Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.mft
File:                     MtRJGf3QivuaTQqHeJIwESUd1_A.mft (raw, json)
Hash identifier:          j6n8NQPxGVc3+bdnDnvxq+V2AezgAvLHrU39epOWKj8=
Subject key identifier:   22:EB:6F:0F:9F:11:7D:A1:01:7A:6B:3E:26:A4:A5:35:58:9E:F6:68
Authority key identifier: 32:D4:49:19:FD:D0:8A:FB:9A:4D:0A:87:78:92:30:11:25:1D:D7:F0
Certificate issuer:       /CN=32d44919fdd08afb9a4d0a8778923011251dd7f0
Certificate serial:       01A040BBD3DF7384D46F75330F731B474DFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MtRJGf3QivuaTQqHeJIwESUd1_A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.mft
Manifest number:          10BB
Signing time:             Thu 27 Aug 2026 01:00:46 +0000
Manifest this update:     Thu 27 Aug 2026 01:00:46 +0000
Manifest next update:     Fri 28 Aug 2026 01:00:46 +0000
Files and hashes:         1: 0XCnRmv9lrifFN6Zm_R0C_c5zNk.roa (hash: nCcYx5cHOz71cIaI4A31GrDOCs0TzM6iUrtdozko0AI=)
                          2: 1M3xsOh_lxfEcm0dFrzEOzv-AnE.roa (hash: dnKbu4kjPt0WacaLtGX58/WNe6QRITRJWyWfqyKVROk=)
                          3: 6GzTRnPNHXVRDT3xQFhGRFdIn_Y.roa (hash: k/eqVDu9ctRvfGXfTGZ0Lbt1TvSAAJw3Wqihq5YEZ04=)
                          4: MtRJGf3QivuaTQqHeJIwESUd1_A.crl (hash: e1ixWP/C9mdRajJJQuLJkoQhhmBvwrvioPNMyYp3nzM=)
                          5: VTg1Pqh6gGxJdPipIvY_2TxmpEE.roa (hash: Re8cRmXCQziE0FT8UEdT+XdkZBUXadu9ZmK30fLj6l0=)
                          6: mC7mkIwEqc9a-OMJRYaVx_ENs6k.roa (hash: Ere1hv6QWF8tKoShPDJZzGSBUfmu4dnSImCVYAe6USY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MtRJGf3QivuaTQqHeJIwESUd1_A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:40:bb:d3:df:73:84:d4:6f:75:33:0f:73:1b:47:4d:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32d44919fdd08afb9a4d0a8778923011251dd7f0
        Validity
            Not Before: Aug 27 01:00:46 2026 GMT
            Not After : Aug 28 01:00:46 2026 GMT
        Subject: CN=22eb6f0f9f117da1017a6b3e26a4a535589ef668
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b4:10:3b:15:34:ef:b7:69:ef:ed:94:7f:7e:
                    d9:2d:66:bf:82:39:9e:79:78:41:bf:08:02:f3:69:
                    cf:64:2f:fb:97:b7:38:eb:c4:ee:ae:a5:44:6f:cf:
                    fb:f0:fa:71:8a:78:d4:f5:d7:68:65:de:77:9a:69:
                    5e:7f:d1:b4:6f:ed:49:c5:51:40:4d:db:0a:f2:21:
                    a3:38:90:19:f3:53:59:64:b0:a3:45:a6:de:b2:d7:
                    fa:08:d0:f3:ec:44:c4:c4:35:c4:dd:1b:b1:d4:98:
                    9d:23:54:d4:cc:d2:f5:f6:aa:8b:63:59:e8:c5:9a:
                    c4:ce:a4:a7:bd:7b:b1:90:c8:8f:dd:fc:41:b3:98:
                    ed:41:ab:2a:b8:4e:17:66:89:3f:27:d9:b8:84:23:
                    12:46:c0:0e:e7:c5:8d:d8:72:29:01:fb:d2:c4:04:
                    11:e8:00:c9:2b:aa:29:8b:21:03:2f:6b:fc:63:55:
                    8f:4a:54:ca:50:9c:8a:3e:71:25:82:84:ac:a6:db:
                    2e:72:84:d6:bf:bb:0b:17:eb:31:7e:9d:8e:36:eb:
                    30:0b:28:21:d1:7c:e8:ed:11:ff:15:4a:3b:73:f3:
                    32:46:11:47:93:c7:32:b5:55:b5:a9:ee:5d:da:be:
                    57:11:ff:ff:ef:d1:3b:39:3a:41:34:2b:8c:60:08:
                    05:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:EB:6F:0F:9F:11:7D:A1:01:7A:6B:3E:26:A4:A5:35:58:9E:F6:68
            X509v3 Authority Key Identifier:
                keyid:32:D4:49:19:FD:D0:8A:FB:9A:4D:0A:87:78:92:30:11:25:1D:D7:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MtRJGf3QivuaTQqHeJIwESUd1_A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:a1:06:ee:18:49:f4:9f:c2:4b:82:37:98:92:d0:29:58:55:
         88:30:e3:08:54:3b:0e:cb:14:15:fd:86:73:3e:c0:f4:cb:3e:
         0e:24:82:21:1c:62:4c:96:4f:63:6d:91:c3:1b:c2:d9:cf:f0:
         0a:b8:16:3f:ce:bd:93:31:04:36:35:12:2c:0b:76:ef:30:24:
         8b:36:bc:0f:f2:eb:0c:f5:6b:51:6e:bf:65:ba:94:50:cb:ca:
         1e:dc:8f:6b:a9:ac:7c:a0:63:7b:11:ee:fb:f8:ae:84:d2:d5:
         dc:38:4f:f4:15:77:26:8d:6b:8b:2d:4b:2a:77:38:5e:33:65:
         e0:9c:75:b6:db:22:f5:47:b6:9e:24:36:c1:3e:b6:97:9e:94:
         13:bd:18:33:b0:5b:77:c1:d6:7b:cd:f7:9b:c0:44:78:4f:f0:
         b0:51:3c:fc:7f:32:f0:a5:37:fc:9d:dc:f8:59:28:d1:c2:f0:
         e5:a7:b1:4c:15:bc:b5:8c:13:3a:ac:f9:ec:ff:50:76:7f:ec:
         aa:98:6b:3f:0d:87:73:fd:10:a8:d0:99:02:b0:62:e3:9b:71:
         0f:91:0b:dd:d5:f4:e4:d9:b8:88:e3:ac:88:08:bd:7c:a6:9e:
         7c:2f:85:b1:44:0b:19:cb:4b:a9:51:22:25:c2:de:9e:41:42:
         9a:b6:05:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 08:46:31 2026 by rpki-client