Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft
File:                     rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft (raw, json)
Hash identifier:          Ta7tdTuclIV/0J7TwKNrsBPjtv5xnWtPfwWM79P50oQ=
Subject key identifier:   47:FB:25:16:18:B0:7E:2C:92:60:B2:4B:BD:35:52:8E:19:E1:AF:FC
Authority key identifier: AD:80:67:9B:96:CA:32:2B:FA:85:50:0C:AB:20:6C:6D:47:41:2E:DF
Certificate issuer:       /CN=ad80679b96ca322bfa85500cab206c6d47412edf
Certificate serial:       01A08A556093CAC2397605D323D60E50140D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft
Manifest number:          1A50
Signing time:             Thu 10 Sep 2026 08:00:46 +0000
Manifest this update:     Thu 10 Sep 2026 08:00:46 +0000
Manifest next update:     Fri 11 Sep 2026 08:00:46 +0000
Files and hashes:         1: 1DSUQ0jxs6dG0EoFqfG91mFQyMw.roa (hash: iINHWWjQ7Nsnh6T5r2HUf93qqcUOuSqMNkps61w8OX0=)
                          2: BdsuDRm80ULk9aLfJ7zh20INiU8.roa (hash: 0BqcT0T81e3M/0LPrL5e9ii3yguHiKnmLWj00gesJkU=)
                          3: KLak6E7XOaljYL7i0cSZlIlCEqg.roa (hash: mJGksFMnjfzfVrg/g8a4mJkgqFzUtmtGPX7OdhiTIDg=)
                          4: VSskXdqgKe7CaDWuoatQnI_9KiE.roa (hash: ZdbXSqyDrBgEKdzaBPZgWnFmAfBPFOOQn34nK2NZEnk=)
                          5: rYBnm5bKMiv6hVAMqyBsbUdBLt8.crl (hash: qVrJ0OuVjOdXLl4PC9N3FY1H0//CJxtfxWWpLp9mroA=)
                          6: vPgoZptW0KavIK_Hg1kzkfOF1WE.roa (hash: j7J2y1HSuKj72l6kVGUrAtD78gxcoUd5XdyBbZEybuA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 08:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:55:60:93:ca:c2:39:76:05:d3:23:d6:0e:50:14:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad80679b96ca322bfa85500cab206c6d47412edf
        Validity
            Not Before: Sep 10 08:00:46 2026 GMT
            Not After : Sep 11 08:00:46 2026 GMT
        Subject: CN=47fb251618b07e2c9260b24bbd35528e19e1affc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d1:b7:dd:70:95:9e:f1:82:dd:04:77:f5:32:
                    9c:45:36:93:c6:64:6e:df:97:8b:0a:92:b6:aa:17:
                    b2:09:3f:62:4e:5c:e2:30:3b:44:7a:78:a3:aa:f9:
                    a2:fb:64:fe:96:19:36:c5:04:17:bf:46:a2:f1:2f:
                    c2:ce:2d:68:2f:34:4d:e7:16:62:c2:8e:c6:38:b2:
                    b2:63:6b:fc:92:8e:86:27:c5:8a:ba:e4:85:f9:ce:
                    48:fb:35:49:7d:6f:da:71:42:90:57:91:77:6a:16:
                    1e:e3:d8:51:6e:7b:e7:be:a2:cf:bb:f9:6f:09:76:
                    98:dd:b1:25:e8:18:22:f4:10:f2:3a:b2:38:d4:61:
                    fd:7c:42:19:43:e3:a1:d6:37:f4:d6:52:70:cf:dc:
                    42:70:e6:1c:df:7f:c7:30:f3:ba:b7:9d:9a:e7:46:
                    ff:99:f7:d2:cd:38:d3:7c:5f:04:7e:6e:ec:27:4a:
                    b6:8b:53:ea:f5:2a:40:57:4d:db:7c:e0:13:44:99:
                    85:56:e5:72:cf:d7:7f:59:3c:67:67:97:8f:ed:ae:
                    70:c9:39:13:ac:4b:cb:01:62:ca:ab:28:19:e2:9d:
                    2e:5e:7b:dd:11:b4:0f:3e:de:fd:32:fb:cc:2b:96:
                    5c:10:55:18:15:04:20:ae:e5:a5:c4:a4:2c:62:19:
                    6b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:FB:25:16:18:B0:7E:2C:92:60:B2:4B:BD:35:52:8E:19:E1:AF:FC
            X509v3 Authority Key Identifier:
                keyid:AD:80:67:9B:96:CA:32:2B:FA:85:50:0C:AB:20:6C:6D:47:41:2E:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:6c:d9:d0:19:6d:8b:eb:f6:1f:2f:d5:39:2c:32:b2:af:c2:
         ef:e0:9e:55:08:48:0c:12:83:f7:2b:61:68:b1:46:de:16:ce:
         24:09:e0:c7:20:a3:63:48:0b:c5:1a:05:59:9a:9c:77:b8:4e:
         b6:a7:19:97:f0:22:98:db:53:6a:f5:16:77:d5:7c:62:94:8c:
         79:20:88:5b:f3:3d:19:b9:57:1b:6c:00:60:3c:12:a9:ee:97:
         84:ec:ed:29:5b:3f:df:44:a9:1b:e1:74:52:ac:eb:63:9d:33:
         ba:11:5b:d8:aa:45:56:f6:d7:a7:9b:7b:6e:ca:0d:4a:ac:44:
         32:39:19:37:24:f5:34:d4:2a:64:d5:c1:10:5e:85:7f:38:40:
         75:cb:5f:19:e7:47:59:54:ce:bb:66:f2:00:17:81:72:c0:d4:
         88:fa:82:6f:22:90:3f:bc:3f:53:30:7c:10:37:24:98:18:ea:
         1e:49:18:e6:6a:17:bf:27:e9:72:83:09:19:2e:98:a1:e5:99:
         9d:e7:42:32:aa:0b:93:24:6b:f3:1e:36:63:0c:ae:1e:13:f3:
         63:c1:32:07:be:ae:ff:1f:95:ab:c4:54:62:fb:9d:ba:5f:df:
         10:5f:56:54:d5:83:a9:05:fc:02:c8:5d:d9:e5:21:15:b9:0d:
         f0:4b:62:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:33:48 2026 by rpki-client