Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft
File:                     a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft (raw, json)
Hash identifier:          7cs5KXL6rVa7I1xauxAO+wKkCaEDPm5MWiUd0v3U0Ms=
Subject key identifier:   11:72:79:AB:FC:0B:04:28:1B:5C:58:97:73:C1:8E:A5:05:48:14:40
Authority key identifier: 6B:C3:E6:CB:2E:B0:2F:CC:74:2B:AF:91:AB:86:5C:9B:20:D6:48:4B
Certificate issuer:       /CN=6bc3e6cb2eb02fcc742baf91ab865c9b20d6484b
Certificate serial:       01A0C9A215ABB976FF92AA4D2B8A48F118E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft
Manifest number:          0A91
Signing time:             Tue 22 Sep 2026 15:00:37 +0000
Manifest this update:     Tue 22 Sep 2026 15:00:37 +0000
Manifest next update:     Wed 23 Sep 2026 15:00:37 +0000
Files and hashes:         1: 3gZgHbD-hrqcq_Pjyy1piMjeRhE.roa (hash: gOXLcL67YsVsuGlPynBLLbxradMX9qPaxCdbkscokfQ=)
                          2: 6WOiM9yMpAPXv_pwmuu8ZsyQa5k.roa (hash: /CJ6KkjHu5nAF395YVdpbobWPnkvJ6vEHcLgjWlrVbc=)
                          3: 6tnjb-DeIDKnhN6ciQBp6-L9xYQ.roa (hash: AO57VcUafr5lsDRoKco7xf7/YR+CAfYaivpZiseCrqY=)
                          4: X0J52EzTniQ_AWSg1-2AbO6v1Wk.roa (hash: 9v97Ev9XNoSdWC+HcarjgeTi3NzDuLNkqpn6zxqUTN8=)
                          5: a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.crl (hash: 7Kg72xcoJ6PD+VXxgtFV+B0CGATtGaOuBCYV+LqIRp0=)
                          6: t0K4HGcM7SYmbee1zvHwQlP_JGY.roa (hash: AGbfQJGLAl/VV+53Q0j0FQio/VcRd8jWfQfbs9NOEoY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c9:a2:15:ab:b9:76:ff:92:aa:4d:2b:8a:48:f1:18:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bc3e6cb2eb02fcc742baf91ab865c9b20d6484b
        Validity
            Not Before: Sep 22 15:00:37 2026 GMT
            Not After : Sep 23 15:00:37 2026 GMT
        Subject: CN=117279abfc0b04281b5c589773c18ea505481440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0d:38:b5:b8:45:ff:55:6f:e3:a2:73:7c:54:
                    7e:48:9f:38:14:b1:33:a0:21:d7:2e:45:4f:c0:4e:
                    87:7b:d0:d0:e4:59:ce:e8:f2:ea:a0:62:fe:67:e9:
                    e3:e0:c7:63:d9:0c:d8:b7:8c:8f:53:20:61:7f:89:
                    7f:65:6f:ee:ca:d0:57:a0:1e:8c:b4:da:48:24:24:
                    65:82:f2:a6:61:e1:26:a5:6c:11:a6:4e:aa:19:e7:
                    77:37:87:7b:32:43:13:8a:6e:ca:89:2b:72:35:24:
                    86:72:c1:d4:3b:1b:6a:9e:19:09:4f:f1:f6:95:dd:
                    0d:8d:7c:66:47:bd:02:04:b4:8b:2a:36:5e:db:32:
                    56:c6:3d:86:b2:c8:74:f2:89:9d:f6:ce:27:99:be:
                    be:fd:ca:9b:58:d4:5a:d0:83:26:c5:aa:f6:bf:a4:
                    4f:24:41:9d:61:62:e0:9b:c3:9f:68:56:12:92:6c:
                    22:9c:84:03:03:ea:ed:91:d9:8e:6d:ff:85:90:52:
                    0d:19:89:82:dc:7b:69:ef:03:3d:74:ea:d3:de:32:
                    91:c7:86:f3:5d:b0:33:56:73:0c:0b:67:67:37:1e:
                    83:58:e4:2c:db:85:a1:d6:b0:24:f7:a4:b5:d0:10:
                    62:fb:9d:af:be:e0:de:f7:cd:72:cf:b7:fc:0c:de:
                    ac:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:72:79:AB:FC:0B:04:28:1B:5C:58:97:73:C1:8E:A5:05:48:14:40
            X509v3 Authority Key Identifier:
                keyid:6B:C3:E6:CB:2E:B0:2F:CC:74:2B:AF:91:AB:86:5C:9B:20:D6:48:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:b7:4f:16:68:74:68:89:28:20:0c:53:b2:22:0a:3e:ba:6f:
         60:ac:8b:33:43:3c:db:8e:00:ec:85:d7:42:44:ac:49:54:fd:
         1f:ac:12:ed:b8:36:23:08:12:8b:a6:3f:be:e3:1a:c2:35:1e:
         d4:54:1d:e2:56:22:4b:73:d1:a3:e7:40:95:74:e5:15:0c:85:
         16:89:17:5a:37:8e:61:ff:38:50:61:21:5b:1e:03:6c:41:ff:
         ab:2e:fe:55:00:ce:28:55:ae:27:18:6d:52:86:47:30:25:a9:
         75:5b:12:69:6a:49:e5:4e:99:df:1c:27:55:79:3c:ac:18:e8:
         a5:29:61:f3:16:8b:24:0c:1a:9f:3a:93:a8:ba:f1:98:14:85:
         f2:d7:67:a5:15:50:30:d6:bd:bd:2c:4e:06:d4:97:47:c1:d4:
         59:91:25:89:2c:70:a8:b3:a2:6a:ca:32:63:aa:70:81:1c:d8:
         d1:ff:4d:9b:4a:ce:47:c3:2e:08:c7:88:88:de:4d:d4:11:e1:
         06:85:0b:3d:f9:44:70:e8:9d:52:7a:1a:bb:ed:b9:eb:a9:9f:
         6b:93:cc:fa:1c:20:ce:ee:53:50:ed:75:4b:6a:bd:2c:bd:52:
         23:9b:51:f7:c6:47:16:2c:6d:e0:e3:f7:11:b0:9e:87:2b:54:
         f7:32:ef:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:42:11 2026 by rpki-client