Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a86f77-fae6-4fe2-ba4b-eb37e776ddd2/1/CR2q09J9vPlNMAb7-6fh3dXSnxY.mft
File:                     CR2q09J9vPlNMAb7-6fh3dXSnxY.mft (raw, json)
Hash identifier:          eCwO4EDhcnaE+NvHrquwhvoD9iYfxaFry8nqCjnG22w=
Subject key identifier:   11:AB:35:B6:EB:7C:67:EA:63:4E:0C:99:83:F6:55:8E:E4:5A:50:FC
Authority key identifier: 09:1D:AA:D3:D2:7D:BC:F9:4D:30:06:FB:FB:A7:E1:DD:D5:D2:9F:16
Certificate issuer:       /CN=091daad3d27dbcf94d3006fbfba7e1ddd5d29f16
Certificate serial:       01A0005C81C43B157B04F08AD5722D14B922
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CR2q09J9vPlNMAb7-6fh3dXSnxY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/a86f77-fae6-4fe2-ba4b-eb37e776ddd2/1/CR2q09J9vPlNMAb7-6fh3dXSnxY.mft
Manifest number:          0ABE
Signing time:             Fri 14 Aug 2026 13:00:57 +0000
Manifest this update:     Fri 14 Aug 2026 13:00:57 +0000
Manifest next update:     Sat 15 Aug 2026 13:00:57 +0000
Files and hashes:         1: 6WscQ8tiDx9m3v4sx_CKg9wEEnE.roa (hash: QpRl5gulsjXB/beShhOtBcm8ekjd5kSr4bAzu9gdErs=)
                          2: CR2q09J9vPlNMAb7-6fh3dXSnxY.crl (hash: DkEXvTAd/y5U5h5bVv2ZeVPAGDwnPoh9Cja05PTGu0I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/a86f77-fae6-4fe2-ba4b-eb37e776ddd2/1/CR2q09J9vPlNMAb7-6fh3dXSnxY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/a86f77-fae6-4fe2-ba4b-eb37e776ddd2/1/CR2q09J9vPlNMAb7-6fh3dXSnxY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CR2q09J9vPlNMAb7-6fh3dXSnxY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 13:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:5c:81:c4:3b:15:7b:04:f0:8a:d5:72:2d:14:b9:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=091daad3d27dbcf94d3006fbfba7e1ddd5d29f16
        Validity
            Not Before: Aug 14 13:00:57 2026 GMT
            Not After : Aug 15 13:00:57 2026 GMT
        Subject: CN=11ab35b6eb7c67ea634e0c9983f6558ee45a50fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:6e:05:ac:28:57:3d:e9:1a:d1:25:67:6b:6b:
                    82:6a:25:01:92:39:45:17:59:8c:b7:57:d9:0e:f7:
                    93:8e:b4:50:a8:79:b2:f8:dc:83:37:46:15:02:1d:
                    d6:ef:79:bf:70:20:2a:78:1a:52:4c:51:19:e7:b8:
                    f0:93:06:50:60:65:96:07:77:e4:f2:0f:6e:7f:4e:
                    dc:d7:2a:be:b6:51:71:83:3a:8f:fa:b0:e3:d4:56:
                    32:3b:cb:3c:d6:5b:3d:0a:56:44:7c:5b:3e:03:04:
                    dd:5e:a8:3f:16:b4:41:04:61:ca:f4:2f:82:06:3f:
                    45:7f:8b:c9:f1:7d:4b:a2:8c:7e:00:b3:16:a0:9e:
                    ce:fc:b7:fb:5c:96:ba:68:65:06:cf:75:27:b3:0e:
                    eb:a3:0b:23:3a:79:1b:36:91:58:3c:01:1f:4b:f4:
                    02:1b:ff:a8:af:75:8b:31:de:a7:fe:dc:69:46:84:
                    2c:25:b2:84:13:a1:94:d1:39:fb:d9:6e:81:48:63:
                    50:0d:c7:c3:dd:7a:9a:84:e7:61:f7:6c:d3:80:ed:
                    f0:f8:06:75:0e:2a:e5:7b:96:4f:43:79:fe:20:20:
                    ef:b2:e6:9b:9f:f6:1f:34:9a:e2:e5:df:04:a6:b1:
                    2f:cf:5a:db:61:3e:9b:75:8c:d3:ea:f1:ca:9c:cd:
                    94:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:AB:35:B6:EB:7C:67:EA:63:4E:0C:99:83:F6:55:8E:E4:5A:50:FC
            X509v3 Authority Key Identifier:
                keyid:09:1D:AA:D3:D2:7D:BC:F9:4D:30:06:FB:FB:A7:E1:DD:D5:D2:9F:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR2q09J9vPlNMAb7-6fh3dXSnxY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a86f77-fae6-4fe2-ba4b-eb37e776ddd2/1/CR2q09J9vPlNMAb7-6fh3dXSnxY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a86f77-fae6-4fe2-ba4b-eb37e776ddd2/1/CR2q09J9vPlNMAb7-6fh3dXSnxY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:a0:43:57:f8:70:98:66:3b:37:ee:22:b7:dd:ec:18:8c:7d:
         32:ef:75:56:d4:df:e1:67:90:13:2d:e8:3f:cb:44:a2:ec:8a:
         6c:24:a7:39:59:c9:ff:a7:dc:70:da:80:b5:bf:e1:7d:2c:0f:
         64:f7:13:76:ea:f9:bf:56:27:b5:e4:25:79:c5:6f:13:b3:5a:
         13:7b:91:ed:15:7b:66:d5:5f:c9:cb:47:f5:7e:9b:6e:f1:84:
         2e:2d:15:b5:73:59:eb:05:10:60:30:5d:26:72:5d:c5:7f:5f:
         bc:2c:04:8c:23:ae:3b:f9:38:55:b6:23:72:33:eb:98:5f:c1:
         5b:47:59:ad:3d:0a:cf:f5:cc:93:d4:3e:ca:ca:31:fd:20:1c:
         2a:c0:a1:51:cf:91:8c:03:e1:16:24:f1:a4:33:85:ee:64:ef:
         3b:45:2d:21:8a:65:b4:87:de:f8:f1:96:46:e6:9f:17:07:1b:
         69:a4:cd:3e:0e:d4:3b:bb:d7:e6:02:f4:46:8d:49:be:aa:25:
         d9:64:39:b0:5d:bd:78:78:2d:45:71:f8:e7:67:42:32:23:f8:
         1f:c9:37:1b:3a:99:5d:c0:a6:f3:da:3b:80:b8:44:ff:be:27:
         bb:6a:e2:60:e8:75:f4:65:78:6c:07:e0:9f:8b:b9:68:93:82:
         9b:c9:dd:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:30 2026 by rpki-client