Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.mft
File:                     mBPi9jUdO00eYapAFvGyz6YtfN8.mft (raw, json)
Hash identifier:          bCWj4ce8vEkW4UA9zcSM+iwiQYnTtsaRCgncjKtb/ak=
Subject key identifier:   D6:D1:3A:3A:D9:A0:B7:9E:9B:61:BA:33:2F:A1:0B:6E:87:4C:A5:49
Authority key identifier: 98:13:E2:F6:35:1D:3B:4D:1E:61:AA:40:16:F1:B2:CF:A6:2D:7C:DF
Certificate issuer:       /CN=9813e2f6351d3b4d1e61aa4016f1b2cfa62d7cdf
Certificate serial:       01A07328D2E157B870C6BDACA11BAD007765
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mBPi9jUdO00eYapAFvGyz6YtfN8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.mft
Manifest number:          0700
Signing time:             Sat 05 Sep 2026 20:00:50 +0000
Manifest this update:     Sat 05 Sep 2026 20:00:50 +0000
Manifest next update:     Sun 06 Sep 2026 20:00:50 +0000
Files and hashes:         1: NfO8TWIkaxE4DaKwNuYvhzbmi90.roa (hash: 07eBVlhSt2pE8VL0qAd29LqwR9jHDzCkLPkg8sdeyGk=)
                          2: UoWE9x7yjFZiDaO-MudWtt7j5v8.roa (hash: JDYuDSxsb8TqP1khTo+IPnsAnYGiJGphoDEBMwEfni4=)
                          3: WZLWasAJTJL4NuQLzsppN-RJdv4.roa (hash: xh9deKElrPJPAsuDDFcPUr8rOJKxDjEmgaGF1/UzKKY=)
                          4: mBPi9jUdO00eYapAFvGyz6YtfN8.crl (hash: fBVKUEqR0IIKm1dZkU0xKX5Nln6pyjiDlku+IyqTCV0=)
                          5: xWwqlVqWd0iRwMTuQO8eVNoCWHU.roa (hash: yQKukILLOQx8xluWCSSZQ2VF3E7ijyBr1SeiIVBdBeU=)
                          6: xulzqcYhIs7PWGHWVfL4YmNhVq8.roa (hash: WAG1ujb3pAhI/q7UcuSpjvhOpci45QogtqTPG/JOxEE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mBPi9jUdO00eYapAFvGyz6YtfN8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Sep 2026 19:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:73:28:d2:e1:57:b8:70:c6:bd:ac:a1:1b:ad:00:77:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9813e2f6351d3b4d1e61aa4016f1b2cfa62d7cdf
        Validity
            Not Before: Sep  5 20:00:50 2026 GMT
            Not After : Sep  6 20:00:50 2026 GMT
        Subject: CN=d6d13a3ad9a0b79e9b61ba332fa10b6e874ca549
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f2:92:fb:2e:d7:50:ad:a6:b0:e4:d8:dc:f5:
                    80:2b:b7:1d:a5:d8:c6:a0:05:b0:92:dc:01:80:2a:
                    07:58:f1:7b:34:e4:97:b2:19:80:be:ed:48:73:59:
                    a9:64:47:d6:98:66:1e:7c:47:56:9a:f1:1a:cb:e7:
                    77:0a:a8:71:ca:46:07:ed:51:6b:c6:77:b6:c5:3a:
                    20:b4:13:d9:16:88:e6:a2:82:5d:b8:9a:48:11:7a:
                    cc:60:ed:13:20:15:ec:f1:6e:56:c4:4d:26:d2:a0:
                    b1:d1:43:8f:83:69:da:be:74:3f:f3:bb:78:0e:72:
                    cd:f3:9d:17:22:0c:5e:3d:99:e9:26:61:b2:23:ad:
                    97:c5:21:9b:ba:80:e1:77:1a:55:5b:73:62:80:58:
                    75:d1:2f:22:af:62:27:4d:d4:0c:e5:5c:a0:55:e3:
                    09:b6:eb:b3:ba:4e:0b:16:09:25:40:5a:f2:07:40:
                    76:01:e7:df:23:f0:69:c0:1f:e1:77:a9:b3:ff:91:
                    2a:f2:76:1c:22:5b:d4:f0:4e:4f:46:00:15:27:6b:
                    c6:ef:50:17:52:20:dd:5b:22:86:d4:9e:bf:e0:21:
                    16:ea:ed:d5:90:3a:be:25:de:38:9c:8e:51:92:35:
                    4c:b9:89:ab:c6:89:cb:e8:03:03:e0:e0:7d:d8:15:
                    19:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:D1:3A:3A:D9:A0:B7:9E:9B:61:BA:33:2F:A1:0B:6E:87:4C:A5:49
            X509v3 Authority Key Identifier:
                keyid:98:13:E2:F6:35:1D:3B:4D:1E:61:AA:40:16:F1:B2:CF:A6:2D:7C:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mBPi9jUdO00eYapAFvGyz6YtfN8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:f6:0d:3c:e1:53:dc:0a:92:4f:0e:a7:ab:a6:7f:94:2f:05:
         af:5f:83:f2:9d:aa:b8:11:01:a8:a2:44:82:eb:de:e8:3d:2b:
         7a:bc:e6:c7:01:80:26:c4:62:07:80:f5:ab:30:74:ae:9a:05:
         e6:67:ca:f6:82:aa:27:20:63:e3:f4:23:41:5e:a8:f5:82:07:
         0a:76:f1:63:1b:cc:14:55:19:46:c9:d3:54:04:6c:2b:da:49:
         cd:48:6a:f6:65:50:21:c9:cb:e2:6b:c0:62:75:9b:10:cb:ec:
         a3:f7:fb:9e:96:51:6c:c7:28:67:10:2a:70:4b:22:16:39:a8:
         e3:21:39:67:7e:73:ca:0b:5f:55:cc:fa:eb:0c:f9:53:75:05:
         9b:9f:66:11:34:2b:b5:5a:bf:7c:6a:26:42:e0:7b:a0:44:56:
         eb:af:25:ba:5e:71:21:7e:89:39:04:b5:42:2c:b0:02:37:69:
         27:1d:70:33:4f:54:a2:f4:9c:66:ed:ca:89:9d:83:b2:dc:72:
         bc:9f:f4:1f:35:a9:f4:2e:53:c8:de:b0:e4:84:3f:27:6d:06:
         2d:3b:cc:9d:a5:88:fc:17:fd:a6:d5:2f:52:0e:03:cf:5a:85:
         20:4d:ab:52:a4:ad:59:a8:7d:94:09:13:17:60:5f:eb:e6:cf:
         c4:fa:f1:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 22:08:56 2026 by rpki-client