Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/f5cc1e-a294-45c7-9d10-f1bc956858aa/1/pszH03YZ_dof84uT_s5gq9SYq4Q.mft
File:                     pszH03YZ_dof84uT_s5gq9SYq4Q.mft (raw, json)
Hash identifier:          rVr+tK/3J3QZzxg/wIEvuHzqP0LbeHetIXalwq5XT/Y=
Subject key identifier:   21:4C:FD:D9:2E:6B:EC:2C:08:11:7F:F2:A0:F9:19:8A:B6:C4:C8:BF
Authority key identifier: A6:CC:C7:D3:76:19:FD:DA:1F:F3:8B:93:FE:CE:60:AB:D4:98:AB:84
Certificate issuer:       /CN=a6ccc7d37619fdda1ff38b93fece60abd498ab84
Certificate serial:       01A092B47D5F2E87E84365282A188962301E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pszH03YZ_dof84uT_s5gq9SYq4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/f5cc1e-a294-45c7-9d10-f1bc956858aa/1/pszH03YZ_dof84uT_s5gq9SYq4Q.mft
Manifest number:          0345
Signing time:             Fri 11 Sep 2026 23:01:36 +0000
Manifest this update:     Fri 11 Sep 2026 23:01:36 +0000
Manifest next update:     Sat 12 Sep 2026 23:01:36 +0000
Files and hashes:         1: cNWWHlQTLoBnWDX0Cr-HJhDwkyQ.roa (hash: RBDJxnmtcnqGTkRo8S/I5iM/CbwoBW03aRJgb8eIgr4=)
                          2: pszH03YZ_dof84uT_s5gq9SYq4Q.crl (hash: Tdl/dbZG6oj6/KkWYqhBk+9GTHGvWtK7tBcHnOw7ZRc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/f5cc1e-a294-45c7-9d10-f1bc956858aa/1/pszH03YZ_dof84uT_s5gq9SYq4Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/f5cc1e-a294-45c7-9d10-f1bc956858aa/1/pszH03YZ_dof84uT_s5gq9SYq4Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pszH03YZ_dof84uT_s5gq9SYq4Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 12 Sep 2026 23:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:92:b4:7d:5f:2e:87:e8:43:65:28:2a:18:89:62:30:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6ccc7d37619fdda1ff38b93fece60abd498ab84
        Validity
            Not Before: Sep 11 23:01:36 2026 GMT
            Not After : Sep 12 23:01:36 2026 GMT
        Subject: CN=214cfdd92e6bec2c08117ff2a0f9198ab6c4c8bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e7:15:9a:9d:a0:10:fe:1c:3f:a0:4a:9e:a7:
                    30:d9:c3:9f:14:ae:a7:30:32:c2:c4:55:82:d9:22:
                    71:13:f7:b7:88:59:c7:02:6d:c4:2e:7b:9a:43:9a:
                    7c:b5:f2:81:8d:ff:24:2d:f1:3e:f9:ba:f6:64:ce:
                    34:64:31:a8:be:83:01:05:fd:dd:88:5b:30:aa:0d:
                    cd:39:5f:9d:f3:66:af:0f:ee:08:91:f5:04:93:e6:
                    44:9b:5c:ba:3b:d9:3e:29:d6:f4:4a:dd:8e:80:15:
                    da:d1:13:58:2f:1e:c9:4d:5b:3b:cb:b4:09:a2:00:
                    2c:a1:bb:cf:03:d8:c8:33:68:92:95:f5:cb:cc:3c:
                    8a:89:98:cb:25:13:07:d7:27:65:e2:a4:4a:05:52:
                    bc:26:af:1f:7d:1d:4f:4c:17:33:fd:9b:d8:11:39:
                    6c:b0:7b:c8:77:04:31:b0:09:76:e6:4f:43:55:82:
                    3d:2e:a2:f7:e3:8b:63:d0:8c:da:16:b1:72:1c:57:
                    87:9f:2e:20:40:bc:90:48:c1:7a:bb:32:b7:08:2f:
                    4c:8f:1a:e6:a5:bd:e5:91:d3:db:d5:7e:a2:15:d4:
                    b3:69:b3:ac:b8:a2:83:b8:41:08:18:77:2d:bf:3d:
                    55:eb:29:6c:86:ed:db:87:75:9f:f3:9d:ad:c0:ca:
                    3d:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:4C:FD:D9:2E:6B:EC:2C:08:11:7F:F2:A0:F9:19:8A:B6:C4:C8:BF
            X509v3 Authority Key Identifier:
                keyid:A6:CC:C7:D3:76:19:FD:DA:1F:F3:8B:93:FE:CE:60:AB:D4:98:AB:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pszH03YZ_dof84uT_s5gq9SYq4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f5cc1e-a294-45c7-9d10-f1bc956858aa/1/pszH03YZ_dof84uT_s5gq9SYq4Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f5cc1e-a294-45c7-9d10-f1bc956858aa/1/pszH03YZ_dof84uT_s5gq9SYq4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:d5:cc:38:4e:29:90:e0:ff:fa:97:38:bb:6f:ca:02:bb:fe:
         a9:a5:a0:7e:1f:ce:7d:c5:c4:53:c9:9e:a7:6e:4c:00:33:69:
         39:45:10:17:36:f2:07:4d:66:fe:25:f5:27:68:c1:d3:d6:7d:
         e7:c3:d6:c4:bb:d4:d5:3a:ef:a0:38:5d:31:29:c2:ce:05:7c:
         5b:ff:4b:7e:43:3c:3f:8a:b2:99:21:cf:e0:6d:8e:f2:af:e6:
         02:81:37:e3:f2:82:e1:e4:2f:f0:45:f2:9a:32:a9:42:cf:81:
         88:41:2d:86:ed:98:ac:31:83:db:69:d1:17:8c:ac:cd:32:11:
         63:ca:8c:ef:54:6a:8f:a2:31:68:fb:7e:fc:63:9d:77:45:c5:
         1b:38:5d:f6:10:60:6e:95:0a:ec:48:39:b3:63:b3:de:c0:db:
         85:17:54:f6:aa:3a:ec:7e:0b:8a:23:ea:8e:d0:05:d5:fa:23:
         b8:6c:e0:38:07:ad:df:56:de:03:bf:25:d5:7a:db:9d:33:5a:
         08:14:5d:49:3b:7b:70:4e:57:f0:0e:d6:01:03:4e:16:b2:2c:
         8c:e7:33:27:80:22:7c:9c:83:a9:7c:78:b0:7b:78:f7:40:26:
         8b:4c:05:a6:b3:99:84:b1:e9:fa:67:bd:ee:22:2c:f1:07:b5:
         09:cc:05:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 09:43:51 2026 by rpki-client