Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.mft
File:                     b-3wt2FSkK76zF9qprQdnRhD8bY.mft (raw, json)
Hash identifier:          EOr9+08nPtT4sLHCtHbysCVoi4oiLxXRCuQ6FQS+ZY0=
Subject key identifier:   F8:D1:D9:47:58:B6:3E:F6:1A:BA:BF:6E:B4:53:18:A0:90:8B:5A:39
Authority key identifier: 6F:ED:F0:B7:61:52:90:AE:FA:CC:5F:6A:A6:B4:1D:9D:18:43:F1:B6
Certificate issuer:       /CN=6fedf0b7615290aefacc5f6aa6b41d9d1843f1b6
Certificate serial:       01A08C0C9102B65BA518B2B6E834F8531DEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b-3wt2FSkK76zF9qprQdnRhD8bY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.mft
Manifest number:          1A4F
Signing time:             Thu 10 Sep 2026 16:00:28 +0000
Manifest this update:     Thu 10 Sep 2026 16:00:28 +0000
Manifest next update:     Fri 11 Sep 2026 16:00:28 +0000
Files and hashes:         1: 3JCprLbCd_JV3m7EK4otwaRJ6FI.asa (hash: C7m74US1J4rnzhzyN9c9AXYlLYYU1lK9Uvvic8/k1+0=)
                          2: 5EKQPrPNwyvCBR3SFmiV77L19bE.roa (hash: 7kjfjqomqFD/efQnWdT+7ek8PZzhOejx7JJd6FEa/kA=)
                          3: b-3wt2FSkK76zF9qprQdnRhD8bY.crl (hash: cKgj+AiVmUbmFjYEgUobpMetuxeKJvSFUqHSXho8LKs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b-3wt2FSkK76zF9qprQdnRhD8bY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8c:0c:91:02:b6:5b:a5:18:b2:b6:e8:34:f8:53:1d:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fedf0b7615290aefacc5f6aa6b41d9d1843f1b6
        Validity
            Not Before: Sep 10 16:00:28 2026 GMT
            Not After : Sep 11 16:00:28 2026 GMT
        Subject: CN=f8d1d94758b63ef61ababf6eb45318a0908b5a39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:93:23:e3:00:23:02:54:06:21:c4:4a:5b:6c:
                    c8:5f:3e:1e:ae:94:ac:2e:b7:9a:34:e2:d2:e0:d4:
                    18:b1:5f:05:ed:53:18:9c:e8:4e:4e:78:04:82:33:
                    e5:d1:36:75:78:80:e4:09:63:64:60:f8:12:d6:ea:
                    12:43:ab:8c:2c:19:f6:b6:a3:58:b8:5c:e3:de:ee:
                    c9:53:93:0e:2e:93:25:26:dc:f7:74:34:b7:50:fd:
                    33:36:9d:11:fa:a8:9f:d9:c7:cb:4f:a2:d7:b1:a4:
                    49:14:89:dc:c9:a0:3a:ff:3a:2b:72:81:e6:2e:bd:
                    62:f2:ad:cc:99:d7:a0:3d:98:0a:5b:e2:45:8c:af:
                    45:ec:6c:eb:55:75:da:ef:09:05:52:7a:60:a4:34:
                    f4:96:5f:2b:7f:c5:aa:01:85:3e:17:8e:27:18:c4:
                    72:4a:99:29:f8:f2:68:b3:d9:d0:4f:91:c3:b2:e6:
                    c9:2a:8d:4b:60:c3:b6:10:25:c4:23:e3:b3:ae:fc:
                    f4:92:b0:b6:f9:d7:23:b6:fe:ba:30:f5:2e:82:ef:
                    b6:6f:33:b3:cd:12:af:db:6b:b6:15:8a:6d:7a:61:
                    c9:de:2a:fc:71:c6:27:40:57:47:e0:c5:08:c3:22:
                    20:f1:43:90:70:2d:22:72:e0:7a:78:4a:fa:50:30:
                    0c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:D1:D9:47:58:B6:3E:F6:1A:BA:BF:6E:B4:53:18:A0:90:8B:5A:39
            X509v3 Authority Key Identifier:
                keyid:6F:ED:F0:B7:61:52:90:AE:FA:CC:5F:6A:A6:B4:1D:9D:18:43:F1:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-3wt2FSkK76zF9qprQdnRhD8bY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:c6:0e:fe:0e:d5:65:24:85:55:aa:f9:20:db:b8:c4:b1:e7:
         b9:63:fb:07:ce:b6:25:a0:63:87:9a:b6:3f:42:48:d4:a4:ed:
         cc:c1:37:09:67:8e:6a:f6:5b:c2:6a:c4:d4:40:94:f1:13:05:
         c1:48:8b:3f:32:29:bd:cf:77:ee:64:1f:a7:3e:c3:11:36:54:
         3c:cd:34:a1:b7:8f:ef:6a:e2:b9:57:a3:13:2c:a7:28:97:1f:
         f2:4b:5d:c1:2a:7e:67:ec:6e:1f:45:5d:27:25:46:06:9e:fd:
         5b:26:97:bc:21:94:02:56:e0:6a:ee:5e:dc:30:7d:fb:1b:1c:
         6b:d8:db:23:04:72:c5:b1:c3:07:7d:3e:79:45:48:3e:89:6f:
         5d:63:16:31:05:43:e4:e9:b1:25:68:40:48:a0:80:da:da:b9:
         90:b0:9a:97:cf:42:3a:de:d3:4b:76:24:bc:16:a1:ff:75:d9:
         5e:60:f9:25:6d:ee:58:7c:a7:9a:42:94:b7:bb:dc:be:0c:a8:
         e3:61:19:4e:35:28:9d:a0:05:9f:56:9b:8f:99:cc:20:89:c1:
         76:01:34:19:c8:d0:d7:e6:91:fb:a1:31:c2:56:e4:c1:34:b7:
         da:e8:f5:79:11:91:7e:52:fe:24:be:a5:4f:b9:2a:ce:e5:87:
         f4:e3:0d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:17:03 2026 by rpki-client