Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/daobbpHzNqAdTS7JukRO_QZxYfc.mft
File:                     daobbpHzNqAdTS7JukRO_QZxYfc.mft (raw, json)
Hash identifier:          ChQXsA8pFTqu+jTpe4oVaLWLhxsVMERCFs4UDlgV+IE=
Subject key identifier:   AC:0B:88:30:B2:57:D6:97:6D:6D:71:08:DC:1A:8F:C8:E3:F2:C2:AE
Authority key identifier: 75:AA:1B:6E:91:F3:36:A0:1D:4D:2E:C9:BA:44:4E:FD:06:71:61:F7
Certificate issuer:       /CN=75aa1b6e91f336a01d4d2ec9ba444efd067161f7
Certificate serial:       01A06D953E12F2C89FFF6FDC4A22927A81C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/daobbpHzNqAdTS7JukRO_QZxYfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/daobbpHzNqAdTS7JukRO_QZxYfc.mft
Manifest number:          B2
Signing time:             Fri 04 Sep 2026 18:01:32 +0000
Manifest this update:     Fri 04 Sep 2026 18:01:32 +0000
Manifest next update:     Sat 05 Sep 2026 18:01:32 +0000
Files and hashes:         1: 1-nNpS75iYMcjjtHDmrPvO5OT4c0.asa (hash: 8ky8Utp0nRPsWBK/+jB+V8TaLHoS6comwINplKcWJxQ=)
                          2: daobbpHzNqAdTS7JukRO_QZxYfc.crl (hash: M3QK95RQAzwuFwhO5Km27DPFK0ahGMaNA6xbO22yJlk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/daobbpHzNqAdTS7JukRO_QZxYfc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/daobbpHzNqAdTS7JukRO_QZxYfc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/daobbpHzNqAdTS7JukRO_QZxYfc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 16:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6d:95:3e:12:f2:c8:9f:ff:6f:dc:4a:22:92:7a:81:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75aa1b6e91f336a01d4d2ec9ba444efd067161f7
        Validity
            Not Before: Sep  4 18:01:32 2026 GMT
            Not After : Sep  5 18:01:32 2026 GMT
        Subject: CN=ac0b8830b257d6976d6d7108dc1a8fc8e3f2c2ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:66:69:d7:f6:21:25:8f:30:03:f6:12:fe:8f:
                    2f:05:ef:87:3f:12:67:48:c1:44:fa:8d:19:bd:0c:
                    01:fd:e0:c4:e7:0e:0c:7c:ee:f6:ae:86:0a:da:07:
                    19:42:84:c1:b0:09:17:fa:03:66:b9:fb:43:68:f4:
                    99:8f:e2:92:e9:0c:75:e4:9a:72:01:46:ff:fb:63:
                    c9:e9:29:b0:55:29:78:3a:d6:e1:fc:f4:b1:e7:9e:
                    d7:3e:af:e4:39:32:59:d4:d6:cd:f4:35:86:5a:0d:
                    d6:51:d0:38:df:5f:04:56:39:27:a2:0e:7d:cf:70:
                    58:f0:fe:d2:c9:6b:cc:d1:c9:15:72:f0:61:72:13:
                    19:28:ff:50:35:3b:85:cf:90:25:5a:44:a2:94:bf:
                    93:06:d0:2d:d3:5e:30:8f:8e:44:e0:67:36:c1:7e:
                    e5:6d:af:25:d4:51:dc:09:ba:64:a8:01:95:b8:36:
                    3f:b9:ac:ee:ce:49:8b:a5:d2:29:63:e2:29:a3:fd:
                    c1:0b:07:f2:89:92:96:b7:b2:16:bc:d2:c8:aa:c3:
                    a8:43:bb:a5:35:cc:a5:9a:0b:5b:c8:6f:52:61:4d:
                    5e:4a:56:a8:d0:3f:90:2f:e9:7e:c7:70:e5:cb:f2:
                    90:ae:9b:b6:38:16:a0:65:0b:67:fb:bf:48:ae:e3:
                    92:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:0B:88:30:B2:57:D6:97:6D:6D:71:08:DC:1A:8F:C8:E3:F2:C2:AE
            X509v3 Authority Key Identifier:
                keyid:75:AA:1B:6E:91:F3:36:A0:1D:4D:2E:C9:BA:44:4E:FD:06:71:61:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/daobbpHzNqAdTS7JukRO_QZxYfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/daobbpHzNqAdTS7JukRO_QZxYfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/daobbpHzNqAdTS7JukRO_QZxYfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:d5:42:3a:bd:34:18:65:0f:e2:f3:d0:46:73:1a:ad:43:e5:
         38:29:c1:20:af:8f:c4:1b:f7:fd:63:0c:c9:64:80:7b:b1:1d:
         b4:16:3c:85:46:74:c1:44:db:5e:ed:3a:90:af:86:c5:25:3f:
         f0:2a:90:8b:a8:9d:cb:4b:43:87:ed:33:49:0e:52:c0:72:d0:
         1e:c3:2e:5f:f4:e9:12:19:2d:84:e7:f3:82:45:4f:b2:82:c2:
         05:9e:90:ce:17:e3:b4:db:75:63:09:21:92:10:16:85:1e:3a:
         4e:3e:b9:e1:a3:8a:35:2c:cb:b2:57:04:fe:81:94:45:ea:82:
         94:71:c8:2c:19:4b:f8:28:12:06:4a:41:35:0d:fc:95:11:b1:
         82:86:0d:60:26:5a:90:35:a7:5f:3b:b5:20:db:92:64:55:01:
         cd:9f:04:ac:a1:8f:20:75:7d:fd:78:30:e6:f1:32:fd:56:c3:
         b4:ae:7b:11:8e:6b:02:23:0c:ce:88:fe:6b:b0:0e:e4:9a:39:
         44:c2:b3:8e:92:ee:b0:b2:ec:97:d7:59:d1:48:05:56:5d:1a:
         d1:1d:b0:02:ff:e1:ae:cc:6e:c7:1b:c9:cd:63:48:50:73:e8:
         40:1b:53:85:a4:45:74:a0:0b:84:92:d8:b0:75:c7:f4:70:8c:
         e3:a2:74:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:55:43 2026 by rpki-client