Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft
File:                     cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft (raw, json)
Hash identifier:          ccFOooR3HY+Ds/DxTdRC0juhjGNIcaDLgHJo04cmzJM=
Subject key identifier:   40:61:38:40:4D:0F:6B:5D:5A:EA:13:5C:6D:0D:C4:97:B3:B1:D8:23
Authority key identifier: 70:B1:90:D6:F8:9A:43:4C:CE:5C:B8:C0:D4:B3:8A:16:69:DE:FB:59
Certificate issuer:       /CN=70b190d6f89a434cce5cb8c0d4b38a1669defb59
Certificate serial:       01A0B463819C9193A27DACCF06801917EFE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cLGQ1viaQ0zOXLjA1LOKFmne-1k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft
Manifest number:          16AA
Signing time:             Fri 18 Sep 2026 12:00:15 +0000
Manifest this update:     Fri 18 Sep 2026 12:00:15 +0000
Manifest next update:     Sat 19 Sep 2026 12:00:15 +0000
Files and hashes:         1: ZRj2hX60XuM05a4vfNo-Pv7YmB0.roa (hash: InsWciE0zUkS0m+rNOT/nz98wQ4hGtre1IAaZoW7D1g=)
                          2: cLGQ1viaQ0zOXLjA1LOKFmne-1k.crl (hash: Pqr33zQTlLMbJTbG8qizCMJMiF2UMMtM8Zi/+fSwB5U=)
                          3: kyVhtDLZt4N5GPbTPKsk2ZaA_nU.roa (hash: VneHklbp3cXcKynFZ6D92CEpEIaz3npmX1Ls13JkQnc=)
                          4: rroLiEQZHgTeW99j0qiBIrwu5EA.roa (hash: VmsVwoTJ6PHL/2Ntb43rkgeOI/CytWooyIbWbTn6sKE=)
                          5: zI-oAN3OQtXd-BNyE0MNJ70xs6k.roa (hash: 0f6kOQBqGXGCHT/mf7JYgdcKuqyqUXY4na2v3j9WykI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cLGQ1viaQ0zOXLjA1LOKFmne-1k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Sep 2026 08:15:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:b4:63:81:9c:91:93:a2:7d:ac:cf:06:80:19:17:ef:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70b190d6f89a434cce5cb8c0d4b38a1669defb59
        Validity
            Not Before: Sep 18 12:00:15 2026 GMT
            Not After : Sep 19 12:00:15 2026 GMT
        Subject: CN=406138404d0f6b5d5aea135c6d0dc497b3b1d823
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f7:06:60:3e:9b:0b:86:3f:77:34:fa:fd:18:
                    b2:40:80:59:99:1b:9b:fe:17:57:53:76:74:0c:9d:
                    81:48:1d:cb:a7:47:3a:ae:46:9c:54:36:ed:c2:44:
                    9b:98:72:f6:4b:74:4b:e1:04:71:98:3f:b2:e0:f3:
                    21:ea:a5:0c:c2:ca:38:94:67:35:38:ae:69:9e:57:
                    26:4f:43:31:f9:12:e7:d9:67:f8:26:83:ec:56:b8:
                    fc:bd:d4:ff:50:51:a1:f8:e4:b4:9b:7f:35:fc:59:
                    c9:41:fb:de:16:b4:90:92:ff:a1:75:7b:eb:04:74:
                    b1:8b:11:96:76:03:2f:52:bd:bc:43:ca:df:f8:35:
                    95:c7:1b:b8:71:4c:fe:39:8a:22:12:28:e9:04:c3:
                    6d:85:d9:5a:14:ab:74:1d:03:cb:6c:ab:b4:d5:80:
                    07:31:19:ad:8e:b0:10:da:74:fe:38:dc:09:e3:14:
                    e7:fc:7c:69:c6:40:9e:29:4c:03:32:06:5e:7e:ac:
                    69:c1:5a:77:67:f4:e8:1c:f1:be:d6:32:03:12:d2:
                    80:d3:73:1b:ab:8f:b3:3c:be:b2:14:bf:df:29:64:
                    6a:34:8e:e6:d0:f0:3e:12:5d:d6:e1:f3:4a:85:fc:
                    c8:27:d3:7b:fd:09:05:a2:97:18:d7:e2:cb:89:cf:
                    ff:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:61:38:40:4D:0F:6B:5D:5A:EA:13:5C:6D:0D:C4:97:B3:B1:D8:23
            X509v3 Authority Key Identifier:
                keyid:70:B1:90:D6:F8:9A:43:4C:CE:5C:B8:C0:D4:B3:8A:16:69:DE:FB:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLGQ1viaQ0zOXLjA1LOKFmne-1k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:c9:51:6c:30:08:b9:7b:b7:ce:cf:7a:e1:ab:fa:a1:c6:66:
         f8:12:b9:95:f2:64:f1:72:44:f5:60:26:94:00:f1:98:fd:93:
         ee:67:4c:3d:a0:9e:5d:e6:90:5b:b7:86:64:5a:0c:8c:a0:5c:
         59:a3:c0:7e:51:df:47:d6:64:a4:0a:ad:be:84:df:2d:e1:a8:
         68:bc:cf:33:ba:53:a3:14:35:80:c0:0c:c2:8b:38:cf:23:7c:
         8d:a7:92:1f:b0:f7:97:7e:ef:34:29:4a:55:b5:5b:02:11:91:
         17:51:4c:0f:87:fc:6b:7e:80:0d:a6:44:6d:0b:77:8e:4a:3e:
         4e:35:5d:1c:60:7b:a3:e9:a6:4b:80:4a:1e:27:a3:18:e0:2b:
         bd:a4:9c:29:9c:04:95:6c:df:ef:f6:61:41:93:a3:85:25:84:
         29:74:7f:f5:86:17:bf:e6:30:24:90:be:fc:1e:0f:7e:34:da:
         e5:77:d5:be:29:1b:af:c7:b1:2d:0e:eb:fc:52:b0:75:c5:c8:
         2d:2e:ae:64:8b:93:0f:c9:7c:14:fd:eb:f4:62:ac:5c:02:59:
         22:2f:e7:4a:57:de:6c:25:5d:5b:85:93:6f:c1:51:df:34:a8:
         6a:2d:c8:49:46:ac:2d:9b:bd:8e:2e:fb:ec:81:8a:4c:f8:e4:
         50:b8:23:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 19:11:34 2026 by rpki-client