Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft
File:                     bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft (raw, json)
Hash identifier:          /wYrsEegCKpM1XegWdNXi2Z8rYlstR2kgWH5vNd1RnE=
Subject key identifier:   8A:1E:8C:59:01:CB:AC:F4:A0:48:B4:D7:D8:26:A5:DB:AC:F5:65:E1
Authority key identifier: 6D:06:9E:19:E1:2C:10:40:04:E8:B4:B7:5F:8A:77:89:B7:E1:13:96
Certificate issuer:       /CN=6d069e19e12c104004e8b4b75f8a7789b7e11396
Certificate serial:       01A083AF0DECA05D92DE7E871CEAC1A0AE42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft
Manifest number:          1A5C
Signing time:             Wed 09 Sep 2026 01:01:22 +0000
Manifest this update:     Wed 09 Sep 2026 01:01:22 +0000
Manifest next update:     Thu 10 Sep 2026 01:01:22 +0000
Files and hashes:         1: 2GyceDm_XAmgavG6-5vW6sV6cj8.roa (hash: kTGmpubLRdREIFhz3PYfU7sXxSrDuw6tha9TW2osTVI=)
                          2: R-Ms9tnwVFr5zGPdMpveWYmvzTU.roa (hash: 4hVn6BmRDmF60zXMMdHkc2jChJsAngJEvYhtXGC9Vjo=)
                          3: ZK9ALarqOpzm0i2rpLZ-rHOMzdo.roa (hash: RllCIZ6AldL0IOvShUd1+ZNf+viS99vPh52YLrvbtJU=)
                          4: ZmcfgQVw9WznPpWT9yLghomma18.roa (hash: dwEz5IwUCOta4WNqfA1M1PPK2wh9BaQxA/M28+Mkwpk=)
                          5: bQaeGeEsEEAE6LS3X4p3ibfhE5Y.crl (hash: VPQaaOmVcqVS1quJcKa0l+XmEn1p/srgF3cyHmhjR0Q=)
                          6: ks2_IkZaAakd1-3jQOWLy85dDy8.roa (hash: mLEy/InkNukmfeS2zm1mvXpvR+u6dmdc0Mw1w4KWFN4=)
                          7: ocrWH4LXI5AcanxmF84LShRjSnA.roa (hash: IvINQVuazfHHpSQNQUlXHe0rPDP3TKBhqPqw+YoqC5E=)
                          8: vcHdvq4j0MZDMpwY_Sh1_lhpemE.roa (hash: TJZuXEOOt0r/V9EaRl+qnNfFa6UZgYtOnc2ci1AuANA=)
                          9: yO-faN1p6CDhjtBsMnJFSamd0b4.roa (hash: f5cjUT10BBqhpOr6X0AO88BjDl80sXjlHTe7MTa/7YQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 09 Sep 2026 22:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:83:af:0d:ec:a0:5d:92:de:7e:87:1c:ea:c1:a0:ae:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d069e19e12c104004e8b4b75f8a7789b7e11396
        Validity
            Not Before: Sep  9 01:01:22 2026 GMT
            Not After : Sep 10 01:01:22 2026 GMT
        Subject: CN=8a1e8c5901cbacf4a048b4d7d826a5dbacf565e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:b3:41:c0:7b:27:24:98:25:7f:77:5b:6d:d6:
                    d8:d6:5d:a1:2e:20:c7:45:93:fa:d3:b1:d0:5f:63:
                    22:57:cd:8c:cc:5c:db:6f:2b:08:dc:69:4c:c8:63:
                    bb:4c:e2:a6:12:d5:b5:1c:b5:7a:da:9e:07:a6:bd:
                    ce:e4:3e:9f:50:62:2b:57:9a:9b:aa:83:0d:20:72:
                    e9:ba:96:4b:00:58:12:18:ab:e3:c3:96:96:15:62:
                    42:f7:c9:55:9b:14:cf:93:89:b4:0a:3c:f4:4e:cf:
                    17:9a:73:91:c3:f4:d1:0b:d4:02:92:b7:1c:ca:15:
                    1f:14:03:fc:e4:94:bb:4f:b3:39:ab:88:f6:1f:7a:
                    31:88:e4:69:93:d6:6e:e9:7b:0c:e5:c9:70:6d:99:
                    3d:df:89:7b:a4:36:87:e1:b0:e8:f2:d2:f3:25:99:
                    3e:33:3a:cf:38:c1:51:2f:a7:1b:71:04:86:78:ac:
                    0f:af:40:d7:3a:8b:ee:62:be:31:de:46:55:cd:23:
                    29:5d:ae:cf:2c:ae:3b:d1:9a:2b:70:af:c9:fa:55:
                    a7:3b:b0:be:89:be:c4:06:97:4e:c1:78:51:36:5b:
                    24:e1:30:f9:97:ca:a8:e3:e0:56:99:aa:17:72:77:
                    22:48:c2:83:15:a6:86:33:d2:b6:b1:3e:ee:42:24:
                    60:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:1E:8C:59:01:CB:AC:F4:A0:48:B4:D7:D8:26:A5:DB:AC:F5:65:E1
            X509v3 Authority Key Identifier:
                keyid:6D:06:9E:19:E1:2C:10:40:04:E8:B4:B7:5F:8A:77:89:B7:E1:13:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:52:12:11:67:93:f0:84:6e:df:ed:e4:d3:03:eb:f8:64:f0:
         26:f2:6f:52:d2:77:21:70:43:d3:4c:a6:1f:9e:d8:44:ef:42:
         66:31:ca:2b:3c:cc:76:cc:8a:46:84:ff:0c:b4:36:09:ae:85:
         fd:89:11:a4:21:24:99:8d:71:26:61:1b:01:8d:fa:91:1b:f3:
         56:63:a1:70:98:ea:d2:1c:65:e1:91:4c:98:7a:44:d8:58:e5:
         a2:37:af:82:c5:80:a7:52:07:2c:b9:e6:26:eb:62:1d:8d:fc:
         17:5c:85:2f:59:77:66:1f:8b:65:57:6c:a6:3f:b4:59:d5:9a:
         4f:e5:92:29:24:1f:78:b0:4c:f0:44:37:55:55:ab:8e:f6:f3:
         a9:cc:ec:b9:3b:67:fd:84:de:c2:5e:c8:6a:b0:15:e4:15:cd:
         71:1d:35:09:d9:89:61:cb:f3:a5:12:54:15:8e:bb:56:50:de:
         e6:7e:de:5d:9d:6c:b0:15:65:46:24:34:ad:3c:80:91:3e:fc:
         aa:1f:6b:d9:f5:b8:ce:bd:17:75:de:e1:c3:2f:c3:7b:72:c8:
         4f:a1:35:84:c3:07:63:29:16:9c:53:0a:f8:27:f5:13:fa:bc:
         11:1f:d0:25:69:bf:41:c5:1b:ef:24:f5:67:4f:f8:64:e9:b7:
         dc:47:63:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 04:42:08 2026 by rpki-client