Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/V3bZoLVb1JWhvjxcA_olHT3ouMU.mft
File:                     V3bZoLVb1JWhvjxcA_olHT3ouMU.mft (raw, json)
Hash identifier:          MdTPTahd9kB2gSxunHfy3avaIv1Rb3o69fDWG2d9Yj8=
Subject key identifier:   24:36:47:69:FE:51:F6:5E:2F:69:6D:17:E7:38:2C:71:D1:D2:1C:79
Authority key identifier: 57:76:D9:A0:B5:5B:D4:95:A1:BE:3C:5C:03:FA:25:1D:3D:E8:B8:C5
Certificate issuer:       /CN=5776d9a0b55bd495a1be3c5c03fa251d3de8b8c5
Certificate serial:       01A0889EAEADE2C96DBEAEDC4FE2C1B9E4C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V3bZoLVb1JWhvjxcA_olHT3ouMU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/V3bZoLVb1JWhvjxcA_olHT3ouMU.mft
Manifest number:          1606
Signing time:             Thu 10 Sep 2026 00:01:35 +0000
Manifest this update:     Thu 10 Sep 2026 00:01:35 +0000
Manifest next update:     Fri 11 Sep 2026 00:01:35 +0000
Files and hashes:         1: 5O4WJBayXN8-T5sAxCOVSxDJECk.roa (hash: 1xrSDNWEV4bb8nFWycmGbVzjtMS9SCVl02w2LA86yYc=)
                          2: G1Ty4WndBpOGD61GKAs-CwP5c2w.roa (hash: l0eAmw+GJHiz9ePv9I+0pPo3dWb64rnkIyzrqbPQk6o=)
                          3: KJ_UKUidS9-7KSDGLThVTELwDhI.roa (hash: dHBmhOaPvkrCjpSOzFqmoqtogZjlMERH8Hhj6/qx0yI=)
                          4: NuEtWDfqstg6Pj9E1KeSos8IDaw.roa (hash: wtuhCZ4o02QJy1QmedWkrl+M7I3hD/AeGG3bB2Srdj0=)
                          5: V3bZoLVb1JWhvjxcA_olHT3ouMU.crl (hash: vHlHWO0FCg99rgTIYO17DNh+p6aQydbqSjZS72Dwx8I=)
                          6: kMsITRvtaXC741Y_7AjN_jGGmv4.roa (hash: gbq77+xKSdpHzBJMY7zv47/LbqIo3f6akkibyM35M7Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/V3bZoLVb1JWhvjxcA_olHT3ouMU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/V3bZoLVb1JWhvjxcA_olHT3ouMU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V3bZoLVb1JWhvjxcA_olHT3ouMU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 10 Sep 2026 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:88:9e:ae:ad:e2:c9:6d:be:ae:dc:4f:e2:c1:b9:e4:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5776d9a0b55bd495a1be3c5c03fa251d3de8b8c5
        Validity
            Not Before: Sep 10 00:01:35 2026 GMT
            Not After : Sep 11 00:01:35 2026 GMT
        Subject: CN=24364769fe51f65e2f696d17e7382c71d1d21c79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a0:3c:98:92:2d:dc:73:57:d8:66:fb:1c:1f:
                    64:4c:85:a7:8c:20:6a:7b:11:58:3d:cc:b4:a6:1c:
                    60:cc:2a:96:c2:ac:d7:1d:fc:ec:91:6b:21:91:64:
                    fd:dc:92:84:e0:52:4f:12:f8:8f:9d:99:1a:46:4b:
                    e8:84:81:1d:9d:2e:6e:b0:bf:9e:8c:54:25:a1:fe:
                    fc:ec:65:1c:53:f6:dc:70:78:b1:fc:e8:0f:5e:03:
                    1b:8d:e4:07:db:2b:31:e4:6f:8f:70:f7:6d:0a:3c:
                    ed:4b:bd:f7:32:86:3d:ca:60:7f:87:5b:51:f3:e8:
                    79:b4:fa:72:93:e1:19:51:71:93:42:78:24:05:07:
                    c4:d1:cf:77:a4:3b:ba:67:8c:89:e8:18:03:2d:80:
                    5f:53:36:66:f4:c0:13:19:a2:7a:de:1b:eb:23:be:
                    e1:f2:ef:8f:a5:0d:3e:08:d4:bc:1a:b0:aa:a1:a0:
                    07:ad:37:cb:bf:bc:e6:87:59:99:47:dd:98:cd:8d:
                    f1:c4:e5:a2:b3:cd:6b:b2:66:4e:71:22:0f:a8:33:
                    b1:2c:22:89:30:c9:7c:db:34:99:28:5c:7d:b0:df:
                    b2:84:e1:7c:68:3e:37:e9:5e:95:03:9b:45:0f:17:
                    f4:fa:c1:0b:98:36:ab:62:72:49:b6:2c:9f:32:c2:
                    ba:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:36:47:69:FE:51:F6:5E:2F:69:6D:17:E7:38:2C:71:D1:D2:1C:79
            X509v3 Authority Key Identifier:
                keyid:57:76:D9:A0:B5:5B:D4:95:A1:BE:3C:5C:03:FA:25:1D:3D:E8:B8:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3bZoLVb1JWhvjxcA_olHT3ouMU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/V3bZoLVb1JWhvjxcA_olHT3ouMU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/V3bZoLVb1JWhvjxcA_olHT3ouMU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:42:00:23:37:9d:d8:35:d0:6b:1c:60:8d:2e:9d:ba:c5:3b:
         ad:ff:74:49:74:9d:1b:ef:e4:0f:47:46:eb:bb:91:ad:bf:51:
         d2:be:17:e5:f3:9a:af:d7:ee:c2:58:fd:a6:39:e7:d1:39:0f:
         9b:eb:89:c6:c9:61:d7:e5:76:a6:4d:84:5c:22:42:83:36:95:
         4a:26:bc:89:90:b2:2b:34:be:d3:1d:c3:85:ba:fc:6d:93:69:
         ec:96:94:de:2b:72:59:b5:75:ba:b0:71:8d:72:bf:e4:6e:d6:
         88:9d:c3:7e:0a:06:42:3d:fc:6f:9e:17:21:a2:08:bd:4d:15:
         a2:0e:2c:12:e4:31:96:06:2b:d6:fb:f9:37:48:63:46:8f:76:
         d3:32:bf:d1:e3:df:e3:f7:98:f0:71:d8:19:85:5c:12:11:34:
         37:6c:01:3e:71:c1:15:31:a2:3a:9f:5e:e9:d6:00:76:a2:6b:
         7e:f4:9f:2d:29:c1:86:bf:95:3a:09:7d:ef:a3:fa:cf:85:bc:
         6a:ee:88:62:24:07:7c:b5:f0:b4:f9:54:cc:a0:c0:5f:4c:eb:
         e9:17:72:fd:99:d2:eb:d1:70:32:af:eb:6f:dc:20:d6:56:3a:
         35:b9:e7:c8:fe:dc:75:7f:31:60:6e:18:8d:a4:af:a0:b4:8f:
         f7:f7:e9:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 08:45:46 2026 by rpki-client