Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/d2cd1c-04b5-44d0-81d5-7be3bda05927/1/B1n2rBc_de2eWF7H2HKlhlzvKDU.mft
File:                     B1n2rBc_de2eWF7H2HKlhlzvKDU.mft (raw, json)
Hash identifier:          0hIkKfo/1T5I4DFNbcYsdVUhLB5/ipJTItKLAQu8j7M=
Subject key identifier:   F3:F7:29:2E:38:2D:D0:C0:8B:63:6B:A3:31:25:11:30:ED:14:12:E1
Authority key identifier: 07:59:F6:AC:17:3F:75:ED:9E:58:5E:C7:D8:72:A5:86:5C:EF:28:35
Certificate issuer:       /CN=0759f6ac173f75ed9e585ec7d872a5865cef2835
Certificate serial:       01A08C7B11721FE837CB3E594A14AC70ADCC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B1n2rBc_de2eWF7H2HKlhlzvKDU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/d2cd1c-04b5-44d0-81d5-7be3bda05927/1/B1n2rBc_de2eWF7H2HKlhlzvKDU.mft
Manifest number:          1A55
Signing time:             Thu 10 Sep 2026 18:01:10 +0000
Manifest this update:     Thu 10 Sep 2026 18:01:10 +0000
Manifest next update:     Fri 11 Sep 2026 18:01:10 +0000
Files and hashes:         1: 7sslS3RUIuhf5Zaqe2lYWrmi-zg.roa (hash: vaQFknxSj3T9Lsw68a9dNOcrY1wtAS0N77E0Dy/WJXw=)
                          2: Ah16mLLdh0qTIWTu4DElnGt6Rf0.roa (hash: +2AS4JmYTZXXzzonBU9RhWYzUC8DPPlap0ns3j4LJZ8=)
                          3: B1n2rBc_de2eWF7H2HKlhlzvKDU.crl (hash: B1PKJd3oSLpL4GX7M6Vt4cnwIJM3OTpMeIaJOuTUTqI=)
                          4: TP2YSwqVyfqUIy4MvNgVm92X3cE.roa (hash: ZjMe7Najk1MfjHandVTL1SRsCu1fPTQIQjdH4Ut4rpM=)
                          5: bgwAATh9CUO7xiOucQ6npGFxHx8.roa (hash: T9bimoTkLBlvWZuKy6AOXF/8PICrLV1Er8M52jbgMpA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/d2cd1c-04b5-44d0-81d5-7be3bda05927/1/B1n2rBc_de2eWF7H2HKlhlzvKDU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/d2cd1c-04b5-44d0-81d5-7be3bda05927/1/B1n2rBc_de2eWF7H2HKlhlzvKDU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B1n2rBc_de2eWF7H2HKlhlzvKDU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 18:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8c:7b:11:72:1f:e8:37:cb:3e:59:4a:14:ac:70:ad:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0759f6ac173f75ed9e585ec7d872a5865cef2835
        Validity
            Not Before: Sep 10 18:01:10 2026 GMT
            Not After : Sep 11 18:01:10 2026 GMT
        Subject: CN=f3f7292e382dd0c08b636ba331251130ed1412e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:7c:99:a7:ed:35:bf:04:06:c4:35:29:8f:69:
                    7a:d3:1c:56:4f:f6:59:a8:b5:40:6a:e1:57:5b:00:
                    d1:86:fb:14:91:ff:d4:ad:6b:09:37:44:05:1d:02:
                    01:27:c2:fe:23:0b:7d:87:f0:df:28:41:20:67:f0:
                    85:a1:18:f9:68:d4:b5:ad:ab:ad:03:58:b3:02:61:
                    32:e3:0c:84:b4:b2:4a:98:17:d7:16:ee:98:66:87:
                    53:c3:ca:99:9c:e6:f1:a7:b4:2c:33:19:7c:7d:ca:
                    f5:1b:d8:8e:8f:e7:8d:ea:45:85:7f:1b:67:3c:7e:
                    62:89:01:dd:ad:2e:1c:73:81:af:29:38:51:fa:a2:
                    b1:a2:40:8f:41:22:7d:6e:3e:fe:cb:f9:0f:9c:9a:
                    88:0d:7d:45:74:fd:f6:ac:89:f9:b0:8a:0b:17:3e:
                    4b:44:6d:0f:2f:a0:d4:a3:e0:bf:3e:33:82:c6:a7:
                    b8:6b:ec:10:af:d3:41:50:98:7e:a3:82:d1:f8:95:
                    31:9e:0b:5f:10:16:62:ef:f6:9c:10:34:c6:a6:68:
                    a2:c8:19:77:08:ec:e2:59:df:3b:9d:68:ae:db:10:
                    3e:af:76:a1:fb:d8:8b:15:f5:84:28:0e:76:92:20:
                    1e:aa:9b:07:8e:3c:5e:95:a9:6e:00:ec:d5:69:7b:
                    59:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:F7:29:2E:38:2D:D0:C0:8B:63:6B:A3:31:25:11:30:ED:14:12:E1
            X509v3 Authority Key Identifier:
                keyid:07:59:F6:AC:17:3F:75:ED:9E:58:5E:C7:D8:72:A5:86:5C:EF:28:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1n2rBc_de2eWF7H2HKlhlzvKDU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d2cd1c-04b5-44d0-81d5-7be3bda05927/1/B1n2rBc_de2eWF7H2HKlhlzvKDU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d2cd1c-04b5-44d0-81d5-7be3bda05927/1/B1n2rBc_de2eWF7H2HKlhlzvKDU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:af:d7:eb:d3:b6:aa:88:f2:85:16:a9:20:75:61:57:df:d6:
         e9:0a:f3:f1:c8:c1:ac:48:ea:1a:f5:87:af:89:0d:64:d3:0c:
         41:6d:b3:ab:a3:63:e3:2e:9c:67:f5:70:15:83:c7:29:99:d4:
         48:af:88:ce:32:b1:46:d7:c2:fa:05:7b:c1:80:75:3c:8d:88:
         4e:ee:cb:3c:05:51:b0:80:a5:ed:61:38:91:0a:6f:0d:60:8a:
         54:9d:e7:b8:2f:61:3a:77:67:ca:e8:dd:0b:38:56:2b:fb:ea:
         69:4a:35:27:61:47:db:fc:e0:c4:7d:23:ab:86:f6:ba:da:f2:
         3e:19:05:23:58:1d:60:36:7c:61:9b:4a:a8:7d:f7:dd:4f:67:
         4a:68:97:6a:73:86:51:ce:f2:a2:bc:f4:28:35:df:55:7e:87:
         4f:e3:b5:06:70:28:7d:19:46:33:6e:03:16:8f:97:3f:1e:99:
         48:29:1e:64:8d:9b:8a:97:63:27:6b:96:de:2d:5e:23:6a:bb:
         63:6d:9c:c9:a3:76:49:fc:31:cd:aa:53:8e:9d:ca:18:56:c1:
         98:87:7f:a9:ce:8d:69:1e:51:40:b8:19:f6:5d:f9:fe:fd:c8:
         8e:dd:91:f3:24:ab:a5:4b:9f:92:3e:30:61:72:af:b9:38:95:
         33:10:5e:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 03:30:59 2026 by rpki-client