Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.mft
File:                     fm4uaWbgarJcoOHaZuHj1kJIs6E.mft (raw, json)
Hash identifier:          NAiiWW2zT2oFGpczXyuNs2lRg/tHyq966wsBK90RdZA=
Subject key identifier:   16:92:5E:42:D5:36:66:98:51:5C:B8:E9:40:D5:97:07:9B:8F:80:B3
Authority key identifier: 7E:6E:2E:69:66:E0:6A:B2:5C:A0:E1:DA:66:E1:E3:D6:42:48:B3:A1
Certificate issuer:       /CN=7e6e2e6966e06ab25ca0e1da66e1e3d64248b3a1
Certificate serial:       01A089B07831328F3EEED3E5894B5A170E97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fm4uaWbgarJcoOHaZuHj1kJIs6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.mft
Manifest number:          05D8
Signing time:             Thu 10 Sep 2026 05:00:38 +0000
Manifest this update:     Thu 10 Sep 2026 05:00:38 +0000
Manifest next update:     Fri 11 Sep 2026 05:00:38 +0000
Files and hashes:         1: SkLvZ5Dbszu5Ja6SZaZJdMQE4pc.roa (hash: 9kMmjyII7OTjyzZhQiyLV/xT9EZKQBXnIUw2KfgEoV8=)
                          2: a7dc7sTXBG9g6baqXZ5n-zFcW2U.roa (hash: NAb+NkDlWJd04gSzwtykl0+s9KlRgbw76dF4Fu82HXg=)
                          3: fm4uaWbgarJcoOHaZuHj1kJIs6E.crl (hash: 91MCcySa8NuuF61oYaa2ZLyEn42x4NIpc0JTudRvWvg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fm4uaWbgarJcoOHaZuHj1kJIs6E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 05:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:89:b0:78:31:32:8f:3e:ee:d3:e5:89:4b:5a:17:0e:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e6e2e6966e06ab25ca0e1da66e1e3d64248b3a1
        Validity
            Not Before: Sep 10 05:00:38 2026 GMT
            Not After : Sep 11 05:00:38 2026 GMT
        Subject: CN=16925e42d5366698515cb8e940d597079b8f80b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6c:7b:c9:88:3e:d0:f7:b4:83:64:82:c4:3b:
                    e8:a9:cd:17:08:1b:80:85:90:f8:91:4e:5f:27:a9:
                    7f:50:a8:59:be:38:fb:94:72:65:eb:74:98:b5:70:
                    b2:03:32:f8:97:30:51:8f:a7:cf:42:eb:8f:25:23:
                    cc:c2:c2:dc:3c:7d:7b:27:55:a8:a5:20:79:d2:17:
                    63:35:95:09:f6:38:28:05:a9:dc:f3:00:2a:68:93:
                    05:9a:dd:57:bd:aa:ea:ff:ba:a4:0a:56:13:87:58:
                    9c:14:ac:9e:50:67:e7:34:5e:28:23:ab:46:5b:7c:
                    ed:5f:3c:eb:dc:52:5e:45:e4:ae:26:b1:9c:26:25:
                    54:20:04:dc:2e:61:1f:8f:7b:31:51:5d:de:95:89:
                    ff:be:af:c9:25:6b:5e:4d:b8:4f:dc:26:b1:33:23:
                    4c:1c:ce:a5:29:b8:fb:5b:e8:37:35:e2:ad:ce:6c:
                    52:bf:9a:14:e1:7b:04:e1:a8:fc:26:17:94:40:50:
                    f5:69:f2:d5:20:8e:06:ba:be:a1:9c:27:c9:47:b5:
                    e3:4c:2b:99:32:af:95:cb:56:17:2d:35:37:ad:45:
                    99:0a:60:c0:01:b0:8e:b7:e3:d2:9e:b4:fc:60:aa:
                    68:e8:c3:19:e8:ec:ff:f2:dd:ad:a2:14:fe:d3:8b:
                    c6:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:92:5E:42:D5:36:66:98:51:5C:B8:E9:40:D5:97:07:9B:8F:80:B3
            X509v3 Authority Key Identifier:
                keyid:7E:6E:2E:69:66:E0:6A:B2:5C:A0:E1:DA:66:E1:E3:D6:42:48:B3:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fm4uaWbgarJcoOHaZuHj1kJIs6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:f8:f9:92:1a:13:69:58:e9:cd:c4:70:93:9f:25:c0:72:8d:
         6c:19:ae:1e:2a:9c:1c:b6:d5:2d:f3:55:6a:4f:9f:13:33:b6:
         d9:fb:f9:a5:eb:68:cc:ef:2b:65:2b:1b:e3:8b:74:4c:4f:b9:
         b1:a3:c4:cd:59:7a:4c:e6:72:58:00:75:99:4b:e2:4f:c6:31:
         9a:da:d1:df:15:d0:68:0d:c4:0d:e2:63:1e:bd:ff:11:17:fd:
         ec:41:45:6b:01:c0:5f:5a:8e:b8:79:d2:d5:73:ad:02:62:16:
         9b:3b:8c:25:d7:fc:2c:44:e8:8b:1a:51:69:00:e0:dd:50:29:
         14:f1:71:c0:4f:b7:e4:3c:dc:f2:a3:02:83:7f:98:5d:b5:55:
         53:ca:67:9a:94:23:4c:33:10:a2:99:85:c4:28:35:06:db:0a:
         08:b5:29:3a:02:3f:be:cf:35:ca:b7:c3:3f:46:96:5a:86:bd:
         d9:e4:28:0a:b7:5f:1b:68:dd:54:a9:0e:6f:c9:03:8f:50:2c:
         f7:38:65:af:e8:d1:b0:8b:92:00:ec:0c:64:51:e2:d9:f9:82:
         02:74:99:a1:bd:9b:d2:f1:4d:1b:b9:ae:ff:d7:8b:01:2e:54:
         cb:86:59:e3:a0:99:a7:a2:b9:51:73:fc:6f:c8:ca:65:c2:37:
         97:07:89:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:50:04 2026 by rpki-client