Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/kY-mQPg8SCrJWskFF0tSN9doN5s.mft
File:                     kY-mQPg8SCrJWskFF0tSN9doN5s.mft (raw, json)
Hash identifier:          yzMYouZd/RrP4TD5mwUN/MNyZcVmJcuGxdWYLzDLoSs=
Subject key identifier:   8E:81:6C:BC:8E:73:98:FE:4D:EA:6F:9A:64:44:40:9D:9E:95:38:20
Authority key identifier: 91:8F:A6:40:F8:3C:48:2A:C9:5A:C9:05:17:4B:52:37:D7:68:37:9B
Certificate issuer:       /CN=918fa640f83c482ac95ac905174b5237d768379b
Certificate serial:       01A06D95D73D9D7EE24A08AC2F76FBFE49F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kY-mQPg8SCrJWskFF0tSN9doN5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/kY-mQPg8SCrJWskFF0tSN9doN5s.mft
Manifest number:          B2
Signing time:             Fri 04 Sep 2026 18:02:11 +0000
Manifest this update:     Fri 04 Sep 2026 18:02:11 +0000
Manifest next update:     Sat 05 Sep 2026 18:02:11 +0000
Files and hashes:         1: 251AqFOyskaKWs66aZFawfV5z14.roa (hash: XUxs9JPcVOmTRxaAw3XtUXshA8geswAzFtASBhH4g6w=)
                          2: 2WVr5p2H7r2azbb2WIvSV483tPM.roa (hash: IwiB9DNZvI6+xxe/bmcy9dKCy2z4spHmBIdmUbXkKUo=)
                          3: LCRwU7xfdUzvJbwsekyl3kZ7YQM.roa (hash: npyymPGB2JJn3weBX4RtZOrvbRJhsnjy2HLem4uOQMI=)
                          4: Vt_o83jeAXwgrEV6QfNyihxJdG0.roa (hash: Fgpr0tl2Jx7B2BNewOwkF0HNqx/3fOLm+uiSmIq6TZQ=)
                          5: kY-mQPg8SCrJWskFF0tSN9doN5s.crl (hash: nPU/PzXiFMiEbuMYhYoHTtKV5Mq2uRS0Y5qPsuJP188=)
                          6: k_p0G99T-kOb8IDRnsd82pe43DM.roa (hash: fAHyhB6wFFezzUaln2OnR6OxOwi0d6bOr/s4KfY2WbI=)
                          7: xjfV9MLeTgGdVvW7HYXIzxvv-YI.roa (hash: zVFYnjswOeC1o9AjP9zhGvgKqOwrSI1huC/5Bh7oUPw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/kY-mQPg8SCrJWskFF0tSN9doN5s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/kY-mQPg8SCrJWskFF0tSN9doN5s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kY-mQPg8SCrJWskFF0tSN9doN5s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 16:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6d:95:d7:3d:9d:7e:e2:4a:08:ac:2f:76:fb:fe:49:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=918fa640f83c482ac95ac905174b5237d768379b
        Validity
            Not Before: Sep  4 18:02:11 2026 GMT
            Not After : Sep  5 18:02:11 2026 GMT
        Subject: CN=8e816cbc8e7398fe4dea6f9a6444409d9e953820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:37:ca:ad:bf:ef:d3:be:d1:6f:e2:c0:0c:38:
                    c6:ed:f4:cf:aa:06:12:bf:c6:6c:e3:01:b1:e9:e1:
                    d8:07:05:0d:43:8e:2d:10:a3:04:e5:57:59:ca:c0:
                    5b:1e:b2:4c:07:ff:a6:61:04:b3:cb:89:e4:7d:41:
                    f3:22:f5:27:c4:51:e8:82:7b:3d:1c:36:74:d0:fa:
                    29:10:18:e6:48:69:f2:7f:8c:34:59:c2:e8:fd:e4:
                    cd:f5:ab:33:f5:0d:97:a1:f2:cd:00:89:9f:3e:16:
                    5c:19:73:70:8f:ce:91:db:6c:2a:fe:87:aa:ae:69:
                    78:de:86:19:e5:a9:da:4a:60:e8:f6:9b:fd:49:4a:
                    c2:d3:da:5f:26:60:02:71:50:34:eb:ce:38:ea:45:
                    f1:7d:3e:99:85:73:80:74:e1:ad:a6:97:7e:59:65:
                    c1:b5:a2:c5:35:ea:6a:cb:9c:26:90:a1:19:a0:41:
                    8f:70:98:c9:09:e1:cf:59:4a:4b:c9:f6:08:71:17:
                    6d:76:7e:52:e4:06:c6:17:07:fa:15:f0:8b:96:bd:
                    c3:00:98:2d:e9:3d:5f:cd:bc:db:83:da:c6:4d:69:
                    f8:d4:6c:00:ab:c1:5e:04:cc:5d:23:f3:03:9a:36:
                    5b:7b:32:c0:40:25:bc:88:7b:d0:a4:00:d8:66:fc:
                    ae:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:81:6C:BC:8E:73:98:FE:4D:EA:6F:9A:64:44:40:9D:9E:95:38:20
            X509v3 Authority Key Identifier:
                keyid:91:8F:A6:40:F8:3C:48:2A:C9:5A:C9:05:17:4B:52:37:D7:68:37:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kY-mQPg8SCrJWskFF0tSN9doN5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/kY-mQPg8SCrJWskFF0tSN9doN5s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/kY-mQPg8SCrJWskFF0tSN9doN5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:0b:dc:f7:f5:ac:c3:99:21:72:f6:0c:ef:c2:b4:b1:c0:1b:
         2f:10:db:d1:51:ef:c4:da:e0:98:cf:f5:82:f9:de:94:ba:5f:
         01:b7:6e:37:8d:f2:65:83:63:1d:84:17:e0:ee:ec:55:95:14:
         bb:43:a7:6b:08:02:5f:62:61:64:5d:c0:13:c7:c6:9f:0f:23:
         3f:2e:e1:1d:3f:a3:ec:1e:db:8e:f7:70:ab:fa:7f:60:50:ef:
         4c:97:e9:84:eb:95:31:fe:25:0d:46:50:45:a7:32:b6:33:13:
         58:19:4a:35:0e:f8:24:84:a6:91:42:ef:09:6c:f6:e1:cc:7d:
         cf:c4:67:0c:85:15:c0:76:ac:19:db:4e:a6:30:b3:c6:cb:8d:
         2a:b2:38:b0:17:d4:1d:3a:4a:4e:f9:d9:8a:e1:6b:e7:55:16:
         f2:b2:b6:ba:df:ea:eb:54:7d:39:b7:5a:6a:7c:48:5e:d3:63:
         0a:e1:ea:c4:82:46:a5:51:5b:b0:5a:e1:c2:21:18:47:d4:6e:
         1f:6a:bb:c8:83:49:03:83:d0:d7:ba:01:72:f9:18:3a:99:1c:
         04:31:ed:bd:ec:2f:d0:3e:ee:a6:1b:72:2a:84:66:69:7a:61:
         87:98:96:b4:9e:c8:9c:0e:d5:b8:ed:85:21:a4:12:36:b8:4c:
         e8:d1:64:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:43:17 2026 by rpki-client