Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft
File:                     6i0QK2ESsNmouO66xLl8gZ-XxgY.mft (raw, json)
Hash identifier:          Q+ou9wh5vjx8uRe6vBweIzP3v0myvdYSQ58VaBggGQs=
Subject key identifier:   ED:A5:0B:D0:AB:24:5D:01:85:B9:AD:9F:08:4B:E9:EA:46:12:B2:0A
Authority key identifier: EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06
Certificate issuer:       /CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606
Certificate serial:       01A06E3947CF09FB2F088EF4D87F40AB098A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft
Manifest number:          1A44
Signing time:             Fri 04 Sep 2026 21:00:42 +0000
Manifest this update:     Fri 04 Sep 2026 21:00:42 +0000
Manifest next update:     Sat 05 Sep 2026 21:00:42 +0000
Files and hashes:         1: 1sZcd1tzDnfBO7H0zC0MHfPctz8.roa (hash: QGxYJT3nkBpWjK3CNe4elV7r+TMzHWhmpzIEj94vs3c=)
                          2: 54sLosdN-3E7M3xXYL9Sj8R-JFA.roa (hash: YOEtT3WDb6q1KIYxMWD9C0mL5TEs7xv26wN9VzwyZz0=)
                          3: 6Gtxp8Qdby2A47LT_KYiakuDrtE.roa (hash: BA8nh9grEBQ7UWUuUef5NazdmOCM03HbfFpXWfVVGx8=)
                          4: 6i0QK2ESsNmouO66xLl8gZ-XxgY.crl (hash: A6t8lF6Pou9ygsKMMb/4Eu91msp7xijvXianCvBeITY=)
                          5: 95I5kKDngJoeemazNmLfxx-xsMc.roa (hash: 065L1fud09uTnT5KcltoPCtY3EeXJM9Wrb5i9Pok3ps=)
                          6: Dv0Vw0VROLNm1BcBtDyYsL1OWew.roa (hash: 01fMcqnBkdQNXIGFfqpx1E0l1qguhB0pAhcOj3jJeNI=)
                          7: F02EU11_7xVfFjx-pCbSkWfBrg8.roa (hash: DUZIPK/4jtz1rxvakhmYqy+xcU6jj18QDH1Ql1+dRcs=)
                          8: F9dyWb4kMnrKgNjaaV2af3tnF7Y.roa (hash: n0E0JoegNTDFrRD6xDuHJFvI1HNuGNwn2VnWlNNc7R8=)
                          9: JolCrPCyt6FQAjQdkxeUkG5hr_c.roa (hash: tR07fd6qiP9t7/rCVkFLRiRbNcRHO1l6JwkPDCkWrQw=)
                          10: NPH-fpbfT4l7tqIfzpWpmBL612E.roa (hash: usDB/lMLbqs1qEd8MJSCM8v9kpKJXr8T1CUNQ60yINA=)
                          11: SrRwCgzFOC1drONrVTaISNVrqgA.roa (hash: HK/1AO6XtRFFu0tl8QX3gVgCZfrsH1GVM2AzeVHcMns=)
                          12: dCf1-4ZtnEs1hhS0WpTGObxa7Ng.roa (hash: 6OBl94EqhunP39tyGGpYvE0DCjwIvRqo82T/Ck00I4Y=)
                          13: hKABsk9R3ual0SAgA_RoQAJK-Ss.roa (hash: LPGqLFiU6Q6gycTMXFmkeg9Hl/W1u11tyU44+pVVPT0=)
                          14: k7j6q1-pw3Iaxb9nrG2BMp2wduU.roa (hash: xqHAe/RA0XRCRSuPeTv3PfTrsCgVTADjTCxtxlrYH9c=)
                          15: tLZAPbek2ouyTp4yevQZizAET8s.roa (hash: tADyVnGgx5bMdr4dmJRvuG7KHkNYQR4uWTbCCyaMg+Y=)
                          16: toIwvzDtnMcr8Vr654lueB2nW5c.roa (hash: L7+3Y6vOhJhPEyX8n5fzWSUXTONaoyZXyjV+eIZHIak=)
                          17: uX8Zs5ulhqDalBSN3K4xPZW9tXY.roa (hash: 6HcSVHLDdw2ylb62hc/7yVqnNyshgu1qSWPjdsbZqqY=)
                          18: wGWva6DlhR1xhUCt4j4w0NB931w.roa (hash: GSuxwm3owrdlcnA22w3R59fDYZXJvPJoNhLNbwJTGD8=)
                          19: yd640iyO5e1rxw39pTARVi4BhTo.roa (hash: amnrnRntcrBttX4vOm5cGFFnnGSWzHrsdN8eo5YqUec=)
