Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft
File:                     2-arjgxG6EG0TSucawO7ZfViHbE.mft (raw, json)
Hash identifier:          PeVQ1VCRN0+PycuBuQW6kdAurV/Kzy9IpOW4m4aJkxU=
Subject key identifier:   C1:CB:C1:2A:71:6E:2A:49:19:DC:C9:3A:41:A9:69:92:DD:54:89:5E
Authority key identifier: DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1
Certificate issuer:       /CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1
Certificate serial:       01A087C2C9CDDFE5DB6897646DFBE3B84911
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft
Manifest number:          1A68
Signing time:             Wed 09 Sep 2026 20:01:24 +0000
Manifest this update:     Wed 09 Sep 2026 20:01:24 +0000
Manifest next update:     Thu 10 Sep 2026 20:01:24 +0000
Files and hashes:         1: 2-arjgxG6EG0TSucawO7ZfViHbE.crl (hash: /UzyUD9BPCmj4oL0dyUsJB35zNVH60NcWPyQd1j6P28=)
                          2: 3gBGUy3u0kv0cMFfYhefm1zv6V4.roa (hash: wbVQO0NG95NJdUKsQ+Wjm9lVf3DsbDyNxF0jF2IdjBg=)
                          3: 6Pnb9u2-c1eMhAGiRwBCeQTT4ro.roa (hash: 1JXCVihKxq73Qe1ncqplSKlgiZyg5/rbL6k+wZhdDKo=)
                          4: 7DBa_6nBybw3J8T8dr7yX7ebiwU.roa (hash: 9lkcVj8pg/THlhFClMP/jc7G+HKyv/jKnpXVV+mQkS4=)
                          5: 9VcWKWB5puA52wsDDDkNDjxeGR4.roa (hash: GlsIfnVs54CADMaRa3Sk/1oPA7tZtu4TEPhze/G9m8w=)
                          6: B7nfsbI7vpYat2Veoezdf_TcIy8.roa (hash: ZifWcufC5UurQhjWI81wwKVDTfPl5QEDU7f59ef2yA4=)
                          7: Daz8bhqhbaAz3OEyLaZDp_txPzA.roa (hash: FM1qUTL0CvrCixQ27I0/1ARdD95NXI7GlqZPBu6d9FA=)
                          8: KZXfDjuE-PvJiBRVRI6B8WHyooo.roa (hash: OMT2qoqGQOn2tlDcwwNCQQxD6FlT7A94fPogcjgcLoY=)
                          9: RVfXd-D1ecB560CRD5YifVCpd1s.roa (hash: VBLJ7mxpiyU44wmUNd5IC/WX+1HbYUo9OBJtin4d0Sc=)
                          10: TLi5DNB1nha4h6YESMgyGrCORWo.roa (hash: EUg1KiZtD+nVctjCGIesOCkqRzlFdgvGJVlZhMuO3Jw=)
                          11: W6iIRl0L8RqgsWE1Gb53VbKhPJM.roa (hash: WvBWYJugMc9m2razXANTfUWneyx9UR/cKj0ZTuIj80s=)
                          12: j4OaetARNIVx-9EsgUUwBCsDjoA.roa (hash: 4DqJXihPNyacK6qcrUCR2jeCbK8fq/Etn5AHTyGsM5g=)
                          13: m4jWmUWu_NL833wHpjlo_itnadw.roa (hash: RwOqkHbntUy2jo5lIc01YSzNvRHA1IqmYHya8PZXPD0=)
                          14: ueXdZ_sUp3BHaJG0qBz9Q6PZnBI.roa (hash: ziOQYMjTSgBNkfwAGhNuQHXVrxoXxGh9ZkXw5VRr58w=)
                          15: wUccj_rDqcMS5f6rHGM1S82tXw8.roa (hash: Am0yB5T/uFMdaWWU3crSox2wHqF23olZ6K+6iaufknI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 10 Sep 2026 20:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:87:c2:c9:cd:df:e5:db:68:97:64:6d:fb:e3:b8:49:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1
