Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.mft
File:                     B52QU3F6FqdsEK6Dj1YlBVvgSB8.mft (raw, json)
Hash identifier:          UwQFSnH6Euia0qZNESnwtKxLYonalYbFPNaZKZm3nxE=
Subject key identifier:   19:9F:5C:1D:6E:41:CB:F0:0C:35:78:93:AC:65:A7:30:31:DE:4D:C3
Authority key identifier: 07:9D:90:53:71:7A:16:A7:6C:10:AE:83:8F:56:25:05:5B:E0:48:1F
Certificate issuer:       /CN=079d9053717a16a76c10ae838f5625055be0481f
Certificate serial:       01A06FBA2956E04CEA49ADCBD748C064ABB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B52QU3F6FqdsEK6Dj1YlBVvgSB8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.mft
Manifest number:          16AA
Signing time:             Sat 05 Sep 2026 04:01:06 +0000
Manifest this update:     Sat 05 Sep 2026 04:01:06 +0000
Manifest next update:     Sun 06 Sep 2026 04:01:06 +0000
Files and hashes:         1: B52QU3F6FqdsEK6Dj1YlBVvgSB8.crl (hash: SeXbbWw9lCAu2UPsgOjqZarnlWe04fz1uCRLWXWUwxQ=)
                          2: UCT9k6BaPPeSMXxJ43Eo6nZzYW0.roa (hash: H/J8BuCj54OjW0xk7YjG+ivFyPL962N+uW8FPOndTZI=)
                          3: _TmmkOapg5NWp5skKiNnYl4USlg.roa (hash: Ulpzhuvm7D4wY1P9Md05o4W8SIvbcVV+X0rM6EDxDjc=)
                          4: ryiFWbpMuqXbHhTaiUR9Bmksn3I.roa (hash: 4enRDEIE99ZnVUOrH1uVQZLMyVdi+VhTW5RGUgkPXEs=)
                          5: szJDTDjk11lPCTowxUuTkr1LOjA.roa (hash: tZ3E5yp9ifwL77hdiUkOobqFo6CYXkARUapRpbadEZc=)
                          6: tVIvfnxeNd5Q4fCCoef2VPaercM.roa (hash: UsZ5qTmb76xuEbD3sjS7Uzqq6fgKmtSM905Jk8/9DNA=)
                          7: wRtbNPKwzn29lLHL-XgfTc7v1-E.roa (hash: HKr7T3FnocuYvThL/hQV2CDARcO253MaFTxSFktB4b8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B52QU3F6FqdsEK6Dj1YlBVvgSB8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 20:21:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6f:ba:29:56:e0:4c:ea:49:ad:cb:d7:48:c0:64:ab:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=079d9053717a16a76c10ae838f5625055be0481f
        Validity
            Not Before: Sep  5 04:01:06 2026 GMT
            Not After : Sep  6 04:01:06 2026 GMT
        Subject: CN=199f5c1d6e41cbf00c357893ac65a73031de4dc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:cf:11:53:f6:ce:cc:27:aa:e2:42:26:d6:7b:
                    f8:8f:28:cd:f8:f1:ab:f3:b6:82:40:0d:25:e9:43:
                    78:39:55:58:68:4f:4e:56:12:33:71:7c:54:6d:ca:
                    34:41:51:28:a2:80:60:00:d0:58:e1:b4:8b:41:82:
                    d6:e8:c5:01:6f:90:61:02:60:8b:ed:c3:22:b7:35:
                    a3:cc:cb:ed:d2:1b:6a:83:86:59:7c:75:89:5e:eb:
                    38:90:d2:c9:84:17:c9:d2:c6:04:a2:63:93:c4:ee:
                    e9:23:3f:12:8a:c1:68:a6:4f:b6:09:6d:e0:7c:b4:
                    00:dc:6d:15:6d:c4:10:33:ba:46:f2:ab:2c:c2:c2:
                    f2:e8:b0:d2:b8:63:74:9f:13:b3:4f:b0:1e:63:43:
                    f1:b8:81:68:a8:4e:ea:31:71:cd:24:0e:ee:d2:9c:
                    e0:bd:9c:69:c8:3b:bb:4c:02:b7:09:2a:ac:ef:84:
                    44:08:09:42:91:95:a7:d3:29:7a:4b:c7:40:46:0d:
                    a5:00:1b:70:5e:01:80:de:87:6c:21:ce:83:93:07:
                    5f:64:7d:07:34:21:57:da:aa:bf:cc:f4:2f:d6:7b:
                    3c:9e:5c:6e:91:35:38:86:d0:ee:4a:ed:7e:35:b9:
                    c7:73:84:a5:08:dc:aa:1c:49:7a:7b:09:37:30:83:
                    49:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:9F:5C:1D:6E:41:CB:F0:0C:35:78:93:AC:65:A7:30:31:DE:4D:C3
            X509v3 Authority Key Identifier:
                keyid:07:9D:90:53:71:7A:16:A7:6C:10:AE:83:8F:56:25:05:5B:E0:48:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B52QU3F6FqdsEK6Dj1YlBVvgSB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:a1:33:31:1c:a7:0b:e9:24:fd:ba:5e:fc:8d:fc:14:60:25:
         ca:09:79:4e:66:9e:1d:85:3c:d6:01:77:1a:23:71:fe:0a:05:
         b4:58:ad:c0:b6:02:c6:56:8f:ad:ab:16:1e:3e:99:20:fa:25:
         44:ab:57:71:a0:fe:48:90:4e:71:99:42:df:ac:f0:db:fc:1b:
         08:09:5c:e9:ad:fa:c0:40:dd:21:8a:b6:29:83:a9:3a:14:16:
         3e:55:0a:31:87:ce:40:1f:11:9b:e0:4e:40:b7:c8:e5:f4:f8:
         b9:d2:ec:35:68:b6:12:54:cc:8a:b4:5e:ab:08:e8:0f:56:ea:
         4b:b9:47:04:14:40:ba:71:1c:74:7e:9e:ef:3d:b9:36:ea:9f:
         b7:7e:6b:a5:c4:ce:89:7d:5a:b7:ce:e0:83:f3:be:37:00:e4:
         b8:98:45:ab:a8:da:03:81:e8:43:23:df:2b:ea:80:58:43:7b:
         0f:84:5c:ed:e1:32:61:ac:d1:a5:ab:46:32:1b:d0:7b:97:f0:
         7e:78:78:72:da:6c:dd:f6:72:ce:9c:25:72:f1:f8:20:d9:35:
         f3:8c:0c:79:87:7d:14:8f:17:20:e4:b1:d6:9b:c8:47:32:71:
         8a:1c:0d:0b:22:75:a6:30:40:e2:8f:52:36:f6:62:19:ed:14:
         94:05:3f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:34:27 2026 by rpki-client