Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/140e67-c5ff-4859-adc5-0cbc22dd044a/1/ST5j4HGQTiHhuHiuRVCBPw4Hrko.mft
File:                     ST5j4HGQTiHhuHiuRVCBPw4Hrko.mft (raw, json)
Hash identifier:          0MIs/JcV7CF2eUcgLPDghTVZYQAyi48Aq24l3INdPsE=
Subject key identifier:   77:CB:5A:DF:00:8E:01:28:AF:16:A1:F6:51:1D:18:1F:F2:F7:B2:6A
Authority key identifier: 49:3E:63:E0:71:90:4E:21:E1:B8:78:AE:45:50:81:3F:0E:07:AE:4A
Certificate issuer:       /CN=493e63e071904e21e1b878ae4550813f0e07ae4a
Certificate serial:       01A097D9FBDC1218BF8692A716DE807D84A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ST5j4HGQTiHhuHiuRVCBPw4Hrko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/140e67-c5ff-4859-adc5-0cbc22dd044a/1/ST5j4HGQTiHhuHiuRVCBPw4Hrko.mft
Manifest number:          A6
Signing time:             Sat 12 Sep 2026 23:00:40 +0000
Manifest this update:     Sat 12 Sep 2026 23:00:40 +0000
Manifest next update:     Sun 13 Sep 2026 23:00:40 +0000
Files and hashes:         1: 9KcTd1IGZHRv0B-1lN3bR5j0dnA.roa (hash: eFhdSfFf7rhWziAPLqibOglSLYqWl4gf7RvZLdXF6D0=)
                          2: ST5j4HGQTiHhuHiuRVCBPw4Hrko.crl (hash: BNhs3oif+wNvbhu8bogRudTFqxR5+ZpeoBiNHcJpqHg=)
                          3: fHjeWk0X-9p1R4DiQBN0NOabyAY.roa (hash: CXvc3jafQmeKRESg6l+phyxsh/MDhMbCl7fOLISnWT8=)
                          4: iM1oUl29TZo8TBmUQuzNvFuJWQs.roa (hash: jxbp4u9Zss89VbcKpO1URl2CR7HBCn20++6ggU5n1h8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/140e67-c5ff-4859-adc5-0cbc22dd044a/1/ST5j4HGQTiHhuHiuRVCBPw4Hrko.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/140e67-c5ff-4859-adc5-0cbc22dd044a/1/ST5j4HGQTiHhuHiuRVCBPw4Hrko.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ST5j4HGQTiHhuHiuRVCBPw4Hrko.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 13 Sep 2026 23:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:97:d9:fb:dc:12:18:bf:86:92:a7:16:de:80:7d:84:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=493e63e071904e21e1b878ae4550813f0e07ae4a
        Validity
            Not Before: Sep 12 23:00:40 2026 GMT
            Not After : Sep 13 23:00:40 2026 GMT
        Subject: CN=77cb5adf008e0128af16a1f6511d181ff2f7b26a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:37:1b:90:a0:56:a6:1f:5a:33:f4:c9:ed:5d:
                    61:98:d6:2a:3d:f7:c2:c2:b7:f0:bd:53:03:6d:1c:
                    83:21:c1:64:13:84:c9:f8:21:48:ac:37:f5:ac:6c:
                    5a:36:39:01:77:da:55:a7:e6:74:7c:58:1d:66:6f:
                    ef:04:2e:8a:7d:3d:1d:87:30:b4:21:39:31:00:1a:
                    3b:3b:e3:80:59:c3:f0:8e:60:fb:88:41:bc:1e:e9:
                    6c:f7:3b:7c:dd:c1:15:c3:ec:3d:32:fc:b1:55:37:
                    60:31:e8:5d:c7:fd:c3:c6:af:3c:f2:e6:7c:e3:9e:
                    5b:7b:03:47:e2:30:00:e1:b5:b3:73:c3:a1:23:78:
                    f1:7b:ed:03:88:d2:26:46:ab:2a:d1:ce:a7:0a:00:
                    72:db:86:23:3f:e8:5a:db:d2:39:67:b0:77:46:b6:
                    ea:7b:ff:7c:7c:3e:29:59:e3:57:e1:1f:e9:5f:d2:
                    66:aa:b6:c0:a1:42:a6:81:2b:58:13:63:55:7d:74:
                    4a:a1:cd:5d:9c:92:36:bb:c2:10:30:80:f7:6e:38:
                    f6:19:24:f8:72:21:a5:45:bb:99:2c:66:16:f9:17:
                    0c:72:7f:c8:49:30:5a:3a:9b:b4:3e:2e:ca:02:45:
                    fc:c8:e2:86:35:3c:bc:42:17:5d:3d:b8:53:bb:42:
                    51:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:CB:5A:DF:00:8E:01:28:AF:16:A1:F6:51:1D:18:1F:F2:F7:B2:6A
            X509v3 Authority Key Identifier:
                keyid:49:3E:63:E0:71:90:4E:21:E1:B8:78:AE:45:50:81:3F:0E:07:AE:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ST5j4HGQTiHhuHiuRVCBPw4Hrko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/140e67-c5ff-4859-adc5-0cbc22dd044a/1/ST5j4HGQTiHhuHiuRVCBPw4Hrko.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/140e67-c5ff-4859-adc5-0cbc22dd044a/1/ST5j4HGQTiHhuHiuRVCBPw4Hrko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:dc:1c:6d:00:72:36:f7:11:49:28:1f:84:f1:43:a6:db:53:
         31:a5:f7:b5:f4:53:b6:93:eb:f9:54:28:85:34:05:ae:4f:2d:
         58:e3:8f:f0:0d:f3:78:38:86:8d:cd:34:df:8c:4f:4a:2e:d2:
         5b:bb:c1:ec:0a:04:b3:a1:c1:22:45:3f:f1:fd:19:07:8b:84:
         61:2d:03:a6:43:a4:9c:00:05:45:f2:1b:b5:b2:77:23:79:b2:
         cb:ad:d3:25:b4:fb:e9:66:48:2b:90:b6:8b:80:01:88:2b:fe:
         4d:52:50:52:7a:61:d6:42:ef:36:33:36:47:b2:c9:2c:59:a4:
         27:92:ea:bc:01:e6:76:3c:c9:71:91:66:9a:11:f4:1e:00:8d:
         53:51:e4:08:6f:6e:4b:f1:f5:35:c8:a6:a3:f9:b4:6f:3e:cf:
         08:8c:10:8b:18:e8:ed:f3:19:f3:27:73:af:ec:a2:3b:eb:9d:
         b3:a0:ab:0e:f1:9b:e2:3e:56:25:76:8c:73:08:96:44:0f:7f:
         b0:ac:97:9e:25:b6:7e:a7:d9:40:22:da:e4:01:94:4a:b8:67:
         5a:ea:5a:b1:fe:3d:0d:20:cd:eb:52:b2:1c:ac:b7:47:36:90:
         75:45:75:64:67:b4:cc:ef:a9:38:c8:dc:68:96:e9:9b:af:8c:
         a1:b4:b7:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 09:12:16 2026 by rpki-client