        Validity
            Not Before: Sep  9 20:01:24 2026 GMT
            Not After : Sep 10 20:01:24 2026 GMT
        Subject: CN=c1cbc12a716e2a4919dcc93a41a96992dd54895e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:f3:e1:c0:ee:db:97:05:07:df:99:f7:e3:42:
                    94:ba:70:d3:3b:ca:0b:ea:9b:33:ee:f8:f5:ea:6f:
                    47:72:2e:04:c5:a5:55:75:ff:dc:96:20:28:5d:a8:
                    42:69:0a:0d:51:4a:f2:d0:54:e7:7d:7e:06:df:d5:
                    80:01:21:66:43:d8:f7:55:72:83:fd:95:e4:e1:8c:
                    95:eb:82:3a:37:fa:3f:51:f0:9b:f4:c9:2b:28:c2:
                    95:4c:af:60:01:93:df:34:9d:44:d1:18:ca:d0:3b:
                    56:5a:84:9c:72:7c:3c:fd:fd:a6:0d:49:22:b0:4f:
                    0b:23:61:5f:e6:f4:3d:23:11:a6:c8:f8:4b:19:bf:
                    02:73:36:9b:65:af:21:61:e5:06:db:b2:12:eb:a4:
                    76:69:ed:d8:12:97:82:f0:85:de:94:cd:d1:a4:b9:
                    e1:0c:b7:42:e8:06:66:e9:16:c6:d4:d7:95:3a:94:
                    5f:51:53:de:25:e0:c9:89:a8:cf:79:23:6d:f7:68:
                    e8:13:95:e3:76:7a:27:57:16:8b:99:57:fa:b4:75:
                    0b:43:c1:92:33:d9:66:40:5a:e7:80:d0:e7:93:5b:
                    a9:ba:d8:3e:c9:bd:41:c2:40:aa:10:a8:53:5f:79:
                    44:3b:49:c7:e5:ae:56:a1:95:e9:27:b1:2e:3f:d6:
                    78:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:CB:C1:2A:71:6E:2A:49:19:DC:C9:3A:41:A9:69:92:DD:54:89:5E
            X509v3 Authority Key Identifier:
                keyid:DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:49:17:f2:03:a4:75:f6:c9:00:7b:26:62:47:7f:5a:af:e4:
         69:9e:9d:1d:fc:eb:30:b2:2d:98:ba:f5:b2:71:b1:2b:a2:db:
         b5:08:fc:0c:e1:c5:17:4a:b5:5c:f3:96:00:f2:7b:52:c2:bb:
         bd:13:70:92:20:68:9f:1b:c5:78:58:a2:84:07:2a:da:5f:43:
         30:1c:4d:c5:65:54:e1:55:c5:5d:f0:d8:76:cf:1a:e8:49:43:
         97:8e:cf:1e:11:c6:ae:98:d5:f8:66:ec:81:a1:d6:86:95:86:
         3d:d4:99:14:22:c1:b5:1d:3a:bc:3d:cc:19:14:73:4b:4f:61:
         ea:fd:8c:6f:32:bc:f7:92:55:8a:02:6e:f8:fd:8f:dc:f3:42:
         48:f2:20:f0:5a:6d:56:6d:b1:a7:61:96:76:4b:8d:6e:01:41:
         1d:bd:85:62:62:0b:72:86:62:93:c8:41:af:48:ce:99:c7:af:
         55:8b:58:28:fb:e0:f3:a1:8a:ba:11:6c:05:7f:b2:64:34:2a:
         56:ea:c1:15:1e:0c:df:76:45:0e:fd:be:1f:fb:95:17:e8:8f:
         60:e6:07:7d:61:30:0d:78:1f:90:3c:fd:27:23:a3:3f:28:64:
         ec:10:49:fe:c9:72:72:fe:84:34:09:9c:bb:bf:02:21:17:c0:
         2b:b2:c8:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 02:51:43 2026 by rpki-client