Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/72/4e403d-9bf1-4f74-bd2a-98a66794cb5f/1/bu3CyGSno6EnqBvPs3DAoHQ9sdM.mft
File:                     bu3CyGSno6EnqBvPs3DAoHQ9sdM.mft (raw, json)
Hash identifier:          UphEkIG/a6uFqVJHvFeSvM0cBUpZDfKEzyLwCY+NtuE=
Subject key identifier:   45:78:37:68:A4:94:83:55:AD:B3:2F:10:17:1A:8A:A7:ED:38:C2:75
Authority key identifier: 6E:ED:C2:C8:64:A7:A3:A1:27:A8:1B:CF:B3:70:C0:A0:74:3D:B1:D3
Certificate issuer:       /CN=6eedc2c864a7a3a127a81bcfb370c0a0743db1d3
Certificate serial:       01A0E7403D0A24EC5D4344CEA767E717B80B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bu3CyGSno6EnqBvPs3DAoHQ9sdM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/4e403d-9bf1-4f74-bd2a-98a66794cb5f/1/bu3CyGSno6EnqBvPs3DAoHQ9sdM.mft
Manifest number:          6B
Signing time:             Mon 28 Sep 2026 09:02:21 +0000
Manifest this update:     Mon 28 Sep 2026 09:02:21 +0000
Manifest next update:     Tue 29 Sep 2026 09:02:21 +0000
Files and hashes:         1: 0JvgPvNBpx-tXwjL49T-oGlhRJE.asa (hash: t6yvMIxcmcRuJu3oO8ltIl4K6uR5Cv+zFrp0bM60pxs=)
                          2: FAfYzrCqQ3IM3xoBnyGyfv0aAkE.asa (hash: 4bsfZ4n/LM0O/iMtpNn5YaFkWDUZVHril55Rw1Ijmbw=)
                          3: UKAb3BOkisRzJDu0FgnxiUVPR9A.asa (hash: hk13PA/WmxBs2h/rKn7+UjZx+iuBVhstVL8L2PDABiA=)
                          4: bu3CyGSno6EnqBvPs3DAoHQ9sdM.crl (hash: kOAbrpds+REYnwgSy1VnGgMCrQ1WFGINEVTk46fBljA=)
                          5: jOwYdlbKNzM1zi93IL4xEbNx1s8.roa (hash: TGDCjyb535Hc1opJTwsMrKzDGebIWLmrRjERGmc1ztE=)
                          6: nJjpIHBTEQs7EJPe49KrmTgbM9I.roa (hash: GSChoEPI1gd7EiXd1cr/yljcJpa7XhoXkgwBvTLgANc=)
                          7: tn3pSILsodE83qD62n9ko4tKfw4.roa (hash: EcQBq4mZ/P31mVUxCqCb9CbySxP5notCVg7BJL4Va/c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/4e403d-9bf1-4f74-bd2a-98a66794cb5f/1/bu3CyGSno6EnqBvPs3DAoHQ9sdM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/4e403d-9bf1-4f74-bd2a-98a66794cb5f/1/bu3CyGSno6EnqBvPs3DAoHQ9sdM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bu3CyGSno6EnqBvPs3DAoHQ9sdM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 09:02:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e7:40:3d:0a:24:ec:5d:43:44:ce:a7:67:e7:17:b8:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6eedc2c864a7a3a127a81bcfb370c0a0743db1d3
        Validity
            Not Before: Sep 28 09:02:21 2026 GMT
            Not After : Sep 29 09:02:21 2026 GMT
        Subject: CN=45783768a4948355adb32f10171a8aa7ed38c275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:07:13:28:62:05:97:26:56:a5:b5:0f:a0:bd:
