Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.mft
File:                     cWAmJ2eaSYC3DYreV48UGS-v65U.mft (raw, json)
Hash identifier:          FeOFkDukjEidpnKYaEuLiZvOCdzWAtw6hVPu0p7yI7I=
Subject key identifier:   BB:7E:9F:81:58:71:B0:6F:32:D6:C9:19:7D:F9:9B:70:30:1C:91:79
Authority key identifier: 71:60:26:27:67:9A:49:80:B7:0D:8A:DE:57:8F:14:19:2F:AF:EB:95
Certificate issuer:       /CN=71602627679a4980b70d8ade578f14192fafeb95
Certificate serial:       01A0D45E0813405FADE271ED9B067306C7D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cWAmJ2eaSYC3DYreV48UGS-v65U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.mft
Manifest number:          1A6D
Signing time:             Thu 24 Sep 2026 17:02:07 +0000
Manifest this update:     Thu 24 Sep 2026 17:02:07 +0000
Manifest next update:     Fri 25 Sep 2026 17:02:07 +0000
Files and hashes:         1: 1MNzVKC9htvcNDGJvI7xuyGACNU.roa (hash: 5RJpFE83PkUMhvbMNjs3KYN+COX8IjLxqtTzJmRO/6c=)
                          2: LO4YOUMQSFJh66TMDDMwnUwbqCo.roa (hash: dmbwDSHT1tN2CWO1W2a6nb7MTfEav+JXvlh9Nn0z+XQ=)
                          3: cWAmJ2eaSYC3DYreV48UGS-v65U.crl (hash: PlYdatbM6dpluyUKhrxGBe04GqzLKiK0dsyi9g3sgak=)
                          4: fnKKRoWAVJZeKiOvGQPgr3LCZIs.roa (hash: JHOAXHnAaTWFlsyraZAXCqYuOsM3xPfPaJdjfqdyKlM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cWAmJ2eaSYC3DYreV48UGS-v65U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 14:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d4:5e:08:13:40:5f:ad:e2:71:ed:9b:06:73:06:c7:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71602627679a4980b70d8ade578f14192fafeb95
        Validity
            Not Before: Sep 24 17:02:07 2026 GMT
            Not After : Sep 25 17:02:07 2026 GMT
        Subject: CN=bb7e9f815871b06f32d6c9197df99b70301c9179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8b:1d:86:d5:94:cc:c5:c9:c1:99:9b:2c:9a:
                    c1:47:48:c5:ce:8c:c7:52:02:7b:f7:11:76:5a:80:
                    55:62:87:df:ec:67:ed:45:3d:f5:1e:0d:1a:cf:3a:
                    9f:74:c9:98:7f:b6:91:88:db:1a:6e:fa:46:9a:7f:
                    85:af:c8:8a:7a:5d:1b:8a:46:6b:2c:3a:5b:60:7c:
                    b4:8e:fb:ae:e9:b4:db:0d:37:8b:35:11:aa:15:59:
                    3c:34:3b:1a:b0:0d:e2:7e:81:18:2c:c4:c0:cf:6b:
                    c7:86:f2:49:ac:a9:06:81:3d:8a:c7:f7:18:ad:40:
                    3b:cd:7d:1d:4c:0c:fa:12:38:4f:03:f8:8c:a9:8a:
                    64:12:ad:61:d5:7d:7c:f1:00:6d:f5:ba:41:52:30:
                    55:c9:01:a0:c7:6f:af:8b:80:e0:08:7f:88:cc:57:
                    c4:ef:e6:5c:e4:19:8b:43:32:fb:c8:a5:e8:e1:12:
                    d5:73:6f:1c:a2:f7:cf:c6:62:4a:60:96:7a:1a:75:
                    a4:c9:1c:b0:06:19:46:ef:30:63:e5:45:83:5c:44:
                    4d:fa:55:2d:6a:c4:9d:e4:8d:fc:2e:ec:bc:ed:40:
                    47:65:89:7b:fd:3e:c1:8a:4d:58:41:c2:55:b7:52:
                    80:37:c6:94:11:44:21:4f:7c:13:9f:7a:c6:32:0f:
                    2a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:7E:9F:81:58:71:B0:6F:32:D6:C9:19:7D:F9:9B:70:30:1C:91:79
            X509v3 Authority Key Identifier:
                keyid:71:60:26:27:67:9A:49:80:B7:0D:8A:DE:57:8F:14:19:2F:AF:EB:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cWAmJ2eaSYC3DYreV48UGS-v65U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:1d:cf:b3:e9:73:12:14:ba:81:ce:d9:7b:e3:2c:38:48:ad:
         46:a9:27:81:32:2c:01:b8:53:c7:b2:04:b6:76:1e:2d:f5:f0:
         a0:cc:bd:ae:36:8f:8c:98:80:4c:83:dd:36:d9:b8:dd:2a:95:
         81:21:10:ef:0b:e7:6d:a2:68:d9:f1:7f:3f:3a:06:51:45:18:
         73:21:c5:53:3d:8a:51:21:d3:5a:86:68:90:c6:de:7a:c0:78:
         8f:06:28:23:9c:f0:f3:01:52:8f:21:fd:9a:ce:37:bd:2c:3a:
         72:2f:de:a4:a2:16:8d:2a:50:11:4f:e5:b2:7e:4b:86:2c:5b:
         eb:92:2d:76:b0:0d:7a:b9:7f:92:ab:1d:b1:b6:62:16:75:63:
         be:9b:15:aa:2d:76:3f:91:4b:76:5a:48:b1:0f:fc:5e:8b:49:
         aa:f4:13:bb:41:8f:f5:b9:8e:89:8f:5a:3d:b3:ab:6e:be:5e:
         03:f8:62:26:eb:75:91:c6:67:42:ff:53:b6:39:44:bc:70:94:
         ae:18:bb:e0:cc:a5:18:47:c0:8a:26:22:fc:19:ce:eb:8c:f4:
         ad:7f:e6:fb:fb:51:30:9d:01:ee:74:c7:89:6e:b2:71:49:f3:
         ef:70:01:a8:d0:ac:fb:a8:cb:b0:d5:71:b2:13:c3:f9:ff:a6:
         d0:27:23:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:08:50 2026 by rpki-client