Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/fbf13e-e25b-497a-be55-3847f4f24ea7/1/bXCSMh13tuXct8pQXXQ6I4AI1PI.mft
File:                     bXCSMh13tuXct8pQXXQ6I4AI1PI.mft (raw, json)
Hash identifier:          RQAgyIMVFjoAXH6isQTz10gnmwKRIh3Y3Z4Zdzrcgbc=
Subject key identifier:   EC:22:E3:3F:7E:93:2E:9D:F8:3E:A6:AC:74:95:5F:3D:F0:AA:C8:23
Authority key identifier: 6D:70:92:32:1D:77:B6:E5:DC:B7:CA:50:5D:74:3A:23:80:08:D4:F2
Certificate issuer:       /CN=6d7092321d77b6e5dcb7ca505d743a238008d4f2
Certificate serial:       01A06E3947986EF843973DAEE04C6E3278BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bXCSMh13tuXct8pQXXQ6I4AI1PI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/fbf13e-e25b-497a-be55-3847f4f24ea7/1/bXCSMh13tuXct8pQXXQ6I4AI1PI.mft
Manifest number:          012B
Signing time:             Fri 04 Sep 2026 21:00:42 +0000
Manifest this update:     Fri 04 Sep 2026 21:00:42 +0000
Manifest next update:     Sat 05 Sep 2026 21:00:42 +0000
Files and hashes:         1: 5Bh9FgmflHXxe5GmPRz8PVD3zfw.roa (hash: kDLz5Pnu2hEMAIwf6lkfKB1WnkyFIe+sVCyOKc/QTLc=)
                          2: bXCSMh13tuXct8pQXXQ6I4AI1PI.crl (hash: 7RX3d73fuMVZEk/zhMtXWzrC9vtV1W1F1EYxRx8B8QU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/fbf13e-e25b-497a-be55-3847f4f24ea7/1/bXCSMh13tuXct8pQXXQ6I4AI1PI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/fbf13e-e25b-497a-be55-3847f4f24ea7/1/bXCSMh13tuXct8pQXXQ6I4AI1PI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bXCSMh13tuXct8pQXXQ6I4AI1PI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 16:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6e:39:47:98:6e:f8:43:97:3d:ae:e0:4c:6e:32:78:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d7092321d77b6e5dcb7ca505d743a238008d4f2
        Validity
            Not Before: Sep  4 21:00:42 2026 GMT
            Not After : Sep  5 21:00:42 2026 GMT
        Subject: CN=ec22e33f7e932e9df83ea6ac74955f3df0aac823
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:97:a7:50:6d:96:37:35:aa:e0:f5:b7:7a:c9:
                    bc:10:1d:30:71:fc:74:6d:b4:8b:9e:d0:ff:6e:33:
                    ba:e6:1c:9a:fb:bf:33:60:3f:3e:43:fb:57:ad:24:
                    e6:66:ff:89:62:9b:ee:c7:b7:a2:2a:7d:02:15:d1:
                    c4:9d:5c:7c:56:a4:41:29:c4:65:5d:e0:ce:42:76:
                    99:02:24:0d:d1:5a:c4:2f:7d:df:21:79:d5:28:e2:
                    a1:cb:69:30:ee:1a:36:b6:76:1a:8f:75:8d:d0:4f:
                    06:ca:a5:7e:6a:b1:cb:f0:e0:aa:b3:44:9b:1e:9d:
                    4e:df:38:3b:72:e4:59:9a:55:2c:e1:b6:1c:df:64:
                    97:aa:a7:a2:8d:9c:61:da:15:8e:0f:0a:40:0e:27:
                    6f:b5:4a:22:46:34:77:e4:3f:52:78:a1:00:c6:25:
                    9b:27:dc:59:67:6b:5a:3e:78:91:df:4d:0f:dd:81:
                    f8:5c:3b:67:f1:29:25:b9:35:7d:d6:ff:ec:b0:af:
                    22:d0:b1:06:25:af:30:bd:e8:a7:83:8b:f1:e3:56:
                    47:9c:28:7d:8a:cf:be:3d:af:0b:22:a1:2c:7d:25:
                    72:f0:7d:d6:20:f9:88:af:36:cd:6d:9e:ff:9e:46:
                    7d:77:e9:c9:54:e6:79:f3:08:96:eb:da:ca:b8:34:
                    47:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:22:E3:3F:7E:93:2E:9D:F8:3E:A6:AC:74:95:5F:3D:F0:AA:C8:23
            X509v3 Authority Key Identifier:
                keyid:6D:70:92:32:1D:77:B6:E5:DC:B7:CA:50:5D:74:3A:23:80:08:D4:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXCSMh13tuXct8pQXXQ6I4AI1PI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/fbf13e-e25b-497a-be55-3847f4f24ea7/1/bXCSMh13tuXct8pQXXQ6I4AI1PI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/fbf13e-e25b-497a-be55-3847f4f24ea7/1/bXCSMh13tuXct8pQXXQ6I4AI1PI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:61:c0:27:e3:33:cb:f7:59:b2:65:85:f3:40:30:68:1a:f3:
         c6:cb:68:e9:73:d9:f1:6d:fc:42:70:ad:a4:e5:d1:0e:d8:a3:
         9d:48:cd:1c:43:a7:86:ab:a7:70:85:dc:78:35:fa:5c:ca:2c:
         28:21:51:0d:d3:4d:df:9e:99:6f:a1:ec:e8:9f:24:d5:e4:6c:
         3a:e0:e8:f1:3d:69:69:38:19:d8:a0:9e:ab:4c:33:5e:fe:e0:
         82:de:18:f5:46:fe:40:2b:5c:52:c9:db:51:8f:85:ee:49:f8:
         25:51:71:b4:dd:a7:43:7f:8a:6d:e3:b7:00:c3:5d:83:9b:8c:
         ed:27:31:58:c3:09:3a:5d:45:9b:c6:7d:e3:23:d1:94:4c:31:
         1b:f5:53:6c:ea:68:88:20:ca:ba:f4:f6:39:1e:c9:bc:b1:03:
         10:cc:7a:92:98:1c:be:69:65:d4:10:c7:63:8c:bd:5a:17:ed:
         d8:1d:43:b0:af:7b:11:1c:eb:1b:d8:b9:3e:34:8e:7e:44:05:
         22:8c:60:63:06:b2:3f:b8:1b:08:d8:1e:bc:8e:05:5c:65:0b:
         7c:2c:d9:d1:94:f2:9f:96:40:0c:43:3d:8f:82:f8:c6:c7:db:
         40:88:63:55:49:38:0c:5f:55:3d:a4:fe:ce:bf:ec:f5:75:8d:
         a5:4f:e8:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:41:05 2026 by rpki-client