Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft
File:                     d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft (raw, json)
Hash identifier:          3xuHuktVX5DRdfoH6ha9UzJgr9K2sXwbqv6ivV2tREs=
Subject key identifier:   94:AE:01:23:FD:F8:31:4B:51:23:87:1E:A2:95:97:0C:FA:2F:50:DD
Authority key identifier: 77:64:05:E0:28:37:43:CF:52:18:0D:5B:13:81:2D:FB:A3:DE:D7:FC
Certificate issuer:       /CN=776405e0283743cf52180d5b13812dfba3ded7fc
Certificate serial:       01A08AFA511355C801306120A31F588D68A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft
Manifest number:          1A4A
Signing time:             Thu 10 Sep 2026 11:00:55 +0000
Manifest this update:     Thu 10 Sep 2026 11:00:55 +0000
Manifest next update:     Fri 11 Sep 2026 11:00:55 +0000
Files and hashes:         1: 8q11ZXlsuNY-5BnKL-DZjg8yXCc.roa (hash: ouWFvShqIiSVhc7XwLMg1RvjjhIXPIC2TEXQAFnoIdY=)
                          2: NWmG-3ib3K9ny2X2v2uTxM0DQqA.roa (hash: CGIiGH/Yy5fY3u/pl6DzCecfrnnhokhuxjI5pup6gIw=)
                          3: W0KBm5HEcFXtVXifacsZfmIqvhY.roa (hash: W8Izm3ucgflTtw/kXP/v/wyRWH1PXzlBhUPfbe4tfxo=)
                          4: d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.crl (hash: UQeXitPuu1G0YwuVEXIGXnuNWtAwniLh8ES2gPT3ylk=)
                          5: hFwOd0_YEOVcJRwShM4Rz_JX8w4.roa (hash: 2ZVK7MUTm4O+cKvEyp+XBJuaZn8IX75XJYPFZQbyyqo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 11:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:fa:51:13:55:c8:01:30:61:20:a3:1f:58:8d:68:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=776405e0283743cf52180d5b13812dfba3ded7fc
        Validity
            Not Before: Sep 10 11:00:55 2026 GMT
            Not After : Sep 11 11:00:55 2026 GMT
        Subject: CN=94ae0123fdf8314b5123871ea295970cfa2f50dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:59:94:92:4b:d4:ea:04:11:a1:13:73:94:7c:
                    78:de:61:89:2c:8b:95:d8:92:97:cf:22:ce:14:2d:
                    3c:4c:5e:8e:7d:7d:49:d8:7a:c3:c8:b5:63:71:cf:
                    c5:2a:f6:df:72:84:90:b0:41:d6:77:05:3c:c6:65:
                    ba:c9:ba:26:4d:42:25:90:33:01:df:11:3f:ba:ec:
                    19:cb:68:39:60:0d:f1:71:d8:a4:8a:a0:c6:2b:e2:
                    f3:26:a6:30:e0:aa:de:09:8f:1c:7e:fa:94:a2:65:
                    4e:8f:52:7f:2f:69:5a:37:e1:9a:3c:4d:62:1a:92:
                    0f:53:e5:cd:5f:ef:91:bc:b3:9d:7e:c9:37:7a:4b:
                    58:1e:1b:cb:56:a0:b3:b3:93:9d:e1:0f:cd:79:f3:
                    e9:a1:66:23:32:54:df:31:bb:bd:de:a9:4e:56:83:
                    b2:d6:36:5e:34:6f:de:79:5c:5c:2f:3d:11:7c:18:
                    85:c5:b7:84:21:c3:3a:0e:6f:77:47:6c:c4:03:4d:
                    cd:08:16:e9:ee:02:cd:c3:ed:ec:78:1b:71:60:8e:
                    de:19:7b:56:90:b6:b1:d8:2b:ee:56:ea:32:28:49:
                    ff:a6:25:d2:2f:8e:c9:5c:ea:56:9f:a9:03:c1:6e:
                    43:f1:3b:fe:8d:d5:1e:b1:ee:3e:f2:d2:ad:12:94:
                    ac:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:AE:01:23:FD:F8:31:4B:51:23:87:1E:A2:95:97:0C:FA:2F:50:DD
            X509v3 Authority Key Identifier:
                keyid:77:64:05:E0:28:37:43:CF:52:18:0D:5B:13:81:2D:FB:A3:DE:D7:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:04:5c:c5:57:80:cf:19:71:dd:ca:c9:06:5d:20:0e:fd:7e:
         64:b3:45:ba:39:4c:45:c7:92:93:e8:01:79:09:08:79:ee:96:
         67:56:77:30:ca:92:c8:d7:ad:f1:d5:3b:e2:bc:d9:21:6f:ba:
         30:f7:cf:75:30:0d:27:41:34:2c:b7:75:62:df:c9:6c:e3:3f:
         60:47:ac:a3:f6:df:48:0c:6e:13:ff:01:e8:2e:fe:64:bf:78:
         21:70:24:81:dd:94:e2:1b:d5:e3:0c:b9:f3:53:37:fa:a6:d1:
         76:de:4f:10:d6:49:d3:c2:df:2e:68:44:39:f7:5d:9d:33:0c:
         e3:45:5c:e4:f6:33:17:0f:86:63:5e:79:08:4c:f2:02:55:06:
         e6:09:5c:f9:dc:77:e2:06:97:c3:9e:b1:46:01:a0:4e:bd:1b:
         39:c8:c1:1f:7b:bf:8b:0b:e0:b5:1d:3b:26:c5:0c:6e:e6:91:
         f1:95:1f:e8:59:06:6f:8a:98:bd:c3:9a:07:cf:fa:a8:b2:f6:
         26:ce:d8:57:56:a6:be:40:2a:a3:2b:6f:13:94:b7:ea:7f:7f:
         24:bb:79:3e:bd:12:1e:91:15:c7:43:4e:cc:92:73:d8:54:bf:
         17:b0:ae:7b:1c:86:18:aa:fc:b4:b7:9b:ff:53:aa:08:29:9c:
         46:87:a1:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:33:48 2026 by rpki-client