Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.mft
File:                     k7dqyfeoSteQrVfIgLyfhirUyec.mft (raw, json)
Hash identifier:          7v/2azfEsehDN0XxS8F7LtzPUNlL5Q3/fyJivcgMbJA=
Subject key identifier:   01:D3:93:5E:4F:8B:88:58:CA:43:08:47:AB:CC:BE:F7:65:AE:F0:F2
Authority key identifier: 93:B7:6A:C9:F7:A8:4A:D7:90:AD:57:C8:80:BC:9F:86:2A:D4:C9:E7
Certificate issuer:       /CN=93b76ac9f7a84ad790ad57c880bc9f862ad4c9e7
Certificate serial:       01A0CDB603141EB2E6F62095CF05A0CCF6AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k7dqyfeoSteQrVfIgLyfhirUyec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.mft
Manifest number:          1A90
Signing time:             Wed 23 Sep 2026 10:00:52 +0000
Manifest this update:     Wed 23 Sep 2026 10:00:52 +0000
Manifest next update:     Thu 24 Sep 2026 10:00:52 +0000
Files and hashes:         1: 1-w6BP38irc8ikwIFmua621R4fsA.roa (hash: 04Xau+nR8LEsBKrsIDus90F9cPwGPKiZEygv3ls7WwU=)
                          2: BpdGbagGv2_-Y3TyelIg9iJMEKo.roa (hash: l3T/M5x9/uGHTqM8Mx88SLVI1m/1mGk3r20lwOBjOe8=)
                          3: GAlMaF2krkYTpwYbE6TqEx_Tu_4.roa (hash: YXF5F3qEn+V3ifxgp0F6hZNsJB3RMIymnp6Om4JHbgY=)
                          4: VlwwTSoRiE5X0lO1YkSOmqRJH_8.roa (hash: tELQUfXy5jxakYPvXfDeQLNFwxD9VNjFTkL9svhczLc=)
                          5: k7dqyfeoSteQrVfIgLyfhirUyec.crl (hash: 2OndGHD+Umi7UxP7llpCxs3p5zRnm9IWfM7+m7k/jvI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k7dqyfeoSteQrVfIgLyfhirUyec.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 10:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cd:b6:03:14:1e:b2:e6:f6:20:95:cf:05:a0:cc:f6:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93b76ac9f7a84ad790ad57c880bc9f862ad4c9e7
        Validity
            Not Before: Sep 23 10:00:52 2026 GMT
            Not After : Sep 24 10:00:52 2026 GMT
        Subject: CN=01d3935e4f8b8858ca430847abccbef765aef0f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:6f:a8:ed:fe:01:93:7c:02:36:ef:aa:96:f4:
                    56:44:ed:9f:30:e4:ff:5a:3a:04:87:ea:48:e5:97:
                    88:99:f3:d7:ea:04:a3:cd:9b:c1:42:56:27:d5:8b:
                    f4:60:ef:12:db:e8:d3:3c:38:10:75:90:22:57:82:
                    8c:4f:53:dc:ff:07:ea:42:30:36:96:5c:6f:c2:99:
                    b1:b4:02:d5:99:52:37:10:75:12:20:4c:2e:b0:62:
                    4a:8b:21:71:8e:92:e2:cb:eb:90:f0:a3:70:35:1d:
                    ca:7e:f9:24:d6:63:9d:8f:5e:bd:65:89:5d:19:a8:
                    73:de:23:d6:42:39:6e:8d:f8:8b:50:88:0d:46:80:
                    41:d3:00:86:f9:2e:36:36:bd:00:c9:1f:1f:bf:19:
                    d7:c6:ad:3d:d3:79:86:da:da:ce:b7:f6:59:9c:10:
                    b4:2e:ed:0a:42:13:bb:89:2b:22:90:5f:55:00:de:
                    b2:d2:1e:ca:00:0e:9c:de:fe:cf:04:55:20:35:81:
                    22:ba:ee:84:db:0f:72:a8:04:dc:1e:6a:02:f1:97:
                    9a:f0:a4:a3:7d:8f:db:a9:86:a6:91:36:78:cb:10:
                    68:ca:d5:03:da:e6:12:25:32:4f:65:c1:c3:db:cf:
                    19:c9:75:50:cb:87:25:1c:c4:97:c5:c7:05:62:08:
                    e4:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:D3:93:5E:4F:8B:88:58:CA:43:08:47:AB:CC:BE:F7:65:AE:F0:F2
            X509v3 Authority Key Identifier:
                keyid:93:B7:6A:C9:F7:A8:4A:D7:90:AD:57:C8:80:BC:9F:86:2A:D4:C9:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7dqyfeoSteQrVfIgLyfhirUyec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:4b:06:b3:3f:c1:98:af:b9:24:34:f8:03:b0:a6:81:90:67:
         bc:a0:5a:54:fd:a1:67:d2:8a:1c:b1:2e:ac:03:3e:65:a4:d4:
         46:63:7f:56:f0:90:c7:60:90:0f:da:37:a7:7d:78:c1:65:b4:
         27:0d:ac:98:a0:4b:5d:a5:77:25:56:6f:69:68:f5:4c:d4:f5:
         fb:03:4d:b9:4a:e2:00:30:d1:bc:3c:27:1f:20:c5:58:a0:68:
         b0:23:3b:94:f7:bf:a2:76:b3:a5:fa:80:bf:c1:36:a3:49:ef:
         38:19:60:8b:ba:5d:9b:45:83:f7:72:0a:a7:be:f1:9a:66:1c:
         a9:8d:74:20:aa:7f:cd:52:20:9b:cf:cd:b9:1f:2f:ff:86:5e:
         8a:e6:ee:a9:09:90:90:71:09:3a:d0:a8:c4:b8:d8:fb:eb:f2:
         6a:19:44:39:b5:6f:27:b7:0b:e6:f4:f0:dc:18:d9:5f:8d:1d:
         f8:dc:a8:c4:f4:ed:0d:02:56:88:ad:41:00:4a:be:70:58:e3:
         eb:22:d6:93:84:ce:01:26:8c:32:d8:5b:f9:9a:79:45:15:cd:
         5a:fc:07:b9:0c:55:28:55:59:c1:2c:0a:05:cc:51:e5:a8:10:
         06:bf:18:36:20:78:16:86:0f:2a:b3:84:5f:83:1e:84:97:2a:
         b1:42:d8:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 17:34:47 2026 by rpki-client