Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft
File:                     orYjcexi79D0OF-gRzBW8IgY3nM.mft (raw, json)
Hash identifier:          BRoF8VxpS1tGMI2ceQbK8bWPf9Z39H63YuD602Gwtcg=
Subject key identifier:   4F:27:34:CA:18:75:1A:BE:7B:2E:9E:DD:28:CF:7A:83:04:E0:66:2A
Authority key identifier: A2:B6:23:71:EC:62:EF:D0:F4:38:5F:A0:47:30:56:F0:88:18:DE:73
Certificate issuer:       /CN=a2b62371ec62efd0f4385fa0473056f08818de73
Certificate serial:       01A08E6A1052F8453CD58CDAC4FAAB47ED74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/orYjcexi79D0OF-gRzBW8IgY3nM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft
Manifest number:          0765
Signing time:             Fri 11 Sep 2026 03:01:50 +0000
Manifest this update:     Fri 11 Sep 2026 03:01:50 +0000
Manifest next update:     Sat 12 Sep 2026 03:01:50 +0000
Files and hashes:         1: 6ztTDGBSEjfUz5YPUm3xJqrFtBQ.roa (hash: NaCtdBF9yWOeFeahp2D+pL4fXJjohl4aTNmTP8dCNsQ=)
                          2: orYjcexi79D0OF-gRzBW8IgY3nM.crl (hash: k5zP2ug7+bx1jRi19XuVx/afxMtFlEcChvoRpp5OoT8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/orYjcexi79D0OF-gRzBW8IgY3nM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 12 Sep 2026 03:01:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8e:6a:10:52:f8:45:3c:d5:8c:da:c4:fa:ab:47:ed:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2b62371ec62efd0f4385fa0473056f08818de73
        Validity
            Not Before: Sep 11 03:01:50 2026 GMT
            Not After : Sep 12 03:01:50 2026 GMT
        Subject: CN=4f2734ca18751abe7b2e9edd28cf7a8304e0662a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:32:8e:ad:50:f0:75:ee:0a:0a:0d:05:5f:c8:
                    13:b5:6a:89:2b:e9:94:cb:f2:27:5f:3f:25:4c:70:
                    1e:df:6f:68:3d:b4:9d:aa:f5:37:5b:11:89:90:4a:
                    df:82:6b:1c:3b:2a:4b:23:50:8e:07:08:3b:54:46:
                    0d:eb:49:5d:74:3b:e1:67:0b:67:0d:3e:5d:6f:dc:
                    bd:27:a8:84:e1:b6:12:c2:35:91:ce:71:40:29:c8:
                    e9:82:a4:23:b6:28:63:6e:cd:f4:45:b8:0c:7b:ed:
                    7a:c1:82:52:a2:08:dc:9b:e0:ad:36:a4:31:da:aa:
                    a1:91:d8:04:f9:40:43:c6:dc:ab:ac:81:a6:ea:b6:
                    b7:03:09:86:df:ff:c3:14:4c:85:ed:cb:96:27:69:
                    0b:97:86:a6:f7:c6:f6:14:c9:f0:55:65:fd:6a:1f:
                    00:77:16:07:6c:2c:eb:68:3e:22:3a:23:57:b5:1f:
                    0f:b8:5b:85:e6:f5:d7:03:d1:3b:b4:14:bf:3b:15:
                    ba:75:60:cb:f1:6a:26:d0:c0:06:73:cb:02:db:32:
                    30:1c:cb:d8:42:b7:f2:78:98:88:8e:76:5f:9e:4f:
                    ff:e1:01:80:b7:08:0c:b9:c6:91:91:b1:a2:4f:35:
                    51:db:48:d8:c6:1a:2b:0e:28:9f:8f:bd:c9:86:cf:
                    79:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:27:34:CA:18:75:1A:BE:7B:2E:9E:DD:28:CF:7A:83:04:E0:66:2A
            X509v3 Authority Key Identifier:
                keyid:A2:B6:23:71:EC:62:EF:D0:F4:38:5F:A0:47:30:56:F0:88:18:DE:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orYjcexi79D0OF-gRzBW8IgY3nM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:f2:63:f3:8f:8c:37:66:09:f0:db:4e:2d:40:d4:36:e3:52:
         a6:f5:f4:54:f6:3e:69:ec:2f:fc:ce:af:91:a6:5f:7d:2e:5f:
         0f:3c:07:49:64:47:1e:45:48:90:3a:ac:ff:c1:63:e8:97:c3:
         40:b5:97:2c:2a:c0:13:2b:ef:aa:0e:7b:4d:c2:44:48:99:87:
         22:b6:2a:85:5e:53:90:3b:b1:b6:fc:fc:74:54:5b:69:9c:ce:
         d6:26:e2:64:dc:b7:a1:4a:c2:a4:6a:39:bb:1f:fd:b7:a6:b6:
         f1:74:88:18:db:23:18:b6:00:0a:da:de:30:34:8c:ae:70:1c:
         a8:b3:ec:0f:d6:6d:c1:74:07:bb:3a:27:51:30:9b:c7:31:46:
         f6:c1:08:65:ef:f8:40:2b:9e:a3:ac:eb:5d:75:47:b5:98:b1:
         6b:c0:49:af:d1:c1:87:02:7d:ca:72:70:0a:71:f0:73:21:5a:
         0e:f2:36:9e:c7:22:fe:c7:d2:ae:56:89:c7:be:5b:93:27:7e:
         38:27:5c:93:84:0c:ff:5b:5a:42:b3:9e:7f:e8:ea:25:55:ef:
         4b:0b:58:05:40:56:28:17:41:bd:a2:b5:8e:28:5f:38:61:2f:
         3c:35:2d:77:49:f5:ec:56:5d:5c:b6:76:f2:8b:67:c0:5c:12:
         8c:a1:e1:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 11:27:57 2026 by rpki-client