                    d0:75:60:f3:38:00:49:e5:36:48:97:59:b5:9e:52:
                    63:6d:eb:4e:7d:70:75:98:3f:a2:70:bf:7c:f2:c2:
                    89:8c:9e:5a:23:cc:8a:7b:4c:e9:90:49:49:eb:64:
                    06:cc:0c:76:7f:60:5f:2c:52:b4:0f:17:8e:9f:0c:
                    50:11:81:4d:7b:4d:48:3a:c1:9a:3a:66:24:b3:ff:
                    09:f9:55:7b:5f:d9:d9:76:d7:d2:6d:15:b0:4c:07:
                    fe:76:25:26:73:93:ae:99:ee:d6:ef:af:5c:93:64:
                    30:15:64:2a:d3:06:ff:2b:c4:d3:3e:5e:7e:d2:9c:
                    ff:3b:c4:c9:2c:5a:e5:ee:da:5b:86:17:eb:5f:7b:
                    95:84:a7:7c:e0:52:48:3c:e6:25:b4:5d:fb:9e:18:
                    82:d4:68:b9:ba:33:e7:ff:2f:26:5b:f2:91:55:68:
                    a6:90:04:8e:fe:dc:2e:5b:8a:a2:52:07:1e:92:3b:
                    e0:19:43:fd:63:63:37:e5:da:51:07:71:a4:9b:62:
                    ce:91:37:2c:ca:13:7a:72:cd:89:be:78:da:ac:b5:
                    da:a3:97:30:ef:ce:96:2e:97:49:27:57:9a:f4:20:
                    3d:da:83:4b:cc:02:de:d0:a1:9c:f1:46:ba:1c:74:
                    76:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:78:37:68:A4:94:83:55:AD:B3:2F:10:17:1A:8A:A7:ED:38:C2:75
            X509v3 Authority Key Identifier:
                keyid:6E:ED:C2:C8:64:A7:A3:A1:27:A8:1B:CF:B3:70:C0:A0:74:3D:B1:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bu3CyGSno6EnqBvPs3DAoHQ9sdM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4e403d-9bf1-4f74-bd2a-98a66794cb5f/1/bu3CyGSno6EnqBvPs3DAoHQ9sdM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4e403d-9bf1-4f74-bd2a-98a66794cb5f/1/bu3CyGSno6EnqBvPs3DAoHQ9sdM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:11:6e:81:94:eb:51:85:6a:86:0a:fd:c8:1f:7d:30:0a:84:
         95:2f:43:ba:46:b7:2e:16:46:b4:f1:6f:6c:5f:14:6f:eb:62:
         81:db:3e:e3:3c:82:4f:c5:f1:36:09:61:25:0c:2c:63:0b:22:
         bb:73:2b:04:9a:7c:c7:88:a7:d2:1f:f2:b4:a2:da:7a:15:7a:
         47:96:a7:20:60:65:91:f8:cf:8b:ad:23:5b:74:d5:df:d7:a6:
         eb:88:0f:d5:e8:f7:f1:44:b3:65:d7:92:58:d3:31:8e:46:23:
         e3:8f:a8:f5:a0:51:41:9c:6e:bb:06:02:fd:30:a0:58:9e:15:
         f7:a0:9b:c9:9d:0e:8d:19:8d:68:42:c8:57:13:98:9e:23:b7:
         65:e9:0c:fc:77:fc:69:cb:8f:e8:11:72:de:ea:5a:af:2f:6f:
         12:7d:80:b4:9f:cb:cc:d9:da:dd:df:9f:4e:65:c6:07:ba:ac:
         38:59:4a:6f:fe:9d:bf:46:e2:01:bf:f4:94:e2:22:24:f6:27:
         ba:38:88:54:b0:1d:5b:0c:c8:83:31:78:8f:d4:f0:2b:a4:71:
         19:a6:65:d5:1d:3d:e1:35:0d:c2:a7:3a:b8:de:8d:f7:1e:06:
         9b:e4:f6:19:e4:e7:4c:4c:01:dc:77:ec:21:a1:3e:3b:8b:77:
         19:5c:f9:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----