Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/e38fc5-13a9-4906-b55e-79453adff1bd/1/m1bbbkurl01Zvy7tECKgLu49N64.mft
File:                     m1bbbkurl01Zvy7tECKgLu49N64.mft (raw, json)
Hash identifier:          3zOH7jZ/XJlOYIAMGR2FXCtXKmqV48jC7z7K4+oX3R0=
Subject key identifier:   5B:84:8B:59:88:7E:B0:DF:A0:62:9D:86:DA:FC:F5:21:79:86:19:0B
Authority key identifier: 9B:56:DB:6E:4B:AB:97:4D:59:BF:2E:ED:10:22:A0:2E:EE:3D:37:AE
Certificate issuer:       /CN=9b56db6e4bab974d59bf2eed1022a02eee3d37ae
Certificate serial:       01A0889DCA804469C97F577EC7E51A4362AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m1bbbkurl01Zvy7tECKgLu49N64.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/e38fc5-13a9-4906-b55e-79453adff1bd/1/m1bbbkurl01Zvy7tECKgLu49N64.mft
Manifest number:          C0
Signing time:             Thu 10 Sep 2026 00:00:37 +0000
Manifest this update:     Thu 10 Sep 2026 00:00:37 +0000
Manifest next update:     Fri 11 Sep 2026 00:00:37 +0000
Files and hashes:         1: MhgYeI3nHsQ7EnEqBs3ix3URXK4.asa (hash: OMQ4Jfqr1uKSBnWc8VFQoJ2KmKvXwz+ZT7n6PnlnJ/k=)
                          2: m1bbbkurl01Zvy7tECKgLu49N64.crl (hash: Swd5tj77SZLIc3tYzf26BGOUKW+OXTQHHsqHeW3e0Lk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/e38fc5-13a9-4906-b55e-79453adff1bd/1/m1bbbkurl01Zvy7tECKgLu49N64.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/e38fc5-13a9-4906-b55e-79453adff1bd/1/m1bbbkurl01Zvy7tECKgLu49N64.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m1bbbkurl01Zvy7tECKgLu49N64.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 10 Sep 2026 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:88:9d:ca:80:44:69:c9:7f:57:7e:c7:e5:1a:43:62:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b56db6e4bab974d59bf2eed1022a02eee3d37ae
        Validity
            Not Before: Sep 10 00:00:37 2026 GMT
            Not After : Sep 11 00:00:37 2026 GMT
        Subject: CN=5b848b59887eb0dfa0629d86dafcf5217986190b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:27:b3:aa:60:8c:9a:51:fc:60:44:a2:a1:4f:
                    fb:ea:69:7c:04:63:37:76:00:dd:03:ea:6e:28:2b:
                    ec:56:7f:58:34:97:b3:f7:06:9f:d3:f0:ed:69:04:
                    b3:a1:12:f8:cc:7e:00:03:9a:e7:02:48:25:57:c1:
                    c6:94:df:38:c4:6c:f9:b5:c4:38:77:da:e4:ee:14:
                    f4:a8:52:1f:4f:e3:2a:30:48:b1:b9:6a:7c:be:49:
                    53:4d:c9:d9:ff:4f:99:7e:4d:61:dd:fa:0a:c7:6f:
                    28:d7:2e:08:52:51:60:66:26:60:0e:36:23:7a:89:
                    03:5c:4b:27:b1:7a:69:55:75:f4:3f:15:0c:4d:2e:
                    bd:b9:3b:e3:33:dc:df:a6:d7:a2:e1:26:ac:46:f6:
                    11:a1:34:b9:82:9e:96:d3:f0:f4:89:71:cf:61:04:
                    18:90:86:b4:8e:7e:48:c0:6f:c8:8e:bd:0d:78:68:
                    f3:04:8f:db:a4:d9:8b:71:4a:e4:ad:97:6f:e0:9b:
                    db:d2:42:d2:3f:cf:2f:28:4a:71:20:68:a0:3e:af:
                    d4:3a:cb:da:53:c7:ce:47:c2:5b:0f:04:cc:4d:48:
                    23:4e:54:55:e0:59:5f:ed:54:d2:d5:14:53:06:58:
                    61:99:22:9a:0e:05:52:0d:bd:6a:72:1e:06:80:22:
                    51:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:84:8B:59:88:7E:B0:DF:A0:62:9D:86:DA:FC:F5:21:79:86:19:0B
            X509v3 Authority Key Identifier:
                keyid:9B:56:DB:6E:4B:AB:97:4D:59:BF:2E:ED:10:22:A0:2E:EE:3D:37:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m1bbbkurl01Zvy7tECKgLu49N64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e38fc5-13a9-4906-b55e-79453adff1bd/1/m1bbbkurl01Zvy7tECKgLu49N64.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e38fc5-13a9-4906-b55e-79453adff1bd/1/m1bbbkurl01Zvy7tECKgLu49N64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:06:39:3a:f7:72:12:07:37:83:7b:5b:c3:6f:db:28:bb:c9:
         70:9c:6e:fd:39:41:a7:5e:16:d9:ee:a9:43:d4:c9:e6:cc:70:
         b0:80:ed:af:a7:a8:d5:80:57:34:e5:be:06:88:aa:99:0b:84:
         fd:59:ae:4a:59:73:f7:40:31:82:9f:c2:e7:34:cd:c9:96:32:
         99:17:23:21:6e:a0:55:6a:0e:43:c5:87:64:69:14:56:e9:94:
         0a:39:b3:09:73:95:dd:95:e2:4f:b8:98:3e:8e:c5:d7:a7:00:
         1b:ce:a1:c7:c2:22:82:e9:3d:23:5d:f0:14:98:4e:45:7b:82:
         f9:f6:ba:25:49:c6:70:6b:00:59:4d:85:ba:0c:a3:83:17:13:
         9a:1e:a7:88:5f:e5:66:e9:ea:89:bb:ee:af:f4:6d:de:1c:df:
         8c:a4:29:30:87:07:e4:33:28:a2:27:24:e2:8e:5f:09:b6:e1:
         a9:a4:50:65:ae:11:f3:04:6f:30:f3:f4:51:1a:b8:00:66:c0:
         b2:96:4c:d5:af:b7:69:e6:b4:da:ce:f1:91:52:90:44:8a:59:
         d6:87:6d:50:bb:bb:7f:3c:7c:32:4b:8e:3d:dd:fa:c7:e8:9f:
         84:f2:35:47:97:77:19:16:0a:98:33:05:01:9f:9a:57:3d:87:
         8f:f6:cd:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 09:02:57 2026 by rpki-client