Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.mft
File:                     _byekQMWvi8EM6qVOSzWc53Ca4Y.mft (raw, json)
Hash identifier:          OS1Mpz/JGUoo6oEkigSnvZ6nQWHcqG5R8iV828iBUTA=
Subject key identifier:   A9:71:19:8A:39:6E:70:5A:16:5B:ED:B4:B0:F0:8E:9B:91:21:54:95
Authority key identifier: FD:BC:9E:91:03:16:BE:2F:04:33:AA:95:39:2C:D6:73:9D:C2:6B:86
Certificate issuer:       /CN=fdbc9e910316be2f0433aa95392cd6739dc26b86
Certificate serial:       01A08641AFED675F684495569960AD71DD94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_byekQMWvi8EM6qVOSzWc53Ca4Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.mft
Manifest number:          1A46
Signing time:             Wed 09 Sep 2026 13:00:46 +0000
Manifest this update:     Wed 09 Sep 2026 13:00:46 +0000
Manifest next update:     Thu 10 Sep 2026 13:00:46 +0000
Files and hashes:         1: W51aSCH5iLe_5vEXYpA2X4F2HE8.roa (hash: ZbZbQYSFnkBpfEvsfFoB6giW5sjyWzNWyKbHcpK0sVE=)
                          2: _byekQMWvi8EM6qVOSzWc53Ca4Y.crl (hash: NzHoF+f7va2+SPXUcxM1thpKWcUh2I61dDqyrBbnOJ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_byekQMWvi8EM6qVOSzWc53Ca4Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 10 Sep 2026 13:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:86:41:af:ed:67:5f:68:44:95:56:99:60:ad:71:dd:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdbc9e910316be2f0433aa95392cd6739dc26b86
        Validity
            Not Before: Sep  9 13:00:46 2026 GMT
            Not After : Sep 10 13:00:46 2026 GMT
        Subject: CN=a971198a396e705a165bedb4b0f08e9b91215495
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:79:6e:30:b3:6e:b4:84:e3:c1:3d:c3:85:18:
                    0d:5d:86:44:20:2a:fa:be:22:f1:3b:0a:89:ca:c5:
                    06:3d:1e:db:6b:37:6e:48:ae:5a:7d:de:0b:94:3f:
                    d7:d9:fb:1c:e3:42:89:36:0d:ae:5b:91:8b:a6:8c:
                    a8:bf:45:12:74:a1:d8:33:f8:0e:1b:06:73:a0:2c:
                    8b:4c:45:10:90:94:af:0d:9e:06:59:89:2d:80:3b:
                    f6:d7:6f:31:90:6b:12:f8:5f:75:df:28:3a:a5:ac:
                    81:64:b8:20:99:dc:f4:59:67:5a:ae:f7:fb:ee:74:
                    9e:a1:ba:84:2a:fc:34:62:e0:ee:70:1e:81:ca:9a:
                    68:dd:cc:30:07:40:2b:4e:e2:c6:54:09:75:79:37:
                    47:c3:cf:d7:03:5d:d0:5b:d7:5b:5b:1b:8c:2e:38:
                    a7:f6:9b:3f:b0:60:76:34:22:a1:33:41:21:43:bc:
                    24:91:ea:17:4d:87:80:64:73:2e:db:9b:b3:4a:21:
                    c9:a5:e4:6c:c5:1b:ec:83:90:59:56:8e:6b:0b:87:
                    0f:e7:67:80:2a:bc:e0:a9:ed:0a:fc:e8:6b:6b:39:
                    03:65:cb:f5:c3:15:c6:21:27:30:95:13:c2:1b:15:
                    dd:5d:c6:7d:fd:d1:62:c3:7c:0c:85:b8:62:46:b3:
                    a6:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:71:19:8A:39:6E:70:5A:16:5B:ED:B4:B0:F0:8E:9B:91:21:54:95
            X509v3 Authority Key Identifier:
                keyid:FD:BC:9E:91:03:16:BE:2F:04:33:AA:95:39:2C:D6:73:9D:C2:6B:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_byekQMWvi8EM6qVOSzWc53Ca4Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:db:f6:85:d8:8b:76:ac:24:b0:b1:f3:6c:aa:a8:cc:1a:07:
         e4:80:86:51:36:93:f1:ae:05:58:76:45:3a:62:b4:61:35:43:
         aa:ef:70:94:99:42:7d:5e:fd:a3:d7:c0:3c:18:81:8b:5e:34:
         ef:3b:e0:22:3b:18:da:68:d0:1c:f7:4c:42:b2:52:46:63:4a:
         6d:e2:09:05:0d:8d:20:de:15:1a:cf:fb:70:e5:2b:f7:6a:09:
         e7:83:2b:a7:f6:81:64:da:17:e1:e3:9b:76:6b:71:99:4f:8e:
         78:7a:2a:bb:41:42:05:78:c5:18:9f:c9:0e:bb:c8:2c:69:e0:
         81:91:5f:04:94:6a:20:ed:48:bf:2c:96:6f:a0:31:ff:33:b4:
         dc:55:42:e2:69:a9:6e:e6:88:97:96:3b:97:dc:84:18:cf:6a:
         19:0e:4b:a3:7e:77:5d:2b:d3:43:bc:fb:63:c6:c8:35:fe:42:
         fe:ea:2d:3c:19:20:48:19:d2:a1:77:72:0b:a5:0d:8d:49:d4:
         ce:df:8c:30:80:74:a9:bc:83:a8:01:10:06:6e:7c:b3:08:d5:
         e0:90:04:ea:b0:3b:d9:22:15:94:c9:31:03:51:b0:cc:1b:54:
         ad:ce:d5:09:f4:56:81:f2:dd:76:4f:f3:cf:f0:cf:74:76:13:
         e7:b8:4b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 16:39:21 2026 by rpki-client