Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
File:                     axBPHkq67B7_gPJixi-WwlQ4yOE.mft (raw, json)
Hash identifier:          j5guOVDjNDDcweNNnUhfQ3apQQZOIFtH7ikb0Fu5F10=
Subject key identifier:   77:91:1F:F1:4B:C5:20:B6:AC:F2:8F:9E:AD:02:1D:E8:53:AF:CE:F5
Authority key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
Certificate issuer:       /CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Certificate serial:       01A0B49EE5EBD05E1DF1834B411484DF0DC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
Manifest number:          12C4
Signing time:             Fri 18 Sep 2026 13:05:07 +0000
Manifest this update:     Fri 18 Sep 2026 13:05:07 +0000
Manifest next update:     Sat 19 Sep 2026 13:05:07 +0000
Files and hashes:         1: 0H1fWdcgbIVkDrtIX60zLRSDmfk.asa (hash: m+WvR7qD+ymh6yt2x5AGaH23y1MbYzEZgWfbmCnzaQw=)
                          2: 5tQrTl4ImzQdNGlHAgT-IuX1vY8.roa (hash: GxBCnowP4ZtGzuuaVaDDg4RHg88+PQm56YQPyTz22qs=)
                          3: AVqIsvmEjZSiT_RRCLhHWqXRj8E.roa (hash: bLqmsGK7/2ZHL3HZwqfJ+vP8kGQVsSwKiV5n2kXAj5s=)
                          4: BZcnD-tmErBEiB7QcJrqQ989pOo.roa (hash: cUC9ZHrkqmNKaBOeR4eTnUCwVEP+4beM1Gn8IQ8IXNI=)
                          5: DT0PQm3KFAOHbbVUZ17DY8HvvFE.asa (hash: BarfhuAuoCRLDCgvqKuWLXb1LEEPOJ8pteMWw1ACFFU=)
                          6: KXKwXtnGwfLE6ooLIlB7sW-zWiA.roa (hash: 868y7iV5bE2GlzbPUF2PQ4zfQ8eO7CYYKpck7+qNj00=)
                          7: NcRF1eojyuc4J2Qe4PiTr1CaXTk.roa (hash: aViSA/HDXPYiP0oiBue47ud2Jb/yeLRTWtG0amjMQnw=)
                          8: Q6nx47WK-TIPeGJfoAcbD3_cmuA.asa (hash: YsbIxuDdlulN9sTEsjlvvtUQ0EWP8MmMnGxaWWzj4YU=)
                          9: Xe0J2fy4oVg3QXL7klruWZtuHvw.roa (hash: YXUiQPNKd3l5WjbM/fjv6lhaHwQbFJ0v83be14OVndw=)
                          10: ZOnph3q2WtDrgVbQvKechjGXvdo.roa (hash: mqSglzZHwuU9kYmNDMKPxX1vq6m9qHBB/8zS+STdMB4=)
                          11: Z_zuqvMRPvpefT3OEi-qCPipGXo.roa (hash: 7LwZjvv6rQTVsN12z5AMTE+LxA5Zh9KFfsjLkX5+wWY=)
                          12: axBPHkq67B7_gPJixi-WwlQ4yOE.crl (hash: xGH08rhYyaEbU9UJpErzZPa/r3uWIiDswWxYZATuQBY=)
                          13: gFnSYExosWORufIRtLpKLOHGnuw.roa (hash: 3yvPJUqSbLs/JITNOHoGmZnrzFIDl+3H/JB4K+j8KTA=)
                          14: jEnUatV1_SEhSjb3lDhT-OJx_y4.roa (hash: aVu8qJMaxfh7cIHUjfKGtBtrMLn+MJI16CoDMroLUGY=)
                          15: q0WTkteUjice7A7HxM9H09oezsI.roa (hash: lfgBegUoN1X7J69hWCSBOlVFuWF7yV6CuCLUK0Dd7TA=)
                          16: qM93UF_5cbChcOUVot8OLZ6-sP8.roa (hash: yvZ4rCsGHbSUv2j2btQgGFEN/qR7LuIWsmgIOXsHjNM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Sep 2026 08:15:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:b4:9e:e5:eb:d0:5e:1d:f1:83:4b:41:14:84:df:0d:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
