Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/rnqbF0Wlpww797zCwu4WZGCv96g.mft
File:                     rnqbF0Wlpww797zCwu4WZGCv96g.mft (raw, json)
Hash identifier:          V5T/1GrH+SyCKLTWWilUt6RPEIsVU4C19i0IFMEWKzQ=
Subject key identifier:   68:04:94:68:76:61:87:0C:C5:32:BD:29:82:BB:AF:43:E3:6D:60:3D
Authority key identifier: AE:7A:9B:17:45:A5:A7:0C:3B:F7:BC:C2:C2:EE:16:64:60:AF:F7:A8
Certificate issuer:       /CN=ae7a9b1745a5a70c3bf7bcc2c2ee166460aff7a8
Certificate serial:       01A08CE857059D29582D3775734585A7E984
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rnqbF0Wlpww797zCwu4WZGCv96g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/rnqbF0Wlpww797zCwu4WZGCv96g.mft
Manifest number:          1A58
Signing time:             Thu 10 Sep 2026 20:00:31 +0000
Manifest this update:     Thu 10 Sep 2026 20:00:31 +0000
Manifest next update:     Fri 11 Sep 2026 20:00:31 +0000
Files and hashes:         1: DCtq5rpTweL4CTROUxWHYxhxK3g.roa (hash: CfkL0Qyeh/E+bj/dw2PrSDYV9CbtcLVOF4kKZjE5gXk=)
                          2: VV6GclWkJ8nZfWYD9kI5rVNngFk.roa (hash: MVIJsWhkb4vuogtGRTydr8dk1xzegcnuBoJBJY1Nf4c=)
                          3: WP15_IkzJpNZosRW20NkMhFJGGo.roa (hash: kBh49s4i+AJ1plkfRHBsH8aUUSr8vJTfZgfko/MzEr4=)
                          4: jlMfPiYRs4XvMMMW53RBZFFBRpc.roa (hash: RsSsKW/BoPlm0lfdfQkFI4xeDLp3veR+ykTfybzmAlM=)
                          5: rnqbF0Wlpww797zCwu4WZGCv96g.crl (hash: fgHrw5wwICix9mQc+ZV6z6o53exYhp2sG9fbG/w2ahg=)
                          6: sMQ-1nZpgybI9ZwabptfhheDX74.roa (hash: zvln+53336ygn7VRFII602P9R5eFXnLjyVlGVFr69Is=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/rnqbF0Wlpww797zCwu4WZGCv96g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/rnqbF0Wlpww797zCwu4WZGCv96g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rnqbF0Wlpww797zCwu4WZGCv96g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 20:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8c:e8:57:05:9d:29:58:2d:37:75:73:45:85:a7:e9:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae7a9b1745a5a70c3bf7bcc2c2ee166460aff7a8
        Validity
            Not Before: Sep 10 20:00:31 2026 GMT
            Not After : Sep 11 20:00:31 2026 GMT
        Subject: CN=680494687661870cc532bd2982bbaf43e36d603d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:55:c3:03:0b:59:da:3f:77:08:3b:d0:27:1a:
                    4a:8a:3c:16:b3:79:d9:47:25:aa:78:64:95:35:c4:
                    24:5b:9b:9d:6b:49:d7:c7:62:22:dc:fb:c3:6c:46:
                    04:82:31:2d:93:65:ab:5d:f7:d3:8f:c7:4f:c5:d8:
                    9c:91:98:a1:d8:fa:39:f6:fc:97:d9:c9:1d:4e:e2:
                    92:47:2d:69:69:26:26:a5:c0:df:c4:71:35:81:db:
                    40:50:59:e6:12:8a:1f:21:97:66:5e:c5:41:10:09:
                    45:e7:f9:59:4c:eb:70:24:69:f2:7d:70:65:9e:3c:
                    1a:f6:d3:5c:0e:87:95:31:21:8b:c4:9f:d0:9a:94:
                    8d:58:33:a8:32:ad:bf:e2:70:7f:41:b2:f9:0e:d4:
                    b5:97:89:65:0a:ee:2b:5e:4d:f5:9e:25:73:71:24:
                    62:27:cc:5b:b8:45:a6:a9:54:a7:8c:6b:9f:43:89:
                    14:29:5c:e5:25:4b:96:8f:45:59:47:0d:e8:18:08:
                    e1:db:ab:83:23:05:39:24:e5:68:47:d0:53:5b:42:
                    cc:49:f1:e7:3d:a2:38:ea:b1:37:c4:73:0a:66:1c:
                    88:7e:84:9c:83:25:1b:58:7f:5e:d7:f9:da:06:9b:
                    67:04:68:c7:69:3f:c0:e9:24:9f:13:d9:1c:8d:11:
                    36:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:04:94:68:76:61:87:0C:C5:32:BD:29:82:BB:AF:43:E3:6D:60:3D
            X509v3 Authority Key Identifier:
                keyid:AE:7A:9B:17:45:A5:A7:0C:3B:F7:BC:C2:C2:EE:16:64:60:AF:F7:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnqbF0Wlpww797zCwu4WZGCv96g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/rnqbF0Wlpww797zCwu4WZGCv96g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/rnqbF0Wlpww797zCwu4WZGCv96g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:f2:da:c3:d7:0a:41:94:f7:aa:29:19:e6:fb:98:ae:e5:27:
         9a:15:18:9a:2b:cd:ae:00:75:e0:8d:e7:b6:5b:16:f3:ed:2e:
         f3:af:ab:b9:eb:db:e0:21:a2:c5:95:82:f1:23:4f:db:14:e8:
         8d:31:5b:50:39:12:1a:35:32:5b:cf:7b:75:27:22:a3:0b:d8:
         80:25:38:3e:72:0a:aa:bd:42:4b:06:b8:93:87:ad:af:dc:fe:
         38:20:80:b2:42:c8:ea:61:62:4a:4a:3e:ed:80:10:44:4c:f5:
         6a:d9:56:85:2d:49:a0:2e:c8:91:1b:e0:e5:64:80:52:9d:a4:
         ce:d5:ad:3d:0c:ee:c8:d0:5e:ad:c4:24:cb:8b:5c:5b:a7:c5:
         d2:be:41:77:36:39:40:ce:75:d5:44:68:5b:5f:bd:00:46:f4:
         3d:09:96:0c:86:61:f0:26:68:d4:8a:e2:10:8f:7d:b4:a1:62:
         1e:09:1e:50:8b:02:80:e6:30:ba:0a:00:ac:85:27:67:9c:8f:
         b9:71:57:56:c7:6c:26:d2:fb:72:91:6d:dd:30:39:66:b5:b2:
         74:87:65:56:ce:9b:58:f4:56:35:db:68:e1:50:98:8d:94:a4:
         ae:b8:5b:be:80:95:c5:b6:d7:ac:18:77:4e:0c:2a:35:5a:c0:
         97:88:b1:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:52:01 2026 by rpki-client