Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/6TnhLsRWxYI9L0BoOB6A9DMy7pM.mft
File:                     6TnhLsRWxYI9L0BoOB6A9DMy7pM.mft (raw, json)
Hash identifier:          fO40jJmRweHQW/vMgLztqqP3QE3gQHX84PnVRKVg/eQ=
Subject key identifier:   45:9B:32:75:B3:55:77:2A:CF:E5:22:66:6E:38:06:5A:EA:E3:D7:7E
Authority key identifier: E9:39:E1:2E:C4:56:C5:82:3D:2F:40:68:38:1E:80:F4:33:32:EE:93
Certificate issuer:       /CN=e939e12ec456c5823d2f4068381e80f43332ee93
Certificate serial:       01A067CAD1AB9FB939053D2814ADFE92B6D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6TnhLsRWxYI9L0BoOB6A9DMy7pM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/6TnhLsRWxYI9L0BoOB6A9DMy7pM.mft
Manifest number:          AF
Signing time:             Thu 03 Sep 2026 15:02:20 +0000
Manifest this update:     Thu 03 Sep 2026 15:02:20 +0000
Manifest next update:     Fri 04 Sep 2026 15:02:20 +0000
Files and hashes:         1: 6TnhLsRWxYI9L0BoOB6A9DMy7pM.crl (hash: Qmc4ArOyBexLfQuwQnNAeE/VjslEBTsGasD1SNmepas=)
                          2: GKjbLO1_Vgx7dTSR9CTTd2P_xU4.roa (hash: UjwX3kVyOAC6szTsRew5gw7veFMEOvn3s6BDfa+zprA=)
                          3: GzDfSxqDCeSPBf2y3shNBBiZXvI.roa (hash: /+BjohrpeY7LNc+qriITdKXkfsBB8VP8fjcOHUD3hXE=)
                          4: RlLmyksqOdY49aYxtLwvWba7JE4.roa (hash: Ow9h/esw5o/I/Xu/UbWS0K9IFr+qLIBHcMZwlKPeqDs=)
                          5: esoyd4IrpdY7x5PNXLXB5VvYAbI.roa (hash: lEl0bccjKhWo3DBBIFZjtW/OMW53+2yV7zaPwrJwExk=)
                          6: hAKbSwAWtT9vkY3LZF9STshKfN0.roa (hash: Z7QB3UDvwHlmX3oqye1DZsyN1am+1lZGQVSApBtgUlc=)
                          7: shpDfVCiNqZZihnMrj5dXfgsCAQ.roa (hash: HPrUqlE/bGZfDnfrOOeSX3Y6okisxt+WgP9TyVPrn2Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/6TnhLsRWxYI9L0BoOB6A9DMy7pM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/6TnhLsRWxYI9L0BoOB6A9DMy7pM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6TnhLsRWxYI9L0BoOB6A9DMy7pM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 04 Sep 2026 13:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:67:ca:d1:ab:9f:b9:39:05:3d:28:14:ad:fe:92:b6:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e939e12ec456c5823d2f4068381e80f43332ee93
        Validity
            Not Before: Sep  3 15:02:20 2026 GMT
            Not After : Sep  4 15:02:20 2026 GMT
        Subject: CN=459b3275b355772acfe522666e38065aeae3d77e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e9:13:f1:bc:a3:66:11:0b:e0:fa:e0:29:e8:
                    90:2c:82:90:11:19:6c:7f:4b:3e:1d:5a:f4:ff:02:
                    d4:0b:89:09:63:e2:1b:8c:d1:76:af:d1:b5:f2:d6:
                    4b:a5:59:68:f8:32:09:ae:4a:e3:4a:79:a7:52:12:
                    80:05:47:40:05:56:4e:02:fa:63:f1:1d:d3:d4:a6:
                    22:8f:02:e4:a8:7e:a5:ec:4d:57:55:36:67:3e:ec:
                    55:1d:ee:48:ee:61:83:4c:75:20:32:3c:f3:fe:69:
                    44:37:12:50:4b:13:b7:a2:18:87:06:1e:99:b1:6a:
                    15:25:57:cb:78:9e:c7:75:ab:cd:0d:13:4d:f8:78:
                    91:22:59:80:46:c6:80:9f:4f:cf:4b:95:e2:5c:bc:
                    28:5b:11:c3:f3:89:c1:cd:4f:30:27:db:cd:8d:54:
                    ad:21:3f:a0:25:ec:d3:e8:a9:0e:36:66:96:72:d6:
                    09:fc:34:e5:0d:e0:c1:a5:37:bd:2b:41:f4:b8:53:
                    6d:2b:37:47:17:0c:b9:b0:12:ed:83:cd:c7:32:85:
                    9c:d9:8e:4c:1d:0f:a8:8d:d3:32:ce:a2:3e:30:06:
                    c2:56:de:49:b1:1a:23:99:54:0c:06:97:2b:2c:98:
                    99:4d:56:88:c1:61:c0:da:05:6e:5c:7e:83:34:1a:
                    cd:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:9B:32:75:B3:55:77:2A:CF:E5:22:66:6E:38:06:5A:EA:E3:D7:7E
            X509v3 Authority Key Identifier:
                keyid:E9:39:E1:2E:C4:56:C5:82:3D:2F:40:68:38:1E:80:F4:33:32:EE:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6TnhLsRWxYI9L0BoOB6A9DMy7pM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/6TnhLsRWxYI9L0BoOB6A9DMy7pM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/6TnhLsRWxYI9L0BoOB6A9DMy7pM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:bc:d1:5b:b3:c3:ec:17:7c:5f:67:29:17:c9:58:33:5e:e1:
         cc:33:68:b6:e0:6a:11:03:08:a2:ee:6d:50:70:04:97:ed:4f:
         03:ea:90:dc:ad:e9:2f:6d:8b:b5:34:2e:a1:17:09:f2:78:27:
         63:d7:15:60:45:57:10:07:5a:f7:47:7c:96:00:7b:9a:3e:66:
         dc:f1:91:1f:41:e8:ca:3d:b1:5f:cd:98:87:ea:d1:6d:47:25:
         50:ac:ab:ce:57:e2:0f:86:ab:ae:62:c2:36:40:73:64:27:9b:
         0b:da:ea:3f:d3:83:27:f6:af:64:3f:67:9d:0e:4a:19:30:02:
         e8:14:94:96:87:36:07:c9:3b:9d:d7:6e:b0:b4:50:a6:c7:4c:
         5e:50:d3:d2:fe:4d:9c:39:94:6f:a7:7c:9e:fd:93:73:85:75:
         9e:8f:c2:c9:41:f1:10:e2:5a:3e:f8:8a:c4:f1:01:9b:b8:e8:
         a2:d5:43:b1:f1:e6:e6:5c:1f:08:75:38:e2:ba:1f:64:51:43:
         92:ec:53:97:a7:b4:29:27:31:51:74:8d:ef:7d:17:8e:97:62:
         c1:bd:b9:3e:14:31:ac:f4:ca:4c:87:59:48:f2:cd:d7:2a:c2:
         ec:2f:80:68:b4:d1:e7:49:fe:3a:86:ea:d8:fe:63:65:74:83:
         0b:9b:44:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 18:57:38 2026 by rpki-client