Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/01504c-c1c6-4564-a402-4e67be4e432e/1/bN7Hsun4ZurDa8McpMT_YtU90WY.mft
File:                     bN7Hsun4ZurDa8McpMT_YtU90WY.mft (raw, json)
Hash identifier:          +kGCq2Gnn6joPhnQH1mY9q+HoHnt8wo2KBc36ucfeFw=
Subject key identifier:   77:90:4C:4F:73:67:3D:A8:C1:63:81:11:DD:E4:C0:6F:0E:83:BC:37
Authority key identifier: 6C:DE:C7:B2:E9:F8:66:EA:C3:6B:C3:1C:A4:C4:FF:62:D5:3D:D1:66
Certificate issuer:       /CN=6cdec7b2e9f866eac36bc31ca4c4ff62d53dd166
Certificate serial:       01A08BD5DB9C68133BA6C90E3BD67B1F7F37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bN7Hsun4ZurDa8McpMT_YtU90WY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/01504c-c1c6-4564-a402-4e67be4e432e/1/bN7Hsun4ZurDa8McpMT_YtU90WY.mft
Manifest number:          1A49
Signing time:             Thu 10 Sep 2026 15:00:43 +0000
Manifest this update:     Thu 10 Sep 2026 15:00:43 +0000
Manifest next update:     Fri 11 Sep 2026 15:00:43 +0000
Files and hashes:         1: LEEO04PoylroqFY8moJTc81n18Y.roa (hash: VL5m4Xl6YVLRVrUOG2POhFSxcgEK6w8mouyfVI3KzkQ=)
                          2: bN7Hsun4ZurDa8McpMT_YtU90WY.crl (hash: WLeutwV/6PiaVA5qTITeGXGTl6JCqquTOCpin4SKP4Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/01504c-c1c6-4564-a402-4e67be4e432e/1/bN7Hsun4ZurDa8McpMT_YtU90WY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/01504c-c1c6-4564-a402-4e67be4e432e/1/bN7Hsun4ZurDa8McpMT_YtU90WY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bN7Hsun4ZurDa8McpMT_YtU90WY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8b:d5:db:9c:68:13:3b:a6:c9:0e:3b:d6:7b:1f:7f:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cdec7b2e9f866eac36bc31ca4c4ff62d53dd166
        Validity
            Not Before: Sep 10 15:00:43 2026 GMT
            Not After : Sep 11 15:00:43 2026 GMT
        Subject: CN=77904c4f73673da8c1638111dde4c06f0e83bc37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b9:1c:73:cc:10:0c:6a:b4:c2:ad:7a:9c:dd:
                    29:88:d7:3a:6d:1c:ee:c0:eb:1e:2b:fb:96:fa:fa:
                    1c:9c:f6:4d:17:93:e4:2e:9b:b7:ed:1b:68:b0:dc:
                    2f:98:10:ce:32:03:1e:5a:34:0d:7e:96:14:b3:5c:
                    8a:a7:f2:bc:80:0d:4f:95:30:e0:e8:a2:4e:73:ac:
                    1d:f7:41:af:25:b8:e9:a2:a6:9e:f2:ae:f8:6d:90:
                    b9:cb:60:3e:e5:ee:5a:9c:34:90:a8:28:03:5e:ad:
                    07:e0:03:32:cd:11:df:8f:c5:68:ce:4f:d6:25:f8:
                    7c:48:6a:d3:7c:cf:41:b2:76:07:a2:9c:6b:18:7f:
                    c8:d1:5b:91:4a:89:f3:40:30:bd:c0:71:86:86:d6:
                    1a:f1:8a:24:29:ee:68:4b:51:51:c6:f7:0f:0c:f7:
                    27:b3:96:e0:b9:ff:4b:1d:4a:0d:c7:ca:8e:63:a4:
                    e3:ef:a4:89:bf:e2:77:42:7b:08:c1:da:e3:86:1d:
                    4f:17:57:8e:5c:c6:2a:3d:48:60:00:a2:d9:97:29:
                    20:28:85:3c:e6:eb:ee:1a:68:d4:3d:c9:45:a4:37:
                    93:fe:e8:b3:f8:c6:38:63:7e:78:8f:a1:f4:f6:8d:
                    1b:fd:3c:e4:c3:da:cb:ea:6e:2a:0b:d6:7e:21:5b:
                    53:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:90:4C:4F:73:67:3D:A8:C1:63:81:11:DD:E4:C0:6F:0E:83:BC:37
            X509v3 Authority Key Identifier:
                keyid:6C:DE:C7:B2:E9:F8:66:EA:C3:6B:C3:1C:A4:C4:FF:62:D5:3D:D1:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bN7Hsun4ZurDa8McpMT_YtU90WY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/01504c-c1c6-4564-a402-4e67be4e432e/1/bN7Hsun4ZurDa8McpMT_YtU90WY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/01504c-c1c6-4564-a402-4e67be4e432e/1/bN7Hsun4ZurDa8McpMT_YtU90WY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:ab:92:eb:23:e2:ca:13:7e:41:2f:cd:1f:75:a6:1d:ab:97:
         7c:32:74:68:7d:a5:b3:d2:c3:63:18:5f:f1:27:77:d7:11:df:
         6f:b6:60:b9:87:11:72:65:7a:13:0f:d3:43:1e:a3:41:55:d4:
         41:b4:7b:95:fa:63:21:9a:61:da:97:93:73:0a:3a:d1:ab:1c:
         e0:a6:d5:0a:69:00:4b:25:f5:cf:48:32:01:9a:5e:b9:9f:e2:
         13:1e:17:f5:d6:20:c5:1f:ba:c1:29:58:a1:a7:d9:00:f1:f0:
         56:9b:cf:bd:46:ce:b2:e8:b4:8d:d5:c6:e3:37:a7:da:d3:ab:
         54:53:11:8e:6e:f3:47:be:88:e5:2c:69:93:34:b0:43:b8:99:
         1a:79:13:b2:f4:b6:20:ec:28:3f:68:3b:77:17:ce:03:40:a8:
         68:eb:59:da:5e:e9:24:a1:51:50:00:8a:3d:a9:8a:27:bf:98:
         3d:d6:35:18:12:10:52:b7:79:4a:5d:e9:11:77:9e:91:b0:d4:
         cd:7a:a5:c0:9e:c9:dc:19:b8:20:e0:a5:c3:8a:23:92:55:7d:
         73:63:8f:ee:e0:44:f3:48:58:ca:7d:e0:cb:67:f7:24:58:02:
         e0:fb:74:f6:26:46:e2:ac:94:43:4f:3f:2e:54:1b:2e:77:ab:
         91:37:e0:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:12:05 2026 by rpki-client