Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.mft
File:                     tm6nNZIhwbd9bMAG97ZwapqQgpk.mft (raw, json)
Hash identifier:          YDokhGC4SV52yqzBwFVbhKNzpigbsFc6J+CzERZE1zU=
Subject key identifier:   51:B7:E5:DC:DF:62:F6:B0:84:26:36:63:04:15:85:88:17:BD:98:F0
Authority key identifier: B6:6E:A7:35:92:21:C1:B7:7D:6C:C0:06:F7:B6:70:6A:9A:90:82:99
Certificate issuer:       /CN=b66ea7359221c1b77d6cc006f7b6706a9a908299
Certificate serial:       01A0B5089662579AC97ECD92C814B0465367
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tm6nNZIhwbd9bMAG97ZwapqQgpk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.mft
Manifest number:          1A72
Signing time:             Fri 18 Sep 2026 15:00:33 +0000
Manifest this update:     Fri 18 Sep 2026 15:00:33 +0000
Manifest next update:     Sat 19 Sep 2026 15:00:33 +0000
Files and hashes:         1: dOf14pcWNhqACX_OuHqgnInOiSY.roa (hash: u/CEFotnqGOPUeJz8opPU+xR5CT8FS6553goTtL0XDo=)
                          2: tm6nNZIhwbd9bMAG97ZwapqQgpk.crl (hash: 6MlIaUqWuPqddMbDamPBWvN6TmN/To+NP/0+Q05gPnI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tm6nNZIhwbd9bMAG97ZwapqQgpk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Sep 2026 15:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:b5:08:96:62:57:9a:c9:7e:cd:92:c8:14:b0:46:53:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b66ea7359221c1b77d6cc006f7b6706a9a908299
        Validity
            Not Before: Sep 18 15:00:33 2026 GMT
            Not After : Sep 19 15:00:33 2026 GMT
        Subject: CN=51b7e5dcdf62f6b0842636630415858817bd98f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:71:bd:bf:94:8b:71:6b:31:44:b9:5e:75:e5:
                    01:25:77:eb:01:04:92:ad:6d:b3:e0:94:ab:4c:0e:
                    10:9a:37:9b:ee:c0:cd:c7:f6:f0:6e:4c:f7:29:cc:
                    0a:9c:1d:78:d8:ae:94:22:2a:ce:77:aa:ef:1a:85:
                    c0:4e:21:ed:30:4c:75:eb:80:63:1d:b8:0b:70:5b:
                    47:8d:60:54:d6:35:61:99:08:8e:dd:a0:ee:c0:fc:
                    fe:70:a2:f9:2b:9f:47:4a:b8:71:fb:81:f2:ab:09:
                    48:f9:71:3e:48:aa:90:9b:29:b9:18:c2:ae:3c:d7:
                    b6:a2:c6:06:73:b5:59:32:7d:98:3f:f6:68:6b:6b:
                    e9:68:ec:b7:d9:5c:e5:45:16:1b:40:ba:e0:dc:5e:
                    ed:c5:2e:f0:dc:18:e7:8a:e9:38:b5:20:76:b8:34:
                    91:59:25:48:54:e6:0c:e1:05:e5:1a:42:36:67:c7:
                    0b:a0:b6:ad:fc:3c:2c:30:ba:10:8a:5a:7a:d7:6f:
                    68:23:e8:21:8b:53:70:c2:58:a5:83:7e:66:00:1f:
                    ac:5a:63:a3:7a:88:5e:e2:3d:9e:1e:ac:b4:ea:9f:
                    46:63:1d:bf:f5:a4:a6:97:dc:10:95:df:6f:09:c3:
                    af:12:58:c3:19:a9:f2:20:e5:d0:14:98:04:49:16:
                    7c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:B7:E5:DC:DF:62:F6:B0:84:26:36:63:04:15:85:88:17:BD:98:F0
            X509v3 Authority Key Identifier:
                keyid:B6:6E:A7:35:92:21:C1:B7:7D:6C:C0:06:F7:B6:70:6A:9A:90:82:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tm6nNZIhwbd9bMAG97ZwapqQgpk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:5b:51:e4:99:7d:85:80:21:46:ee:71:1d:e1:61:f3:8e:47:
         97:04:cd:95:40:80:31:70:57:2c:b0:ea:7d:fa:f0:7d:67:33:
         8a:69:ce:32:cd:e0:f6:4d:19:b4:fa:57:df:73:e8:c8:7a:81:
         0a:a7:d2:d9:3a:47:f3:70:1c:1d:80:3b:83:b0:a5:f3:ff:1c:
         49:c2:cd:e2:13:86:68:54:3a:a4:c0:71:71:9c:51:dd:8b:fe:
         90:e1:97:4e:28:fe:70:f8:37:89:7b:21:83:3f:7b:64:a8:6e:
         a5:34:31:99:fb:d8:7f:3a:25:78:25:3f:41:bc:f6:47:34:b0:
         f9:57:b2:7c:5e:52:15:c3:4f:0e:28:e1:64:2e:83:fa:77:21:
         b1:a5:a4:86:67:b4:68:46:20:4b:b0:36:5a:67:45:f7:54:43:
         6d:fb:12:ab:bc:23:74:9c:ee:a2:0a:63:50:f2:b0:81:97:91:
         1e:c7:6f:98:c3:3a:80:08:e7:2e:e5:a9:74:5b:36:96:22:7c:
         b8:ec:62:9f:bf:90:3a:24:77:08:96:b3:be:f1:df:17:a9:1d:
         d3:10:65:ce:6e:9b:04:01:6c:f9:be:c3:2d:34:91:51:d7:9d:
         19:34:3b:fa:d4:b5:87:78:47:3a:f0:52:75:38:51:9c:4e:41:
         c6:01:74:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 20:48:21 2026 by rpki-client