Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.mft
File:                     dbeVBmFQocNn2rzPaclwqwxyMhU.mft (raw, json)
Hash identifier:          IXfb0kcD0H3l5yYn4IntqsjOAmkC0KqFr2x0BRvtaMA=
Subject key identifier:   B7:85:ED:31:24:B8:76:A2:B6:8C:F0:95:6A:68:82:40:9D:C6:02:3B
Authority key identifier: 75:B7:95:06:61:50:A1:C3:67:DA:BC:CF:69:C9:70:AB:0C:72:32:15
Certificate issuer:       /CN=75b795066150a1c367dabccf69c970ab0c723215
Certificate serial:       01A08E69BC1A433A035D4BAAF3E0C8294C52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dbeVBmFQocNn2rzPaclwqwxyMhU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.mft
Manifest number:          0E30
Signing time:             Fri 11 Sep 2026 03:01:29 +0000
Manifest this update:     Fri 11 Sep 2026 03:01:29 +0000
Manifest next update:     Sat 12 Sep 2026 03:01:29 +0000
Files and hashes:         1: 0T8fcmm1hsNnOmqM2PEgoAyliqU.roa (hash: 9ZfWKoxYg5iUkW9bq0QBmY+p7hBHHw7kGA3tl6yyKw0=)
                          2: FLA5zAJXuRYhVvLbMvHegLVx03k.roa (hash: ALcLJ5P9PXv6U4nYIysJQ7DHdsSCbcTf30882RyAGwc=)
                          3: QLKMe_jElWZCYxaDhAzkorlz3LQ.roa (hash: vuhA+iGQjke4jhUjZeVHGZ6IY30SRz7Sp3mzEHAQJQs=)
                          4: TSfqyIUxAgfu2d6E5vUEde-a71w.roa (hash: m9pFo8gt/WhMRWsNe6yus9/BFb/kzFEfeC7Fbw2hXyw=)
                          5: dbeVBmFQocNn2rzPaclwqwxyMhU.crl (hash: j4RPfJ1Nk/HSQybR3iHWnsoSz4Q9SJhc11578dRT1SM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dbeVBmFQocNn2rzPaclwqwxyMhU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8e:69:bc:1a:43:3a:03:5d:4b:aa:f3:e0:c8:29:4c:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75b795066150a1c367dabccf69c970ab0c723215
        Validity
            Not Before: Sep 11 03:01:29 2026 GMT
            Not After : Sep 12 03:01:29 2026 GMT
        Subject: CN=b785ed3124b876a2b68cf0956a6882409dc6023b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:a9:56:b9:97:d1:23:c5:33:35:35:dc:6b:c6:
                    34:84:c8:a6:1a:db:dd:79:32:90:b8:cd:13:05:50:
                    d8:ad:11:7c:3e:bd:4f:cc:54:83:8e:ab:ac:38:54:
                    91:c2:25:a1:f8:dd:66:15:b2:d5:9f:b6:49:98:a3:
                    e5:9f:b1:32:01:ae:ae:ee:8a:d9:27:7c:89:8b:2f:
                    80:3d:db:6f:34:91:f4:df:45:1d:df:46:08:9c:67:
                    c0:97:98:8d:2d:4d:62:ad:e0:05:4a:63:d7:c3:f8:
                    90:76:08:18:9a:55:52:2c:35:8f:21:bc:34:f0:d0:
                    10:06:f6:55:29:76:fb:48:59:c6:ac:25:7f:8a:c3:
                    01:ab:ad:92:59:46:d9:3e:22:d1:4b:ff:a1:5f:c1:
                    ad:36:59:7c:41:6e:01:b0:33:78:1b:73:73:5a:61:
                    04:9c:e8:72:40:f6:d3:b4:4c:80:ee:2a:43:34:48:
                    b9:c2:cb:40:b0:8a:cc:24:dc:21:5a:9c:f2:b8:f8:
                    a3:0c:cb:0e:05:f4:11:42:c4:f8:70:ba:a8:16:aa:
                    03:1e:52:4e:9a:38:d6:41:db:3a:76:1f:87:03:75:
                    3b:b4:95:4e:06:c9:22:f5:0a:96:7a:6c:4e:27:c5:
                    ba:b7:9f:eb:32:81:9a:a5:e7:32:d8:42:9f:9c:1b:
                    34:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:85:ED:31:24:B8:76:A2:B6:8C:F0:95:6A:68:82:40:9D:C6:02:3B
            X509v3 Authority Key Identifier:
                keyid:75:B7:95:06:61:50:A1:C3:67:DA:BC:CF:69:C9:70:AB:0C:72:32:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbeVBmFQocNn2rzPaclwqwxyMhU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:91:f8:c7:fc:4e:a4:a9:0e:21:f2:5f:ed:e5:fd:2c:a8:60:
         7a:29:68:66:aa:ac:67:9c:cd:95:52:89:74:c1:a2:ad:c2:72:
         56:4d:a7:6c:85:57:86:25:aa:81:44:e9:c0:9e:f0:0b:c8:46:
         84:cf:16:05:6c:a0:4e:c3:85:8e:e4:1f:c2:06:cf:af:65:c0:
         62:cf:ae:74:18:bb:3b:03:1e:5b:13:51:71:19:63:8d:01:6f:
         73:95:79:35:9d:c3:c8:b0:39:bc:b8:bf:73:59:ba:df:d1:9b:
         dc:02:ba:7c:b2:6f:1d:d3:05:7c:41:0d:44:50:b4:66:e1:8e:
         89:05:22:d8:cd:13:42:bb:94:91:31:ab:67:be:75:ed:7b:2d:
         2c:4a:ce:ed:1d:51:93:ba:8b:88:77:4c:37:14:35:35:e6:f9:
         5c:24:73:fb:d5:22:75:cc:f2:f7:9b:18:7b:74:8d:b2:b0:1f:
         d3:9c:e7:9f:1a:f3:c8:21:8b:8f:97:31:9f:bd:00:5f:95:24:
         28:24:ce:77:d9:f5:72:b3:f1:a9:63:23:e5:db:24:10:26:7c:
         ca:a0:6f:49:33:bc:39:85:69:cd:70:e5:00:eb:a4:7c:f0:9f:
         95:8c:3e:2d:2b:7b:37:bc:82:ab:a0:b7:27:4f:53:9b:0b:5f:
         24:da:4f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 05:58:16 2026 by rpki-client