Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.mft
File:                     bb1RV2tKk0YKRlrzXmv1UPVUiJQ.mft (raw, json)
Hash identifier:          uJA/21RWy1XvsNtZ7c/Mui0ztu2RmkrEbcgRRd/KKcA=
Subject key identifier:   63:25:16:A7:85:34:CB:85:96:2D:A9:FB:5D:23:6E:F2:AF:75:32:FB
Authority key identifier: 6D:BD:51:57:6B:4A:93:46:0A:46:5A:F3:5E:6B:F5:50:F5:54:88:94
Certificate issuer:       /CN=6dbd51576b4a93460a465af35e6bf550f5548894
Certificate serial:       01A06E3992B5F51DF0CE28ECFE9542F8C802
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.mft
Manifest number:          111E
Signing time:             Fri 04 Sep 2026 21:01:01 +0000
Manifest this update:     Fri 04 Sep 2026 21:01:01 +0000
Manifest next update:     Sat 05 Sep 2026 21:01:01 +0000
Files and hashes:         1: 0Ca7AbeYXApVqvCvbAQmVKT6zB4.roa (hash: yajzvHBczLvuRuutMDqrA4C/+S65nBUWHxWPZS+HU6Y=)
                          2: O-In-8EU6bPfnod8wXwR8FyJmbs.roa (hash: uelI0IHExddUnealsb56pd/EXHI/t8Ure6Mfv6igkCw=)
                          3: _vXqV2-g7xwCNYuc9LOG1sJWevM.roa (hash: BJlsW9/rnHnD9aRumzD296n7QaGzXmfbPDZjx3MN9U0=)
                          4: bb1RV2tKk0YKRlrzXmv1UPVUiJQ.crl (hash: YhiYJ1TUeLBckccFXP23cscLrfhU8mKu2ZMQmPic7Hs=)
                          5: j9TBm7xlc93nIZuNOs3NlUyZzEs.roa (hash: OJvrZsHB8fK3Xgo6IhUOmrDOAtYYR5DtLBMAzJ8x9HU=)
                          6: sv0D0rQ-jLLb0IGeX2ROX93EsFk.roa (hash: EYfC2dmfQZQGj+XZAmvsP8gEvS8pC+VQXFW+zSAWNtc=)
                          7: v1kxLCHFe4rXrYp0W0C1yyln4_I.roa (hash: 6ZjRVf5/3Gwzgj/w23L+ctsJZNRROST71Vpw12YsM/U=)
                          8: xIt8lJJjUgwrnGZj8-M-XAKLM8M.roa (hash: hFlPZerhEkhi26Lu5WKLWffMM3WUMXgzobrQrYJBZfA=)
                          9: xJiK9PyhaAqcxYB8Aiw7Fv_TmaY.roa (hash: l2//kwEVxmYAhAAeP0g1fPw8aXt0cKX6RabVhra8PNU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 20:21:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6e:39:92:b5:f5:1d:f0:ce:28:ec:fe:95:42:f8:c8:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dbd51576b4a93460a465af35e6bf550f5548894
        Validity
            Not Before: Sep  4 21:01:01 2026 GMT
            Not After : Sep  5 21:01:01 2026 GMT
        Subject: CN=632516a78534cb85962da9fb5d236ef2af7532fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:42:e3:e0:e0:c7:7d:31:3d:b5:ca:f4:e9:e7:
                    83:8c:ac:bd:70:18:f0:3c:58:7e:ec:0e:33:43:4c:
                    a0:e8:a5:ff:59:9c:0f:1b:fd:6b:6a:45:b6:32:e7:
                    03:7a:ce:b9:b1:4b:45:57:13:1a:cc:7f:10:c7:65:
                    8f:5f:1d:6f:83:f1:1a:d3:46:69:0e:8c:36:f2:c0:
                    d5:7c:27:4f:ce:11:f1:59:9d:69:2f:5b:0d:7f:8f:
                    39:17:91:44:e2:16:9c:35:2c:be:06:ca:0e:3b:35:
                    c3:18:cd:6b:86:2d:b2:26:ce:03:f2:c0:58:1f:61:
                    0a:1b:9c:de:df:79:ce:32:ff:19:60:78:a5:56:30:
                    14:b9:30:4b:ee:61:11:7f:e2:d1:6a:a5:64:29:5b:
                    a0:1d:21:a5:37:af:df:b4:3a:1e:70:a7:f9:8a:dc:
                    d7:ec:78:8c:7f:50:a4:36:38:30:9b:99:fa:ad:7c:
                    9d:db:9a:2f:db:5d:15:7b:48:16:56:8e:75:33:c5:
                    a6:a4:4c:7f:41:46:13:ed:31:b5:d6:3d:ba:ce:5b:
                    4b:3c:46:ec:2c:f1:b8:1c:c9:97:f2:7c:f6:0e:bc:
                    f5:fb:fc:5d:bd:03:62:19:b9:71:52:46:0d:0d:47:
                    bc:e7:f0:09:da:d2:8a:7f:45:a8:1a:19:2b:d1:c0:
                    f1:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:25:16:A7:85:34:CB:85:96:2D:A9:FB:5D:23:6E:F2:AF:75:32:FB
            X509v3 Authority Key Identifier:
                keyid:6D:BD:51:57:6B:4A:93:46:0A:46:5A:F3:5E:6B:F5:50:F5:54:88:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:e0:95:f4:39:d5:8b:c2:8b:d8:f8:ed:65:cb:2e:d1:d6:a9:
         e0:12:80:07:ac:16:8d:eb:4b:3a:4e:01:ec:36:9a:6e:b5:05:
         70:b1:93:87:29:c0:1f:7b:6f:5c:71:98:e7:03:55:b8:cb:4b:
         39:5f:cd:33:85:84:b3:72:e8:bb:be:fc:0d:b2:14:9f:63:d1:
         fc:33:67:77:7c:79:4b:c0:4a:40:08:9d:22:db:9e:af:f0:03:
         15:75:80:d7:f0:4f:cd:18:aa:6e:65:5d:81:0a:8d:b0:c9:2a:
         d2:84:22:6e:95:bd:ed:3f:c0:c0:9f:85:65:77:c4:b9:1f:4c:
         f7:46:66:33:4f:82:83:48:3b:40:f5:6c:92:71:3f:4a:bc:7b:
         75:6b:4c:97:92:44:f8:1b:ae:aa:78:12:9e:e3:39:c5:47:0c:
         01:87:e0:ef:b8:a9:89:00:86:84:a4:12:a6:1c:1b:7a:8e:e6:
         79:23:44:a9:64:50:bf:7f:21:0a:ce:aa:1d:c6:50:79:c9:30:
         66:ff:3f:c7:cb:5e:d2:5d:e5:ef:9e:63:5a:39:0d:12:bc:aa:
         69:34:32:09:17:bd:1b:95:4e:ca:62:75:24:47:d9:b7:17:14:
         33:f8:81:1c:44:e0:84:05:90:2e:4e:6d:da:02:99:71:d9:d4:
         8e:a4:b5:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:03:19 2026 by rpki-client