Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.mft
File:                     dThqb64eVfV2pAW9dLfwjnpsRlM.mft (raw, json)
Hash identifier:          hfCCuICgwmi0qoCZWSOvLi/JplYiAQYdknx+3Lt6vj0=
Subject key identifier:   53:EE:6C:C0:54:B1:B6:76:14:2A:1C:0B:6A:97:DE:C2:C2:99:94:70
Authority key identifier: 75:38:6A:6F:AE:1E:55:F5:76:A4:05:BD:74:B7:F0:8E:7A:6C:46:53
Certificate issuer:       /CN=75386a6fae1e55f576a405bd74b7f08e7a6c4653
Certificate serial:       01A0B4D1E53F20BEABDDABFF175B95A13EE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dThqb64eVfV2pAW9dLfwjnpsRlM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.mft
Manifest number:          0D0A
Signing time:             Fri 18 Sep 2026 14:00:49 +0000
Manifest this update:     Fri 18 Sep 2026 14:00:49 +0000
Manifest next update:     Sat 19 Sep 2026 14:00:49 +0000
Files and hashes:         1: EySyBrJAYfrjCqEYxsmXvPf3H5s.roa (hash: nhjndHhWgofWmTA2EVlrwEYSs042l2huk+iYyhoh+2o=)
                          2: YjThpUKY8dmKpHgsGQ94ajjW1mw.roa (hash: mU028HajfQlA+sa9l/YSlDKUMFBYx7IaDAclqqbnoIg=)
                          3: dThqb64eVfV2pAW9dLfwjnpsRlM.crl (hash: JwdnzdyQkG8q4n9gBvt+m2M04QF5SEXnJAXnVcLSJD8=)
                          4: iC9fUn104zY4OEHwbqWBMRhqfeY.roa (hash: G+diZWtaeUYf2mFGQ7Kk9MtmoUpwbZKTbE2sRgcMjNs=)
                          5: zyy7DFvxeNDAh4pOqGvmANgdfpY.roa (hash: hmel/U2e/Q6evOOJkJluvCudwlyZpvn4SGB/ShoJCY0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dThqb64eVfV2pAW9dLfwjnpsRlM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Sep 2026 14:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:b4:d1:e5:3f:20:be:ab:dd:ab:ff:17:5b:95:a1:3e:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75386a6fae1e55f576a405bd74b7f08e7a6c4653
        Validity
            Not Before: Sep 18 14:00:49 2026 GMT
            Not After : Sep 19 14:00:49 2026 GMT
        Subject: CN=53ee6cc054b1b676142a1c0b6a97dec2c2999470
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f8:c3:4f:fc:a3:86:09:fc:5b:a8:b5:1e:d0:
                    a7:29:d3:02:eb:43:2c:ae:e1:d3:21:bc:bb:2a:78:
                    dd:90:d8:c1:c2:79:6c:9d:21:67:8f:95:c2:26:46:
                    2d:42:56:b9:99:2d:64:a2:20:51:93:ea:d5:15:b0:
                    ab:fc:59:7e:f8:e5:01:96:03:49:02:19:7f:7a:c5:
                    df:f6:e0:30:ab:cd:7f:fd:58:5a:4e:71:6a:51:df:
                    4f:5c:13:ef:e4:3b:e4:67:31:c6:35:4a:ea:ef:37:
                    60:53:14:89:73:39:ce:2d:e6:f8:8f:b6:44:75:88:
                    3f:55:d4:d7:77:11:03:3b:ea:58:5b:fc:ac:02:ae:
                    b7:ed:dd:e3:c0:98:ec:f9:03:ee:49:87:a8:c7:31:
                    a6:b6:dc:b0:f0:95:8b:eb:8a:da:e6:61:12:b3:b1:
                    36:3a:f1:7b:dc:4b:63:4b:6d:38:b0:8e:49:9f:75:
                    8f:74:a8:c7:1b:ac:87:ef:8d:c2:89:76:33:5b:c2:
                    a5:fa:74:ea:b2:0b:23:72:e0:0c:c4:d3:25:16:26:
                    59:0f:7e:62:b5:00:0e:34:6f:f5:29:96:b1:ee:71:
                    e8:43:68:5b:78:27:7e:05:e5:54:50:b0:e3:59:13:
                    b0:86:ac:16:f4:a0:f1:ea:c8:9a:03:16:d7:62:d8:
                    fd:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:EE:6C:C0:54:B1:B6:76:14:2A:1C:0B:6A:97:DE:C2:C2:99:94:70
            X509v3 Authority Key Identifier:
                keyid:75:38:6A:6F:AE:1E:55:F5:76:A4:05:BD:74:B7:F0:8E:7A:6C:46:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dThqb64eVfV2pAW9dLfwjnpsRlM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:f1:80:55:67:f5:17:37:3b:eb:ea:df:f1:3a:c1:25:e6:a7:
         17:d4:aa:20:ea:1e:13:cc:3e:f9:ae:e6:87:d6:4a:2f:37:e7:
         b0:b8:9b:a8:2b:da:25:dc:72:bf:34:89:56:b7:a8:12:4c:d4:
         aa:ce:db:a6:66:c5:e5:2b:63:cf:dc:98:a2:13:37:56:63:10:
         ff:53:47:2c:a1:b5:cd:8e:bc:dd:75:7c:28:05:26:f5:4f:9c:
         da:9a:2e:b8:63:7f:8e:49:0a:fa:bc:37:85:c5:70:a2:f0:d9:
         7f:cf:91:26:af:e1:09:a6:de:2a:78:55:f2:a5:16:59:2a:81:
         df:30:7b:68:46:ca:42:82:17:bb:dc:38:77:ba:13:95:06:3a:
         c9:ce:e1:1a:5c:60:fe:fb:8d:b9:3d:84:d1:f2:c4:75:be:eb:
         9d:c6:f2:4d:26:f7:17:ba:6b:e0:4f:a0:c6:90:e7:45:90:71:
         06:ef:43:ab:c9:83:c3:3d:68:12:4d:a3:4a:69:4d:33:80:87:
         bd:c0:95:b5:23:0c:9c:ab:4e:91:95:3c:1c:dd:18:54:43:27:
         59:f0:bf:3a:81:93:a7:1e:10:99:f5:d3:13:32:e0:d5:5c:da:
         8a:e8:f9:52:92:dc:79:29:fb:4b:e3:36:de:83:fe:e0:73:07:
         6e:6f:08:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 20:15:19 2026 by rpki-client