                          20: zeEPpitSOzyXHndgpLbTNYerulw.roa (hash: oTCVEfUpyQEEQ/RQUBU/rrU5tazeZweEU7eMxBkYLIA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 20:21:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6e:39:47:cf:09:fb:2f:08:8e:f4:d8:7f:40:ab:09:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606
        Validity
            Not Before: Sep  4 21:00:42 2026 GMT
            Not After : Sep  5 21:00:42 2026 GMT
        Subject: CN=eda50bd0ab245d0185b9ad9f084be9ea4612b20a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:18:32:9f:9f:b0:fe:38:be:46:c6:96:b4:5a:
                    fd:0f:48:e7:c9:02:c1:79:e0:b9:0a:60:c9:62:7e:
                    bc:60:1e:da:20:5f:36:71:e6:86:d5:85:03:e8:93:
                    e3:0d:03:bc:cb:c0:80:40:ba:c8:17:0f:ad:ec:12:
                    b4:00:95:af:bd:e4:4f:e8:f2:96:b0:bf:c2:35:85:
                    b5:f9:1f:72:04:a9:6c:ce:69:0b:a1:d3:ea:95:5b:
                    c3:15:b5:4d:bb:3c:bf:36:b8:b3:8b:77:6f:9a:19:
                    24:ff:6b:cd:00:45:92:ef:c7:e0:7c:6b:32:35:29:
                    b8:fc:c1:b5:c6:99:d0:12:aa:d3:1b:9a:47:37:7a:
                    df:d4:a6:6b:99:65:36:5c:cd:98:9a:18:16:51:0f:
                    bb:5b:80:b0:5c:f1:ea:c6:3c:b9:8a:65:19:ac:6c:
                    37:a6:e2:dd:60:f0:a8:90:33:1b:b9:6e:3f:9e:c7:
                    e1:1a:3b:66:8d:88:63:fd:05:46:88:2b:07:c7:b5:
                    31:a5:4c:b3:f1:db:c4:bd:c5:ba:58:ed:8a:cb:c2:
                    b8:be:5f:14:c3:ce:eb:3b:14:be:44:68:84:19:40:
                    b1:e1:33:3d:9f:19:5f:6e:38:63:fb:61:ba:c7:34:
                    df:d4:01:d9:63:2e:51:dc:3b:87:a7:70:ad:1a:83:
                    c7:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:A5:0B:D0:AB:24:5D:01:85:B9:AD:9F:08:4B:E9:EA:46:12:B2:0A
            X509v3 Authority Key Identifier:
                keyid:EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:35:25:9b:47:5e:5c:f3:78:a6:9a:6f:78:98:0c:a8:1f:cd:
         63:25:ff:ee:69:15:84:7e:6e:d3:17:ea:09:54:5e:15:d5:45:
         73:ea:2a:23:6d:72:42:ab:c1:7d:e5:45:f8:ce:7c:11:20:ad:
         29:18:50:7f:66:ec:71:7e:72:7e:77:b0:fe:13:20:fe:a5:b9:
         66:c3:51:c8:8c:db:13:e4:be:92:ae:71:e0:6d:66:52:0c:f8:
         3c:9d:e3:1e:04:d5:75:3d:20:24:15:88:1d:2f:87:55:12:17:
         90:b3:72:6f:17:9a:aa:ec:3b:da:8b:95:6c:b8:1a:6f:94:34:
         f0:03:50:5f:55:fe:15:e8:ce:67:60:c0:87:a7:a5:85:b3:c8:
         e2:f1:78:b9:4d:c6:3f:a8:57:70:89:cd:f9:de:80:04:6e:32:
         be:fa:72:9a:5b:08:38:d1:ff:41:3c:c4:f2:aa:5a:0d:33:87:
         71:12:a6:62:28:04:31:1f:f8:22:35:9f:6d:1a:97:2d:3e:4d:
         9c:ab:53:35:53:44:b3:55:8c:cf:a2:2d:b9:c3:4a:fc:27:3f:
         46:8f:09:2e:cd:58:53:2b:05:84:c5:ba:64:31:93:73:de:02:
         3b:0c:07:95:0e:70:9f:13:00:11:11:44:07:64:2e:9a:3b:5a:
         6e:6a:b0:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:54:21 2026 by rpki-client