Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/m2Mu22NaqPnECgSVp6Y7tlOVgLs.mft
File:                     m2Mu22NaqPnECgSVp6Y7tlOVgLs.mft (raw, json)
Hash identifier:          GHBCm/ejGXbtNQfLVxc5wuQM5TQPhizvVjpN+loACZ0=
Subject key identifier:   A8:65:9F:61:76:99:F6:47:C6:D5:63:E7:8B:AC:9D:7E:42:37:2C:A9
Authority key identifier: 9B:63:2E:DB:63:5A:A8:F9:C4:0A:04:95:A7:A6:3B:B6:53:95:80:BB
Certificate issuer:       /CN=9b632edb635aa8f9c40a0495a7a63bb6539580bb
Certificate serial:       01A08E6A2FD85E7210855DF0AEBBFE44C7C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m2Mu22NaqPnECgSVp6Y7tlOVgLs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/m2Mu22NaqPnECgSVp6Y7tlOVgLs.mft
Manifest number:          197F
Signing time:             Fri 11 Sep 2026 03:01:58 +0000
Manifest this update:     Fri 11 Sep 2026 03:01:58 +0000
Manifest next update:     Sat 12 Sep 2026 03:01:58 +0000
Files and hashes:         1: NGSRZ0UFf37oBgMflKRqMJVzu1A.roa (hash: QQl6ufsi4HXmy3ASinxAh+zaiJ4iVflIUzf0L3Srl8Q=)
                          2: cnqrVuurtzefRH7SXfJZEmIqN0c.roa (hash: Vh3D8b6qjUnsJyNx9UNrDRqqXIGsiNFhU3lLE/75w7s=)
                          3: m2Mu22NaqPnECgSVp6Y7tlOVgLs.crl (hash: 6r98hTzb4S2kPp7KqZ6nfE8wjZRWFZ3IIYbPZrsigHk=)
                          4: sPNW9L7nvdJWjHEG7P1B2mLSY6I.roa (hash: GJ8bFB5CbpvRHqB9ftaag6jbvrupCXTR5QaGBQCK/Ms=)
                          5: uLKZdDovNYh-DpBqqKP-yEKFq6g.roa (hash: VXKMVBqqwBpyEzSrFgtoLzoyOdF5dlP0dTicEmqV8zw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/m2Mu22NaqPnECgSVp6Y7tlOVgLs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/m2Mu22NaqPnECgSVp6Y7tlOVgLs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m2Mu22NaqPnECgSVp6Y7tlOVgLs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8e:6a:2f:d8:5e:72:10:85:5d:f0:ae:bb:fe:44:c7:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b632edb635aa8f9c40a0495a7a63bb6539580bb
        Validity
            Not Before: Sep 11 03:01:58 2026 GMT
            Not After : Sep 12 03:01:58 2026 GMT
        Subject: CN=a8659f617699f647c6d563e78bac9d7e42372ca9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:af:25:38:6c:58:fe:f6:c7:c5:75:58:a6:cd:
                    12:84:3a:88:6f:bd:df:44:6b:b3:aa:74:45:0f:90:
                    56:92:64:a8:3e:7c:28:85:1a:6f:2a:7f:06:f9:5d:
                    a8:d7:e1:3d:06:31:5e:37:19:e6:10:e9:8e:48:35:
                    e2:be:51:3c:be:00:1a:7c:b4:a8:57:de:cc:8c:25:
                    ac:aa:cd:ba:54:29:45:10:78:3d:0b:6e:1d:bd:ea:
                    e1:50:ab:6e:c8:ec:e3:76:4d:cc:be:03:3c:bc:94:
                    53:dd:95:07:9a:02:5c:74:db:10:0e:03:04:26:73:
                    78:44:9c:05:e8:25:10:82:ad:6d:1b:27:61:48:d9:
                    a9:f4:68:0b:bf:c7:c1:05:4c:cf:ef:e5:24:64:f8:
                    49:1c:2e:03:3b:cd:b8:e9:f6:32:08:cb:ec:97:cf:
                    16:0d:a4:c5:a6:3c:4f:d2:f8:e0:1a:00:1e:03:a9:
                    d5:92:88:d2:88:a8:f6:0b:48:dc:dc:d4:e7:2a:b9:
                    98:cd:f1:87:15:a7:07:12:24:8a:14:8d:ad:fa:ae:
                    91:b2:7f:ca:17:ed:42:2c:88:32:df:4d:be:26:2f:
                    98:f3:83:36:1a:50:79:a3:71:99:c1:ed:3e:93:11:
                    42:6f:c3:b3:60:7f:f2:b4:70:1e:e1:df:3e:91:c4:
                    f0:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:65:9F:61:76:99:F6:47:C6:D5:63:E7:8B:AC:9D:7E:42:37:2C:A9
            X509v3 Authority Key Identifier:
                keyid:9B:63:2E:DB:63:5A:A8:F9:C4:0A:04:95:A7:A6:3B:B6:53:95:80:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2Mu22NaqPnECgSVp6Y7tlOVgLs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/m2Mu22NaqPnECgSVp6Y7tlOVgLs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/m2Mu22NaqPnECgSVp6Y7tlOVgLs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:ef:51:f1:7e:01:98:a4:14:4b:b5:0c:84:54:a8:f3:99:ac:
         38:3a:db:f7:b2:b5:4c:c0:a3:6e:37:fa:75:f5:d7:dc:0d:d1:
         9e:59:f5:af:54:44:d8:18:5e:f5:b0:a3:db:a0:4b:0b:c9:e1:
         b2:b1:70:38:49:61:d2:8d:6c:82:e6:b6:d5:a0:b4:92:51:38:
         31:e6:8f:84:1c:11:c9:c5:2d:80:b8:97:2a:62:9d:40:30:b4:
         7b:88:63:b0:eb:28:7a:2e:05:e2:a4:5c:e2:39:91:2f:9b:42:
         16:6f:a2:e9:8d:f4:30:ea:a6:bb:e9:57:02:5d:c9:ff:27:39:
         92:3c:a1:83:a8:5a:5c:4f:fc:50:04:cd:1c:56:2c:c6:71:73:
         20:f2:cb:83:69:73:10:9f:a9:68:65:96:5c:3c:96:ed:6f:30:
         e8:97:c9:ff:58:4c:16:2c:cd:42:a7:79:cf:b7:52:5f:73:b3:
         e2:c5:1d:d0:39:43:17:2e:bf:9a:f9:1a:a6:b9:50:41:7e:2b:
         4c:3e:5a:b9:7c:bc:6f:16:b2:3b:67:10:2d:7d:2f:12:02:75:
         a8:9c:ea:2f:78:6b:1e:d8:d4:11:5e:14:f1:bc:ae:f8:32:54:
         12:46:ff:e6:be:10:d5:96:e9:86:9a:fe:d4:0f:63:9f:89:81:
         96:fa:99:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 06:50:32 2026 by rpki-client