Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft
File:                     mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft (raw, json)
Hash identifier:          +JwNU5+0Nf/CduL4nYIm1Obrk5bSupdpFT2KNb64uSk=
Subject key identifier:   2A:94:DE:32:75:5A:78:26:71:68:75:07:81:38:D8:9E:F8:DA:65:24
Authority key identifier: 9A:48:C1:D8:00:8C:DC:05:9D:B0:B2:7A:A9:51:47:99:C0:6D:54:43
Certificate issuer:       /CN=9a48c1d8008cdc059db0b27aa9514799c06d5443
Certificate serial:       01A06E39A6F0F845F722B76126F96C73C888
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft
Manifest number:          15AC
Signing time:             Fri 04 Sep 2026 21:01:07 +0000
Manifest this update:     Fri 04 Sep 2026 21:01:07 +0000
Manifest next update:     Sat 05 Sep 2026 21:01:07 +0000
Files and hashes:         1: A50jm4RKuLhFP5pmOh8yo-bEAx4.roa (hash: uMoMI/3gHlBNr9Dclj/R38BqLAJ7Q+D5bCBwp5a+gbI=)
                          2: _aGsIkHdm69JuDVPQz7v4_sNbPM.roa (hash: OlUUaLGTOWMuneie8M0isdkVhnsbncnaYj7jEv7cF7I=)
                          3: mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl (hash: LxrIeBi2gqIy6pHw4ZW0Jc4J9yOioJPvPaqexBFVoQM=)
                          4: vZCS-cDmopO-qNxnU9jSVeCrpJg.roa (hash: ojMpU7jstaT9u+/Jymeixtegt7Gz6xXftszxg6yH2ew=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 20:21:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6e:39:a6:f0:f8:45:f7:22:b7:61:26:f9:6c:73:c8:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a48c1d8008cdc059db0b27aa9514799c06d5443
        Validity
            Not Before: Sep  4 21:01:07 2026 GMT
            Not After : Sep  5 21:01:07 2026 GMT
        Subject: CN=2a94de32755a7826716875078138d89ef8da6524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:57:fd:f5:b9:f4:86:bb:df:a6:d1:89:a7:88:
                    5a:c7:15:25:3d:c0:ea:08:05:3b:d3:1e:a9:a6:ce:
                    74:fb:78:75:9f:5c:45:4f:a6:a9:c9:e8:9e:28:1d:
                    c6:85:6c:c5:35:11:8f:04:ea:87:fb:0f:bb:75:19:
                    fe:5c:1b:93:19:91:be:ec:9a:07:d3:2f:bf:19:c6:
                    fc:c1:36:f7:26:11:ec:a3:ee:85:bd:d7:b6:28:30:
                    e4:89:71:d3:bf:42:00:11:d7:70:31:e0:ca:93:98:
                    e9:56:a4:22:9b:ee:d1:01:1a:64:f9:b0:e5:d2:a2:
                    1c:0a:ab:5c:2c:98:53:9b:57:dc:5e:27:22:88:d4:
                    fb:da:c0:c2:e2:21:a5:af:21:2a:70:e9:18:02:76:
                    26:17:1f:fe:c6:98:77:cf:a1:f1:11:2a:88:fc:cf:
                    90:0b:55:c5:4b:b1:e6:ca:9c:d1:2d:75:f0:f8:22:
                    da:e3:6d:23:78:b0:cc:7c:fb:3e:85:ca:cb:6a:86:
                    f0:8f:2b:c6:ff:17:9c:d5:41:3b:11:8d:48:a8:ee:
                    78:e5:af:13:a2:f8:a5:3b:a1:5f:d0:3d:d0:b8:5d:
                    4c:af:16:5d:c0:5f:7b:3f:91:c2:91:d2:c6:82:57:
                    15:bc:03:c5:80:56:77:c8:d8:24:3b:8a:63:f5:de:
                    f8:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:94:DE:32:75:5A:78:26:71:68:75:07:81:38:D8:9E:F8:DA:65:24
            X509v3 Authority Key Identifier:
                keyid:9A:48:C1:D8:00:8C:DC:05:9D:B0:B2:7A:A9:51:47:99:C0:6D:54:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:37:49:52:dc:20:d6:85:ce:59:34:b0:63:74:d2:aa:a7:0b:
         f6:2c:2b:85:00:2d:ea:d8:63:11:2c:fc:8f:94:b5:ea:24:f2:
         22:90:69:40:9f:54:e8:05:8f:d9:02:ce:9d:15:23:6f:a5:27:
         18:d7:a8:86:9d:d7:53:42:6d:b8:77:2a:ee:2e:c3:b7:6b:77:
         db:54:bb:1b:5c:61:5d:11:2f:5f:da:96:b9:b9:02:5c:f5:48:
         0d:97:c2:31:6f:96:26:0c:1a:c1:ef:98:c9:b8:a3:c2:e2:84:
         a2:e3:08:09:67:72:41:76:49:c0:be:83:a5:7e:d9:10:20:64:
         aa:dd:46:40:50:6d:33:6c:5b:5e:e1:fc:dd:3c:9a:7f:8e:fe:
         d5:ab:34:7c:1b:e3:c3:c9:49:49:61:af:72:21:d8:f9:01:d6:
         b5:57:7d:d2:c6:b9:b9:e2:ed:59:5f:0b:af:7f:1d:c4:22:a0:
         27:80:d2:86:4f:92:06:b1:4c:87:72:03:0d:6d:1c:cd:7d:5c:
         34:43:c4:33:1c:cb:19:2b:69:be:f6:45:0a:b7:f3:98:57:10:
         ae:d4:c2:e9:fa:36:c0:f3:f0:07:c6:3f:cb:d9:5b:a6:e0:16:
         1d:ea:7d:46:44:53:af:55:8a:bd:00:2d:a2:b8:66:7e:75:35:
         dd:8b:0a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:06:32 2026 by rpki-client