Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.mft
File:                     rbuG3XbdPB97QMkWP3Ule-bQ7vU.mft (raw, json)
Hash identifier:          b4ZyXLPf7imsA1wjrNmxkFkCqMQNS7jVXXT/GQtXuAA=
Subject key identifier:   AF:A2:1A:CB:B1:05:6F:2F:22:0B:91:BA:10:C0:78:50:E4:D3:DC:94
Authority key identifier: AD:BB:86:DD:76:DD:3C:1F:7B:40:C9:16:3F:75:25:7B:E6:D0:EE:F5
Certificate issuer:       /CN=adbb86dd76dd3c1f7b40c9163f75257be6d0eef5
Certificate serial:       01A08A553C13F6448A65ABDA09FC379CFC1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rbuG3XbdPB97QMkWP3Ule-bQ7vU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.mft
Manifest number:          0AC9
Signing time:             Thu 10 Sep 2026 08:00:36 +0000
Manifest this update:     Thu 10 Sep 2026 08:00:36 +0000
Manifest next update:     Fri 11 Sep 2026 08:00:36 +0000
Files and hashes:         1: PwY0v3FgqPK7UsO8_Ta4MegSFlM.roa (hash: 3aTcfO9vdu7qWCaFGCqBM2AkObZO7u8nWp9PGSX53QM=)
                          2: rbuG3XbdPB97QMkWP3Ule-bQ7vU.crl (hash: q0Zji0yT3QUIohEtZ0cZBCipKTyjkz5E5fNmc/yFjWE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rbuG3XbdPB97QMkWP3Ule-bQ7vU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 08:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:55:3c:13:f6:44:8a:65:ab:da:09:fc:37:9c:fc:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adbb86dd76dd3c1f7b40c9163f75257be6d0eef5
        Validity
            Not Before: Sep 10 08:00:36 2026 GMT
            Not After : Sep 11 08:00:36 2026 GMT
        Subject: CN=afa21acbb1056f2f220b91ba10c07850e4d3dc94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:bb:a2:4b:a5:7f:02:d1:0e:4a:a3:1b:28:d3:
                    41:a0:f2:ab:28:ff:87:fd:50:b7:68:26:95:22:80:
                    06:5d:89:28:a3:d5:28:60:f3:9c:91:44:33:c9:03:
                    81:2e:7c:dd:ec:5e:5d:92:90:29:2d:3f:f3:13:80:
                    77:69:55:24:62:7e:02:c6:c3:9e:7c:14:39:0b:90:
                    34:ba:48:90:05:f7:5c:16:d6:4d:c9:2f:02:b4:76:
                    97:7f:50:39:a5:99:57:1b:b4:b7:11:ff:9d:ec:ad:
                    3d:91:e5:e0:73:78:e3:00:b9:b2:29:c2:c5:5a:d6:
                    3a:51:77:d0:d7:5a:02:b2:29:a4:6d:d9:d0:b4:fe:
                    b6:78:21:14:04:71:a1:6b:4d:12:2a:86:8c:45:42:
                    ee:7a:64:01:70:bb:f2:c0:1e:ed:7d:3c:c0:5a:1f:
                    e5:90:7b:58:59:cd:1f:c5:47:00:40:44:cd:ab:b8:
                    ac:5d:87:e2:3c:07:02:95:13:97:37:55:27:5f:c7:
                    46:1d:b1:4a:07:02:23:9a:02:e7:86:ee:1b:7a:b7:
                    48:db:85:5d:ab:72:4e:13:22:4d:48:f9:2f:43:6c:
                    ba:0e:d9:c6:24:6a:27:3d:ef:20:41:e9:14:44:07:
                    b3:90:1d:a0:9a:6a:79:95:3e:e6:93:d5:2f:8c:b6:
                    cf:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:A2:1A:CB:B1:05:6F:2F:22:0B:91:BA:10:C0:78:50:E4:D3:DC:94
            X509v3 Authority Key Identifier:
                keyid:AD:BB:86:DD:76:DD:3C:1F:7B:40:C9:16:3F:75:25:7B:E6:D0:EE:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rbuG3XbdPB97QMkWP3Ule-bQ7vU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:f5:9e:28:47:91:13:6d:06:21:f7:82:73:41:ca:64:9f:41:
         76:c7:37:9c:8b:51:69:83:69:b8:aa:1e:5f:71:c5:6f:19:73:
         80:34:66:17:68:54:24:c8:64:89:13:1c:02:16:16:bd:36:8a:
         97:bc:ad:52:b3:40:4e:b7:f1:9d:e6:13:5b:76:f8:0a:f3:f4:
         88:d1:30:99:05:ac:8c:57:fe:43:2f:e4:c4:f4:77:0d:7e:64:
         9f:12:cb:46:fc:43:b4:cf:9c:4e:8a:f0:fc:b3:0f:e4:7e:54:
         3a:0c:80:0b:4e:00:dc:77:9f:d6:ec:7d:b3:50:54:e9:6a:ed:
         89:55:cc:6b:d5:8d:a0:5b:40:76:7c:0e:a6:a0:6f:5c:0c:f3:
         87:cc:05:37:e1:73:dd:9a:d8:a5:ea:e3:fd:f4:e2:85:3a:0e:
         1e:30:8b:10:39:6f:b7:c3:fd:58:3e:f8:3d:51:2c:6f:a8:bb:
         a3:b9:c1:c6:69:a6:34:f6:f2:86:bc:77:ca:ee:78:07:a6:dd:
         8e:62:09:b7:91:a5:66:5b:3f:16:98:e5:5d:cd:12:60:56:09:
         ae:26:46:80:3a:48:78:e1:56:e6:7c:e1:ee:8f:0a:10:40:0b:
         18:80:15:26:b5:4b:d8:c1:5b:30:22:77:9d:44:83:e4:df:25:
         6c:fe:de:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:07:37 2026 by rpki-client