Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.mft
File:                     2TpU8C9J9FrV1z5VUdCWGBvOP24.mft (raw, json)
Hash identifier:          Pc+Z6+MJgAqb3jEtKhzn0Lux4wmtKNe4BX3p9AyosGE=
Subject key identifier:   CB:06:F7:EE:E7:74:A0:C5:BC:F2:30:D4:4B:FE:11:97:43:1F:67:F9
Authority key identifier: D9:3A:54:F0:2F:49:F4:5A:D5:D7:3E:55:51:D0:96:18:1B:CE:3F:6E
Certificate issuer:       /CN=d93a54f02f49f45ad5d73e5551d096181bce3f6e
Certificate serial:       01A06E707DE00A22973C92D47FC31E46AF99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2TpU8C9J9FrV1z5VUdCWGBvOP24.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.mft
Manifest number:          0E6B
Signing time:             Fri 04 Sep 2026 22:01:01 +0000
Manifest this update:     Fri 04 Sep 2026 22:01:01 +0000
Manifest next update:     Sat 05 Sep 2026 22:01:01 +0000
Files and hashes:         1: 1G4F8tXp79ck76MYvh4RlTMuH0c.roa (hash: mb1DMb5KSFZKad2RaZrc43nShfqVDrfZ7CG1uLPdIWU=)
                          2: 2TpU8C9J9FrV1z5VUdCWGBvOP24.crl (hash: 7MtR3eTCrDxSZfLvTergy2OJ+VdXV/uYPdnHkGjhLDQ=)
                          3: K4ChUKDGfS1YyMU8Q16MEHIO7v0.roa (hash: AE88NPyeMZ5WGmqlJ6UtvoVeIiD9FWjIxyupVfERLqA=)
                          4: fuVacSwj9CSAPi4gbx8EVKVYNDo.roa (hash: 3y2BI8DZlsnE4UgzQ99YWVZzq7ewclwDcUiHEWS1oXE=)
                          5: uYzu2dMQ5_tuSd4HkpHbhuWYkvg.roa (hash: Yo3o6eFVt7LwYw/qBIDLsPZ6WwLjW5OHybSEQ/0IkB8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2TpU8C9J9FrV1z5VUdCWGBvOP24.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 16:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6e:70:7d:e0:0a:22:97:3c:92:d4:7f:c3:1e:46:af:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d93a54f02f49f45ad5d73e5551d096181bce3f6e
        Validity
            Not Before: Sep  4 22:01:01 2026 GMT
            Not After : Sep  5 22:01:01 2026 GMT
        Subject: CN=cb06f7eee774a0c5bcf230d44bfe1197431f67f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:73:53:a3:4a:f1:95:89:1a:2d:d2:f7:28:ad:
                    7e:f2:a9:87:d3:07:a6:cd:68:e5:5a:cf:95:bf:bc:
                    17:7f:da:6a:02:12:36:c3:3c:ea:86:fd:9b:3e:b3:
                    a7:1a:bc:a4:0e:0d:de:21:d5:d8:ce:80:0d:a4:52:
                    57:b6:bf:e6:c9:77:01:a8:7e:43:2c:a6:fc:f0:63:
                    00:43:07:1b:35:a6:b8:c1:a5:11:1a:7a:a6:67:63:
                    6b:99:f6:2a:22:50:ca:ec:f0:83:fe:ec:a3:7d:a3:
                    10:97:32:99:4d:8a:c7:45:1a:48:9f:81:a9:7d:cc:
                    8c:f0:ef:46:ac:ca:40:bf:cb:fa:e3:c7:f7:15:b3:
                    b3:fc:bb:21:6a:7c:bd:5e:d3:05:f3:31:85:c4:17:
                    29:9f:fd:77:e7:9f:14:2a:af:9d:cd:16:75:7c:90:
                    09:53:ce:c6:18:00:9b:70:78:52:93:ab:aa:22:b0:
                    31:8e:05:62:a4:60:ee:4b:22:16:d2:f2:42:2d:53:
                    ca:b7:30:b3:c2:ea:34:14:20:19:b8:52:96:51:f5:
                    b3:d3:61:76:21:ec:c8:9c:fe:14:67:5a:9d:df:67:
                    55:16:e0:03:3e:b8:d5:6d:7a:ae:ce:eb:6a:1b:59:
                    a1:6a:34:35:57:d5:a0:cf:9d:6c:87:43:3a:98:08:
                    46:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:06:F7:EE:E7:74:A0:C5:BC:F2:30:D4:4B:FE:11:97:43:1F:67:F9
            X509v3 Authority Key Identifier:
                keyid:D9:3A:54:F0:2F:49:F4:5A:D5:D7:3E:55:51:D0:96:18:1B:CE:3F:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2TpU8C9J9FrV1z5VUdCWGBvOP24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:08:a0:01:21:fb:aa:80:9a:2e:ed:5f:df:6e:ae:f8:fd:3c:
         c8:71:85:44:90:06:5e:2b:75:6a:5f:01:67:91:d2:01:a3:58:
         f2:28:bf:e8:ed:dc:0c:51:4e:22:56:13:61:fc:67:67:ca:e5:
         4a:ec:e0:e7:36:8b:9f:0b:f1:26:f6:84:95:c9:0c:44:16:52:
         a8:fe:90:96:35:bb:cb:39:0d:6b:c3:c5:82:f8:d9:35:f4:66:
         66:10:78:68:c9:6c:40:6e:fe:60:21:7c:e7:43:75:99:89:77:
         7c:f7:90:8a:e1:06:77:14:14:f6:40:55:35:e6:16:bc:fa:d4:
         9c:a2:a6:9d:b8:0d:e0:18:c0:8e:b8:8a:5c:0c:69:65:69:20:
         6a:3f:1a:c9:e3:7f:6c:e1:30:92:d2:bf:90:ae:39:f3:b2:9b:
         74:55:21:ae:75:0f:18:53:fe:73:ae:13:7a:aa:6f:fc:56:97:
         4c:8b:e1:0b:08:6f:09:9a:f5:5c:33:63:07:f2:a3:9f:ea:b6:
         9b:6d:29:5c:71:9d:e8:d3:b9:7a:6d:52:4f:85:f1:80:1a:be:
         44:3e:93:8e:35:34:d9:d6:a8:9a:e2:cd:c8:59:8b:57:20:28:
         e5:70:f4:f8:78:78:20:73:94:37:33:1d:74:be:15:49:b4:d6:
         9d:16:cb:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:43:11 2026 by rpki-client