Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.mft
File:                     1sJp-ek7D7i8SxyUerxbIfIfIwU.mft (raw, json)
Hash identifier:          UVyfEsAFBEFOnJftmt5LhMYl4ci/2pBVD4EShqMvNNM=
Subject key identifier:   2E:A7:C2:D5:52:CE:82:61:94:24:8C:91:10:3F:22:20:FE:E9:8C:35
Authority key identifier: D6:C2:69:F9:E9:3B:0F:B8:BC:4B:1C:94:7A:BC:5B:21:F2:1F:23:05
Certificate issuer:       /CN=d6c269f9e93b0fb8bc4b1c947abc5b21f21f2305
Certificate serial:       01A06F4C9A70206E6B74873F9453D7BB2C4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1sJp-ek7D7i8SxyUerxbIfIfIwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.mft
Manifest number:          097A
Signing time:             Sat 05 Sep 2026 02:01:26 +0000
Manifest this update:     Sat 05 Sep 2026 02:01:26 +0000
Manifest next update:     Sun 06 Sep 2026 02:01:26 +0000
Files and hashes:         1: 1sJp-ek7D7i8SxyUerxbIfIfIwU.crl (hash: CTVI4i5hdP3AxMZCbn0jXiT5kztJPxddNhWKfjj6BMY=)
                          2: Y3xy27kzFffMPewtUpDREyfJrvY.roa (hash: tx10cTi8DLhzNW2hd7QG0hYENx9jGu/u+XgKab2XuPA=)
                          3: ZAUQOx8ZIoF_38vOnWSRuk7mSCM.roa (hash: xFSZDnEjwVDIcL0zURA7Oo3gZI5+yugqjcFTXmh2x0A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1sJp-ek7D7i8SxyUerxbIfIfIwU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Sep 2026 01:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6f:4c:9a:70:20:6e:6b:74:87:3f:94:53:d7:bb:2c:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6c269f9e93b0fb8bc4b1c947abc5b21f21f2305
        Validity
            Not Before: Sep  5 02:01:26 2026 GMT
            Not After : Sep  6 02:01:26 2026 GMT
        Subject: CN=2ea7c2d552ce826194248c91103f2220fee98c35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:85:27:63:83:ab:c9:20:c5:38:80:fe:fa:0c:
                    bb:39:03:df:44:bc:be:a5:10:ff:44:22:c9:dc:82:
                    11:de:15:ba:52:99:dc:26:0f:18:12:d2:fb:fa:5a:
                    6f:c7:4e:5d:be:cd:26:91:ec:f7:16:19:a5:74:ba:
                    7b:a0:51:88:ca:22:e1:20:af:34:84:b8:65:a3:e1:
                    93:09:dc:0c:da:6a:a2:98:0c:82:1b:bd:e6:ea:88:
                    6f:80:b0:65:98:a6:56:dc:16:7c:7c:be:07:7b:6f:
                    d9:66:45:32:ee:33:21:10:86:69:c2:47:1c:84:7a:
                    5f:92:02:d7:fa:ac:00:15:80:79:b4:90:96:91:26:
                    c0:64:df:7a:db:d9:61:a7:ca:50:5e:b9:92:1c:cc:
                    ff:e8:1d:a5:4f:e7:09:cf:bb:e4:27:f4:30:31:b0:
                    81:0a:01:f8:be:2d:c5:b2:83:dd:2c:a6:31:54:5b:
                    14:98:b1:f9:67:66:63:b4:e5:5d:35:7f:fb:8b:dc:
                    d3:e0:0b:f8:2f:43:1b:88:23:ea:77:4a:bd:14:43:
                    15:a5:1e:ac:64:05:4d:3a:f4:c6:50:5c:46:9c:49:
                    7d:7a:4d:3c:fb:95:72:5c:cd:a4:cc:f8:a4:25:32:
                    63:70:85:67:a2:a9:f8:c1:8a:a1:54:e1:75:9e:f8:
                    0c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:A7:C2:D5:52:CE:82:61:94:24:8C:91:10:3F:22:20:FE:E9:8C:35
            X509v3 Authority Key Identifier:
                keyid:D6:C2:69:F9:E9:3B:0F:B8:BC:4B:1C:94:7A:BC:5B:21:F2:1F:23:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1sJp-ek7D7i8SxyUerxbIfIfIwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:56:9d:c7:a9:f5:1c:da:9e:bf:c8:20:f1:2a:f8:26:39:f9:
         3e:3f:49:fd:22:ac:0e:4e:f6:93:bc:53:f0:eb:f3:c5:19:d5:
         a9:4e:c9:b6:dd:71:2c:0d:dd:8f:cb:c6:94:e8:d9:25:ba:22:
         f1:f6:e7:b0:bd:42:65:b4:72:86:72:09:f7:32:1e:16:94:03:
         de:db:7b:eb:6a:7f:23:32:96:42:26:f2:cc:a7:1b:84:df:97:
         53:cb:14:7c:22:28:79:de:f9:0b:8b:6b:32:5f:bb:ca:cb:a7:
         a1:8b:a6:a0:07:2e:f6:ae:aa:f7:56:cf:38:f8:db:32:c7:de:
         7f:d7:8a:95:ae:d8:48:0d:e9:19:de:15:6d:d5:1e:35:3b:1f:
         41:e2:b8:7c:f7:44:22:87:c4:56:b8:f4:36:e0:2c:8c:8f:0e:
         96:3b:69:16:f5:89:7c:a5:0f:11:d5:4b:e4:b9:5f:9b:bd:2f:
         85:f4:e9:98:a7:c0:f7:04:93:3b:eb:be:ec:cc:cd:15:02:32:
         0d:68:6b:63:ce:f2:84:f4:a0:9a:b8:ad:95:eb:78:4e:02:07:
         28:53:b1:fb:e0:85:34:f3:5f:6c:25:ac:16:e6:95:c7:07:9b:
         74:ba:bf:51:bb:e6:a8:5f:1e:2d:be:67:e8:6a:92:df:7a:50:
         0d:69:37:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:38:50 2026 by rpki-client