Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.mft
File:                     aaTWkWuTFZqoCYSps3dGg7tVDr0.mft (raw, json)
Hash identifier:          58sxbl1D35mtOVlj3q7k3LbTcaOYKH62t2C8evPqhtE=
Subject key identifier:   2F:8D:16:EC:58:CA:10:06:A7:44:C9:DE:C8:C6:DB:7E:B4:44:E4:51
Authority key identifier: 69:A4:D6:91:6B:93:15:9A:A8:09:84:A9:B3:77:46:83:BB:55:0E:BD
Certificate issuer:       /CN=69a4d6916b93159aa80984a9b3774683bb550ebd
Certificate serial:       01A08DC459C0B52B8622D8B638DF2117840B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aaTWkWuTFZqoCYSps3dGg7tVDr0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.mft
Manifest number:          178D
Signing time:             Fri 11 Sep 2026 00:00:50 +0000
Manifest this update:     Fri 11 Sep 2026 00:00:50 +0000
Manifest next update:     Sat 12 Sep 2026 00:00:50 +0000
Files and hashes:         1: J8ydQUQXwbdeLKGsKIlOYLkn-2g.roa (hash: x5tw3RQ3h8IFbqDxJqbX4jZdtBMVMlLrubg1cBqUbGY=)
                          2: ZnincJbZ5PaTXoMonj_Ctiiqrus.roa (hash: isWE5Tfc29wZU5CXfTVoPdXm00k/FOrPBirq1sQW5u0=)
                          3: aaTWkWuTFZqoCYSps3dGg7tVDr0.crl (hash: 1v9mPSyEycpb6kSfYRx9WA2vfgQoNnY5Wdu9e069uRU=)
                          4: djk33VTAFS7Xg0krsRI1T_nFwPA.roa (hash: 8hgR6br/pEJbt5XXEd2D/vHBDf8jYfgzmueO6ffVo28=)
                          5: knCed-keSzVEOPICx1gRMxep3OM.roa (hash: PwNnPjtHsrQvIYgK4ATN14eaGro5/ZgkqW0B/Ot+2cU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aaTWkWuTFZqoCYSps3dGg7tVDr0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8d:c4:59:c0:b5:2b:86:22:d8:b6:38:df:21:17:84:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69a4d6916b93159aa80984a9b3774683bb550ebd
        Validity
            Not Before: Sep 11 00:00:50 2026 GMT
            Not After : Sep 12 00:00:50 2026 GMT
        Subject: CN=2f8d16ec58ca1006a744c9dec8c6db7eb444e451
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ca:8c:c6:6c:2f:be:7a:32:87:00:09:3a:93:
                    73:5b:2b:ac:24:c1:0f:27:f4:ce:57:93:c0:08:67:
                    67:e6:61:44:58:f7:32:67:ce:1b:7d:20:cf:4a:e9:
                    47:f9:9f:d5:5f:da:2d:df:ec:08:e8:20:5d:f7:75:
                    81:f6:fe:32:f2:2c:62:ac:b0:30:8f:f1:1c:9e:37:
                    19:69:fd:51:e9:df:0f:79:41:0a:c2:a2:62:1c:9e:
                    e1:b4:a4:24:5e:68:e5:bd:39:58:b1:31:24:ea:ad:
                    26:bb:f5:5c:66:b2:10:23:58:fa:4e:ef:30:cb:8e:
                    d1:46:51:2e:4c:7b:f5:5b:ea:b3:d0:71:d1:e4:c4:
                    38:ef:04:63:50:31:70:70:ab:74:81:a9:30:da:04:
                    48:43:4b:cf:b4:be:8f:08:45:fc:6d:7c:63:65:d4:
                    ce:09:76:d8:44:61:a2:4a:67:ad:d9:15:ca:e2:4a:
                    34:88:3a:04:77:0c:c2:23:57:7b:64:e9:ba:f4:f2:
                    56:03:91:66:a8:e8:1b:77:85:32:02:5b:8b:83:a2:
                    dc:b2:35:76:4f:9f:12:4a:f6:c9:ff:16:37:16:10:
                    d1:d1:db:92:d0:81:74:b1:9d:9a:a8:ce:0f:cd:64:
                    6b:0c:51:2c:87:6d:b9:5d:64:d8:5f:4a:7f:97:60:
                    7e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:8D:16:EC:58:CA:10:06:A7:44:C9:DE:C8:C6:DB:7E:B4:44:E4:51
            X509v3 Authority Key Identifier:
                keyid:69:A4:D6:91:6B:93:15:9A:A8:09:84:A9:B3:77:46:83:BB:55:0E:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaTWkWuTFZqoCYSps3dGg7tVDr0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:ec:a2:98:de:b8:62:09:e1:b0:a3:2b:d4:45:71:f1:8b:71:
         84:2a:d7:e5:22:ec:af:b5:05:cb:75:57:aa:61:85:a3:7a:33:
         5a:f5:e2:66:a2:f8:6d:2d:28:38:13:27:8d:2f:cc:a9:28:77:
         d4:24:61:5c:02:19:e8:48:19:93:cd:b8:b1:c7:84:5b:6f:f8:
         e7:3e:7e:c3:1d:5f:3c:f3:a8:d7:2e:d7:a3:9f:37:b0:bf:48:
         d9:3f:cc:77:72:4d:4e:cf:5b:c7:b4:42:72:64:58:56:ae:ac:
         e5:99:d8:30:fc:21:78:9d:ae:93:cb:10:0f:a8:65:e7:b8:45:
         33:6c:86:94:05:cf:85:b9:a4:a9:34:e3:7d:76:44:5b:8d:46:
         d8:5f:72:be:83:83:c4:82:ce:0c:8c:83:a5:40:7a:15:d2:e3:
         4e:98:12:55:ec:bf:19:48:2d:ab:a8:90:3a:47:b3:88:b6:4c:
         18:6c:5c:ff:81:c7:5f:c5:e9:1a:11:df:fb:be:2b:2a:d2:18:
         00:79:20:25:d6:21:e3:fa:1d:eb:36:6a:9d:16:b8:62:c2:9d:
         37:d5:af:62:63:2e:88:1b:e9:2f:ac:42:60:db:c8:bf:71:fb:
         a7:a4:fb:dd:8b:33:9c:b0:7e:a2:62:c8:2e:c6:fe:f5:b8:0a:
         fa:db:f1:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 04:33:43 2026 by rpki-client