        Validity
            Not Before: Sep 18 13:05:07 2026 GMT
            Not After : Sep 19 13:05:07 2026 GMT
        Subject: CN=77911ff14bc520b6acf28f9ead021de853afcef5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a2:05:45:19:a0:3a:76:cf:45:54:93:a1:39:
                    22:47:b1:78:6b:ad:44:68:e9:3f:86:2e:1d:27:39:
                    c5:27:76:78:4c:c0:0d:cd:2a:6a:48:7c:98:1c:f8:
                    98:fe:eb:f2:87:cc:3f:af:c5:7d:e7:54:34:9b:30:
                    3e:c7:33:cc:56:66:68:97:2a:39:32:0c:54:60:aa:
                    f8:ea:4e:b2:4f:87:15:94:e5:69:f0:b0:54:05:a8:
                    e9:19:96:fd:04:15:95:40:a6:8b:ef:2a:2b:78:22:
                    52:c4:f5:c7:15:60:06:e3:a6:51:48:a4:b3:66:45:
                    9d:ea:2a:79:4b:7e:84:36:4d:25:48:1e:ac:de:59:
                    9a:7b:dd:92:e4:01:6f:ce:2e:b9:fc:f2:a3:f7:5b:
                    8a:62:74:a4:50:7e:c4:68:50:b9:8a:14:1c:ac:36:
                    ad:58:24:67:e4:f5:cb:1d:6b:f1:19:da:c3:71:67:
                    e8:a0:a9:93:dd:0f:41:dd:30:09:6f:e0:fd:db:b0:
                    24:20:15:92:35:56:51:45:8a:06:3f:44:0e:f8:d2:
                    f4:42:2c:d1:62:c5:90:cc:e8:77:6e:ae:54:62:48:
                    9f:18:f1:4d:39:52:67:44:5a:a9:39:66:a1:c2:10:
                    6e:90:47:8f:90:c2:42:9e:c6:28:e3:8c:b5:f1:94:
                    31:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:91:1F:F1:4B:C5:20:B6:AC:F2:8F:9E:AD:02:1D:E8:53:AF:CE:F5
            X509v3 Authority Key Identifier:
                keyid:6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:6b:d3:f0:81:8a:ff:79:9f:eb:41:b4:b5:d9:7b:6a:d5:25:
         80:31:83:6f:60:4f:ce:b1:f0:2b:c9:fa:8e:5b:50:0e:45:d7:
         77:a7:c4:08:c4:25:ff:a4:85:93:88:0a:46:8e:70:22:c7:d8:
         0e:c5:00:7c:89:1f:ac:e6:d3:db:dc:ca:6e:0f:1f:ac:95:3c:
         31:e3:94:72:c7:59:52:20:d2:42:d0:7f:a0:44:30:76:24:67:
         2f:eb:9d:79:3d:64:27:c9:71:8c:5f:3d:f0:50:76:96:7c:98:
         9f:ce:6b:33:73:95:d7:17:59:a8:e6:0c:2b:6c:7e:f3:70:5f:
         63:1f:ca:7e:b4:7f:6d:dc:53:e9:53:59:5c:08:fb:04:00:0f:
         0f:1f:77:e9:22:b8:cc:73:7e:f4:93:c4:31:a7:ca:87:77:70:
         f6:73:41:22:df:8a:b8:6c:53:a3:96:19:ff:20:df:56:09:db:
         a1:1c:3c:e1:3c:e4:e3:6e:9e:57:3f:6e:49:e1:ec:d0:ec:f0:
         44:af:d8:0e:65:11:85:fd:8d:5a:c8:6b:61:52:7f:8a:d1:f3:
         15:4c:a6:33:21:8d:cf:99:89:a1:d6:9d:cf:a9:a8:3c:54:d8:
         4f:3a:2d:71:e0:68:df:92:6c:a7:d7:9c:62:9f:91:c7:0b:ec:
         18:6c:f4:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 19:12:59 2026 by rpki-client