Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/98149a-b996-45dc-8fcc-53e6c14fcc0c/1/peab2C1ewMe9PV3J-SkC8141ekU.mft
File:                     peab2C1ewMe9PV3J-SkC8141ekU.mft (raw, json)
Hash identifier:          msFfqtNvl15FkvtRPnNJ8ciwL+DeL58nEgmdf1qN8Y8=
Subject key identifier:   A9:DD:D0:D3:F3:7A:C7:78:FB:C6:7A:EC:7F:6B:76:65:28:E3:C1:80
Authority key identifier: A5:E6:9B:D8:2D:5E:C0:C7:BD:3D:5D:C9:F9:29:02:F3:5E:35:7A:45
Certificate issuer:       /CN=a5e69bd82d5ec0c7bd3d5dc9f92902f35e357a45
Certificate serial:       01A08A1E33253D445CFC5A940BFE47C93E4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/peab2C1ewMe9PV3J-SkC8141ekU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/98149a-b996-45dc-8fcc-53e6c14fcc0c/1/peab2C1ewMe9PV3J-SkC8141ekU.mft
Manifest number:          1787
Signing time:             Thu 10 Sep 2026 07:00:29 +0000
Manifest this update:     Thu 10 Sep 2026 07:00:29 +0000
Manifest next update:     Fri 11 Sep 2026 07:00:29 +0000
Files and hashes:         1: My3qNmHJ5QGSZzzVARsae6-0pQM.roa (hash: fExmv/CwHxkIE5BA8KN6D8iXXqOSJs1/4rMdSdpJlEU=)
                          2: peab2C1ewMe9PV3J-SkC8141ekU.crl (hash: grX8U/j7jNAk8pRGFcLR437aVscgOO7j6tJGJ773eM4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/98149a-b996-45dc-8fcc-53e6c14fcc0c/1/peab2C1ewMe9PV3J-SkC8141ekU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/98149a-b996-45dc-8fcc-53e6c14fcc0c/1/peab2C1ewMe9PV3J-SkC8141ekU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/peab2C1ewMe9PV3J-SkC8141ekU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 07:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:1e:33:25:3d:44:5c:fc:5a:94:0b:fe:47:c9:3e:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5e69bd82d5ec0c7bd3d5dc9f92902f35e357a45
        Validity
            Not Before: Sep 10 07:00:29 2026 GMT
            Not After : Sep 11 07:00:29 2026 GMT
        Subject: CN=a9ddd0d3f37ac778fbc67aec7f6b766528e3c180
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:08:ce:e2:b7:fb:3c:0a:a4:7d:53:3b:c3:e2:
                    5c:23:48:79:da:61:9b:7c:c4:41:ca:1f:76:4d:d6:
                    f4:49:9e:3a:02:f3:8d:de:07:e8:4c:83:d4:b8:f1:
                    10:ff:7a:50:a1:d4:f0:c7:1c:26:29:b0:11:c6:7c:
                    58:f7:e3:b2:9f:06:bd:49:a9:e4:55:2d:1d:d8:b5:
                    4b:a7:60:f0:fd:8a:37:c1:28:6b:f6:36:0e:5f:ee:
                    af:2b:c1:ba:76:fb:4a:fe:57:b3:cf:05:ba:8d:92:
                    8f:54:6b:9e:c7:ba:67:51:17:d5:7a:b4:5d:3a:02:
                    db:35:99:01:f2:01:88:40:2d:25:45:3c:42:b1:eb:
                    b2:49:dc:52:e9:d5:bd:ee:1c:90:f4:72:e8:f0:37:
                    cd:f7:57:c4:d4:8b:4c:6a:0a:81:fd:3c:e8:ea:08:
                    69:c6:b9:1c:f7:66:58:7a:43:07:80:75:b3:be:06:
                    31:97:de:d7:21:be:29:b5:b4:52:26:85:71:e7:bb:
                    d7:a2:35:04:b5:36:6f:30:f8:8c:94:09:9d:af:d7:
                    8b:6b:c7:70:a4:7b:3b:04:e4:4e:b5:21:80:08:70:
                    22:3b:40:45:d9:d6:eb:65:43:a3:63:ee:e3:ff:49:
                    f6:49:43:d1:10:1e:03:0d:e0:0b:dc:9e:12:9e:49:
                    3f:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:DD:D0:D3:F3:7A:C7:78:FB:C6:7A:EC:7F:6B:76:65:28:E3:C1:80
            X509v3 Authority Key Identifier:
                keyid:A5:E6:9B:D8:2D:5E:C0:C7:BD:3D:5D:C9:F9:29:02:F3:5E:35:7A:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/peab2C1ewMe9PV3J-SkC8141ekU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/98149a-b996-45dc-8fcc-53e6c14fcc0c/1/peab2C1ewMe9PV3J-SkC8141ekU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/98149a-b996-45dc-8fcc-53e6c14fcc0c/1/peab2C1ewMe9PV3J-SkC8141ekU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:ec:d4:27:74:e4:3f:9a:ca:11:bb:a9:83:7d:57:0f:01:ed:
         97:8c:18:9c:f7:2f:20:29:70:6a:0f:bf:9e:39:87:1b:5b:a7:
         04:44:0e:ce:1e:23:2d:89:f4:4c:03:d6:c2:12:92:65:8b:f1:
         9e:67:5a:f4:ba:3c:85:c0:89:7c:f8:87:61:81:5b:d4:2a:88:
         b2:b0:20:83:2c:e4:95:5b:f5:6b:bd:a6:b0:ee:74:b0:23:03:
         45:17:62:4f:6e:84:98:85:b9:96:9d:c7:b0:d8:b2:ea:19:23:
         ff:86:4f:e0:51:2a:ee:1c:3e:51:30:93:12:71:ab:bf:26:78:
         33:20:8a:75:45:fe:5a:6f:ce:21:c3:9d:98:73:d9:b9:22:76:
         0d:ea:38:f3:43:cd:22:8b:35:cf:59:5b:83:8c:11:fa:88:09:
         1b:9a:3e:2d:e6:9d:62:ab:ca:1d:88:92:d0:38:ba:93:5f:6d:
         60:04:0f:99:41:10:8c:7d:0f:f1:e7:f0:ab:ac:d9:2b:9d:7d:
         4e:da:6b:11:d5:5d:04:a1:7a:1d:a4:9c:a9:f4:b1:eb:15:86:
         9b:03:b3:ce:ad:24:bc:bc:c1:93:e1:35:cb:aa:f5:37:f2:f0:
         7e:66:d3:2c:df:bd:e4:be:56:e2:e2:df:4c:77:95:24:98:67:
         20:0c:66:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 16:11:01 2026 by rpki-client