:43:
                    5a:3f:f2:cf:78:4a:94:6d:c7:b2:1e:fb:d3:fc:da:
                    69:27:de:f3:e8:9f:f2:b4:09:6b:4a:82:80:7a:b3:
                    10:73:fd:5b:03:cd:e8:e5:d5:d8:ac:ac:0a:87:f6:
                    6b:b6:61:90:bc:05:0e:62:7c:60:67:4b:d0:bd:aa:
                    59:f8:db:7d:de:45:75:e5:85:4a:92:0d:73:f3:a6:
                    59:21:fd:14:bd:81:43:3e:ab:9b:94:20:61:c3:5a:
                    04:71:e5:27:28:d9:31:91:ef:9f:17:7e:26:24:2a:
                    5c:76:17:78:c4:d9:69:54:41:17:6c:bc:00:43:f0:
                    e6:46:db:e8:cf:0c:23:80:18:07:bb:29:2f:22:dd:
                    a3:93:a9:ff:3a:d3:5c:0f:38:1f:5b:e7:4f:8d:48:
                    4e:7b:46:ac:d2:3f:f1:1b:91:b9:e6:b1:09:3e:40:
                    1a:cc:0a:d5:87:06:82:de:08:6d:67:1a:d8:93:c0:
                    69:94:de:5e:23:60:82:9e:29:57:cd:8d:06:cd:d9:
                    92:4a:e1:67:79:80:4a:c8:98:97:73:c1:ff:38:4b:
                    0a:3b:93:ff:3c:fc:81:0b:bd:c6:9d:c9:b7:6b:d4:
                    55:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:6B:5A:EC:B5:D5:15:CC:E7:96:CB:43:32:1F:9C:96:64:46:93:B5
            X509v3 Authority Key Identifier:
                keyid:74:C7:F8:E9:1B:81:FE:64:87:30:7C:52:26:EB:04:4F:92:39:6C:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dMf46RuB_mSHMHxSJusET5I5bOo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:26:59:a6:d4:86:c0:88:29:c3:fb:3b:dd:35:c1:a2:ea:dd:
         ed:3d:2d:7e:25:af:3a:9f:53:86:c3:74:15:a1:34:f7:dc:ac:
         c7:99:a2:78:e8:89:bd:0d:ff:34:da:a0:08:0f:05:bc:9d:50:
         ad:55:c7:5b:96:b3:4a:d2:6a:a1:89:60:42:47:9b:58:f8:96:
         87:50:0b:6f:2a:cf:62:71:95:a1:1f:c7:f4:76:fa:03:8b:9b:
         ab:60:9b:53:68:04:b4:f9:44:0a:9f:bf:6c:e5:c2:aa:d3:06:
         cc:1d:b4:8f:41:dc:0f:94:16:0e:26:f3:f3:c1:ee:84:a2:b5:
         93:60:fe:3f:23:89:16:d1:9b:39:1c:f6:78:13:77:e6:2d:6e:
         21:ed:b0:41:80:ac:33:9b:08:10:44:49:19:7f:62:ae:ac:a0:
         bc:79:70:67:ef:14:77:7d:64:96:44:ae:39:7f:29:33:8e:31:
         80:df:49:3c:d6:b3:e2:1e:74:ad:84:b8:20:fe:89:3b:30:2c:
         03:9b:e6:cc:42:a9:54:33:f4:c9:18:cd:fd:39:8e:2b:33:bf:
         9f:d5:99:78:2f:03:01:b7:1d:d1:fb:9f:be:6b:c7:75:4a:66:
         2b:90:36:75:63:6e:25:ad:50:79:3e:28:77:f9:3a:07:0c:fc:
         31:10:6b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:18:49 2026 by rpki-client