Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.mft
File:                     8uKBD0mzb91kHDJr0d5OQtEosEY.mft (raw, json)
Hash identifier:          Csfbg7NS/ZoahgZ35Kh1H9zKB+UBLIwn5RRi3e3zLGQ=
Subject key identifier:   CB:AA:16:22:93:42:44:85:B6:F9:AE:13:75:5B:68:3D:D2:2E:2A:DB
Authority key identifier: F2:E2:81:0F:49:B3:6F:DD:64:1C:32:6B:D1:DE:4E:42:D1:28:B0:46
Certificate issuer:       /CN=f2e2810f49b36fdd641c326bd1de4e42d128b046
Certificate serial:       01A0C6A1169034D8059D44B492DD6AF7778E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.mft
Manifest number:          1A7B
Signing time:             Tue 22 Sep 2026 01:00:40 +0000
Manifest this update:     Tue 22 Sep 2026 01:00:40 +0000
Manifest next update:     Wed 23 Sep 2026 01:00:40 +0000
Files and hashes:         1: 3xGhx8NZgWxLSKCDfcPFLQ8-OsI.roa (hash: nrPCTtkuQDIcy3WjV2PDeyqXdxGsNrOVS6dTe/yokSw=)
                          2: 8uKBD0mzb91kHDJr0d5OQtEosEY.crl (hash: YOYj6t6MtJcv46I967+4kW3Gcw1TbEVC75aCLavR1Yc=)
                          3: M9uNW_AjvSRWP9leh-go_2dj3js.roa (hash: ujQsM5g8Rg+mlV0fU5GktfX3ayjJW/2OIfzqCO9iobo=)
                          4: X7VKKNvOYZTTFDZ8BCWjmPebtX8.roa (hash: L/kFEnNplgovPacWJl2tFaydAgsY/9Zn113PwxIDUis=)
                          5: ZH-fOKhfhXtTvq5cNeuUVWkcFIQ.roa (hash: 2xvhce+amLHD9b2VUMk2z7GO/hZOLwWwWRJLNXmF+4g=)
                          6: w7bLCCx1wCzEhIJTLJSgrAAyI94.roa (hash: xKotcxgu+SFt13dTwTupn3pf3OXdH+smODfsZIVeV0A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 01:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c6:a1:16:90:34:d8:05:9d:44:b4:92:dd:6a:f7:77:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2e2810f49b36fdd641c326bd1de4e42d128b046
        Validity
            Not Before: Sep 22 01:00:40 2026 GMT
            Not After : Sep 23 01:00:40 2026 GMT
        Subject: CN=cbaa162293424485b6f9ae13755b683dd22e2adb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f1:20:14:83:ae:0f:8e:8b:4f:49:6c:d2:1c:
                    5f:e2:6c:02:0d:6e:a0:e0:75:3d:7b:b7:18:8b:e9:
                    4d:d7:5d:a3:f3:ec:7b:4a:49:f6:95:88:28:1b:20:
                    dc:b5:bc:68:e9:56:07:ca:6c:c0:60:d8:7c:f8:f3:
                    c4:ff:a5:7a:ce:61:95:de:43:15:94:84:8e:56:d1:
                    3b:c9:67:b1:50:0d:b4:9f:1d:3e:6d:32:ae:28:1c:
                    b2:43:2b:a2:07:46:23:18:75:27:7a:d6:66:98:87:
                    46:a1:c5:1d:11:b1:11:cc:63:9e:dd:b3:79:a6:7d:
                    00:e5:70:7c:c4:24:9d:0c:08:b9:15:c8:45:ba:f1:
                    5f:f4:65:af:8e:85:20:5a:2f:e1:b3:01:6b:02:42:
                    2b:05:55:2f:cb:71:3b:00:ec:1f:3f:2e:e8:ca:77:
                    f2:e2:81:ab:19:8d:7f:74:be:54:4f:d8:a2:7e:0c:
                    07:d6:fe:4f:d5:f5:d7:64:a7:8a:f5:c3:85:d5:25:
                    3e:89:01:23:7b:a3:ac:77:a2:bf:c8:80:3c:17:e9:
                    d0:4b:4c:10:a5:49:3f:6c:f7:8b:97:64:8a:03:f4:
                    d9:58:41:3e:45:c0:ab:f3:19:4f:32:ac:55:f9:a3:
                    27:29:99:f3:5c:8e:6d:dd:1e:bf:3a:cc:2c:18:88:
                    73:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:AA:16:22:93:42:44:85:B6:F9:AE:13:75:5B:68:3D:D2:2E:2A:DB
            X509v3 Authority Key Identifier:
                keyid:F2:E2:81:0F:49:B3:6F:DD:64:1C:32:6B:D1:DE:4E:42:D1:28:B0:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:bc:55:ea:0e:6f:e6:d3:d8:29:3c:49:ee:63:6f:a3:d4:70:
         aa:64:7f:58:5a:5e:64:40:a9:2b:4a:0f:35:49:1d:63:55:cd:
         67:2c:67:5d:f8:74:85:6a:d6:45:c2:04:1b:3a:12:c7:df:66:
         8a:fe:58:17:34:2f:d1:4c:85:91:dc:02:2f:9c:bb:cf:e4:c2:
         46:06:fd:0c:de:21:8c:56:40:f5:0e:20:c1:b0:0f:72:f1:d2:
         b0:d0:ea:cc:86:3a:12:d1:a4:58:64:d5:2d:d8:76:6c:8c:20:
         24:ce:78:5d:94:3c:36:8b:6e:d9:2c:7a:80:95:26:5f:3e:39:
         10:b8:cd:80:2c:b0:c1:8a:09:91:19:79:c7:61:d5:31:9b:79:
         50:e1:74:8e:7f:85:b3:1c:10:18:87:ec:c5:f0:fe:7f:8e:16:
         0d:19:e3:9f:50:a2:d2:eb:c6:3a:3a:7b:3b:65:92:85:e3:a5:
         5a:7b:62:d2:e9:7d:88:b6:97:66:22:c4:05:38:75:7a:05:ad:
         f0:74:2d:00:a6:22:cc:c8:3d:0c:27:82:5f:84:d2:91:49:4d:
         9c:27:18:ee:48:48:08:69:99:c6:2a:22:e3:80:f5:16:62:c0:
         f5:62:4a:69:e7:c6:a6:7f:62:5d:f3:94:45:3a:90:96:ed:0f:
         1b:74:45:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:04:40 2026 by rpki-client