Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/S72ppoQtQ9Jrfn2FLxdHOR6oPtk.mft
File:                     S72ppoQtQ9Jrfn2FLxdHOR6oPtk.mft (raw, json)
Hash identifier:          5477TD+sHLRqTl46y5c56nMOEAVcFSZj54IOx+IC3cQ=
Subject key identifier:   BD:ED:F4:90:C1:D3:29:DD:28:B8:F2:6C:F8:84:9F:F7:DD:20:D5:A0
Authority key identifier: 4B:BD:A9:A6:84:2D:43:D2:6B:7E:7D:85:2F:17:47:39:1E:A8:3E:D9
Certificate issuer:       /CN=4bbda9a6842d43d26b7e7d852f1747391ea83ed9
Certificate serial:       01A08A8C77FBB8F53F64B4C2F6BB8BC59121
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S72ppoQtQ9Jrfn2FLxdHOR6oPtk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/S72ppoQtQ9Jrfn2FLxdHOR6oPtk.mft
Manifest number:          C1
Signing time:             Thu 10 Sep 2026 09:00:56 +0000
Manifest this update:     Thu 10 Sep 2026 09:00:56 +0000
Manifest next update:     Fri 11 Sep 2026 09:00:56 +0000
Files and hashes:         1: 8MQUhAj6ypfAOVIXA3WVcUTM-FI.roa (hash: lP1KOaToLMkzKCUhCgsJfBnES1ippDW8Bx45uFNVy+s=)
                          2: LSv85TytJIoQEWmVbakWmpSzsXg.roa (hash: OKx3aDH8rGZoQUqJkmp0PYp64vZE196GR3ZKNSKRsgo=)
                          3: Mvq5_h43dWzt9mHvmap3eYaeghk.roa (hash: oKSBlneD3omI+6CmJDNFtmpUSxOP+wKnKeL6BVktnZg=)
                          4: S72ppoQtQ9Jrfn2FLxdHOR6oPtk.crl (hash: tnLk9R3oChSuSiB5hjgCsdgHHx0VldnnJl/c43l0Law=)
                          5: rDUifGekk8qVhQiSXv8_kmhjei8.roa (hash: 72Tx5XdGphLCZt+gBuxxEvQiHolN3IZYceUsTAMmbFQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/S72ppoQtQ9Jrfn2FLxdHOR6oPtk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/S72ppoQtQ9Jrfn2FLxdHOR6oPtk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S72ppoQtQ9Jrfn2FLxdHOR6oPtk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 08:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:8c:77:fb:b8:f5:3f:64:b4:c2:f6:bb:8b:c5:91:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bbda9a6842d43d26b7e7d852f1747391ea83ed9
        Validity
            Not Before: Sep 10 09:00:56 2026 GMT
            Not After : Sep 11 09:00:56 2026 GMT
        Subject: CN=bdedf490c1d329dd28b8f26cf8849ff7dd20d5a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:39:e7:91:7f:8e:c2:4f:27:1a:75:48:b5:ed:
                    cd:43:e5:55:a3:ec:89:20:97:1d:79:60:44:75:65:
                    f4:79:8a:ad:ee:76:50:bb:a0:33:4e:77:b9:02:72:
                    ea:ec:06:23:1e:f2:81:14:81:09:18:62:6d:00:84:
                    94:63:47:f3:dc:63:e1:fe:37:7d:cd:90:b5:30:7c:
                    5d:41:5a:b4:9d:28:ed:a1:ba:e7:7e:13:bf:56:2a:
                    cb:28:f2:42:2b:8b:f3:21:e5:37:80:90:32:63:ff:
                    0d:2e:05:9f:a6:a5:cb:aa:09:2d:6a:fa:ab:30:6c:
                    e7:a0:5c:ba:fc:2d:3f:11:db:30:63:9d:6d:ef:e8:
                    2f:1b:5d:63:78:06:25:fa:ce:2a:6b:48:a6:33:d7:
                    54:45:ac:5d:24:17:4d:0e:3e:ba:db:e1:f8:8e:15:
                    21:aa:b1:6d:52:26:26:dc:d8:54:5c:ad:90:77:d7:
                    2f:c0:93:2f:16:22:c1:f3:99:8d:ad:36:ea:b0:43:
                    83:09:ac:47:99:d2:04:29:01:01:f6:ee:c9:ca:eb:
                    81:af:50:7f:4e:55:9e:40:fa:c2:5f:93:2e:17:67:
                    d4:8b:20:6b:8c:e4:a6:a1:f5:19:27:20:1e:ea:a0:
                    dc:a9:e4:b7:7b:fe:b8:63:12:82:71:25:a8:96:05:
                    f1:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:ED:F4:90:C1:D3:29:DD:28:B8:F2:6C:F8:84:9F:F7:DD:20:D5:A0
            X509v3 Authority Key Identifier:
                keyid:4B:BD:A9:A6:84:2D:43:D2:6B:7E:7D:85:2F:17:47:39:1E:A8:3E:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S72ppoQtQ9Jrfn2FLxdHOR6oPtk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/S72ppoQtQ9Jrfn2FLxdHOR6oPtk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/S72ppoQtQ9Jrfn2FLxdHOR6oPtk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:3b:f1:34:6e:da:79:16:cf:13:b5:f9:96:17:94:7c:d1:d7:
         5d:da:79:3b:7d:7b:1f:15:4d:72:23:d7:61:13:d0:74:85:19:
         61:05:74:1f:59:ee:9f:2e:cf:d5:08:7e:b5:74:e8:5a:c1:e5:
         83:1b:12:7b:8f:18:a3:15:0e:a3:d7:96:c3:fe:8b:ea:18:54:
         58:b3:93:1f:b0:df:86:fa:fe:6a:cc:20:cc:7d:15:49:ac:55:
         bb:7d:42:f2:96:e6:d8:35:6a:b2:8c:00:89:0f:2e:ea:fb:62:
         76:c5:2e:54:3e:ac:e6:e5:1e:7a:ba:3d:d9:29:fb:7c:76:bd:
         9e:9a:6d:cc:94:05:41:ae:51:ab:80:a6:e6:3c:ee:d0:be:a3:
         41:12:b9:b2:2f:9f:33:9e:b2:d7:98:9c:51:bd:b5:35:57:7d:
         2b:de:b1:db:0a:bb:87:2d:1c:6a:3a:6a:70:d7:9b:42:d2:4f:
         8b:ed:86:bd:3f:45:c1:40:69:e3:21:39:9c:4d:31:a4:6e:cf:
         72:70:41:e9:e5:1f:f6:93:56:15:a8:ef:ab:55:6a:2e:ee:aa:
         2d:dd:fc:17:af:fb:b4:4f:35:51:ca:39:8e:2c:38:ad:a9:1a:
         87:a1:61:03:d5:28:ce:67:4e:e7:30:08:3c:a1:da:2d:16:52:
         59:d2:0c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:05:27 2026 by rpki-client