Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft
File:                     cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft (raw, json)
Hash identifier:          etNEnjbwcHNKfHfQ9hpTeHvnCKMLEdZgZq1rGLe38Bk=
Subject key identifier:   FB:D8:A3:02:14:D5:BC:CD:9D:4B:97:C2:3D:18:60:88:F9:BB:C2:BD
Authority key identifier: 70:B1:90:D6:F8:9A:43:4C:CE:5C:B8:C0:D4:B3:8A:16:69:DE:FB:59
Certificate issuer:       /CN=70b190d6f89a434cce5cb8c0d4b38a1669defb59
Certificate serial:       01A0D916F6AD3DD8B304B1989FEE66F4CAA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cLGQ1viaQ0zOXLjA1LOKFmne-1k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft
Manifest number:          16BD
Signing time:             Fri 25 Sep 2026 15:02:35 +0000
Manifest this update:     Fri 25 Sep 2026 15:02:35 +0000
Manifest next update:     Sat 26 Sep 2026 15:02:35 +0000
Files and hashes:         1: ZRj2hX60XuM05a4vfNo-Pv7YmB0.roa (hash: InsWciE0zUkS0m+rNOT/nz98wQ4hGtre1IAaZoW7D1g=)
                          2: cLGQ1viaQ0zOXLjA1LOKFmne-1k.crl (hash: zcmxLh9eM7CeGT4YHqG8pMiawwsRMV/cRCzDPpG04BE=)
                          3: kyVhtDLZt4N5GPbTPKsk2ZaA_nU.roa (hash: VneHklbp3cXcKynFZ6D92CEpEIaz3npmX1Ls13JkQnc=)
                          4: rroLiEQZHgTeW99j0qiBIrwu5EA.roa (hash: VmsVwoTJ6PHL/2Ntb43rkgeOI/CytWooyIbWbTn6sKE=)
                          5: zI-oAN3OQtXd-BNyE0MNJ70xs6k.roa (hash: 0f6kOQBqGXGCHT/mf7JYgdcKuqyqUXY4na2v3j9WykI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cLGQ1viaQ0zOXLjA1LOKFmne-1k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 15:02:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d9:16:f6:ad:3d:d8:b3:04:b1:98:9f:ee:66:f4:ca:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70b190d6f89a434cce5cb8c0d4b38a1669defb59
        Validity
            Not Before: Sep 25 15:02:35 2026 GMT
            Not After : Sep 26 15:02:35 2026 GMT
        Subject: CN=fbd8a30214d5bccd9d4b97c23d186088f9bbc2bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:01:ae:7e:94:05:5d:d5:c6:1e:1c:05:58:70:
                    ee:29:ad:29:83:f2:f4:3b:db:73:da:6c:d1:85:80:
                    f2:b4:8c:a3:a3:b7:35:bf:45:04:be:b5:7a:62:9d:
                    06:43:22:fb:b9:6d:f7:fb:fe:52:c7:53:f5:cc:43:
                    b4:ff:b0:cc:09:ba:72:ff:f0:0a:08:8f:f9:d7:1c:
                    0f:7b:ad:1d:28:dc:55:07:c6:2d:63:9e:01:b8:25:
                    97:aa:3f:d3:1c:2f:5e:94:70:b7:72:ea:5c:6c:f2:
                    04:ac:0a:13:2b:0d:15:67:46:f5:ad:f1:a0:34:78:
                    26:6c:78:4f:db:9f:b4:57:d5:19:53:26:75:14:71:
                    0b:98:41:23:0f:62:ff:80:83:b9:91:76:99:2e:08:
                    3c:4a:49:0a:ea:69:10:90:7f:c8:59:d3:be:71:c4:
                    38:85:86:75:25:c1:8c:71:14:ee:6c:43:8e:e8:67:
                    14:ab:74:4b:ef:fa:ba:7c:e4:86:28:33:82:79:0f:
                    d5:94:51:2b:6f:2e:79:a9:83:7c:13:67:8f:40:5f:
                    0d:cf:d4:91:fd:c7:e5:40:e6:04:f3:04:d4:ce:4a:
                    f9:65:14:9e:4c:17:3c:2e:c8:d2:f0:53:47:ed:ca:
                    8d:6a:ae:b9:b3:29:3e:61:a9:96:55:45:80:90:b4:
                    80:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:D8:A3:02:14:D5:BC:CD:9D:4B:97:C2:3D:18:60:88:F9:BB:C2:BD
            X509v3 Authority Key Identifier:
                keyid:70:B1:90:D6:F8:9A:43:4C:CE:5C:B8:C0:D4:B3:8A:16:69:DE:FB:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLGQ1viaQ0zOXLjA1LOKFmne-1k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:ab:2d:7a:92:be:81:a3:c0:27:f1:0f:75:af:2c:9a:75:bf:
         d5:98:0f:62:0f:d1:4b:f4:47:be:78:3e:60:7c:d7:bc:7f:19:
         16:3a:9f:11:b4:2f:3e:0c:c0:d8:2b:19:f2:56:ee:31:90:ae:
         55:3a:1e:1a:fa:1c:88:e2:b6:31:6e:3d:15:12:9a:6b:21:f6:
         27:c9:fa:2f:bf:b3:16:db:41:5f:f1:de:95:23:e0:d7:19:bd:
         ad:78:b0:6c:73:81:18:60:ee:e1:48:e1:3b:ce:bc:aa:a4:d8:
         6e:20:b4:ec:c7:9a:b3:cd:17:71:8b:64:d4:96:9a:24:9b:7d:
         14:05:ae:ed:af:88:93:c6:dd:86:59:ef:41:20:50:35:08:e0:
         e8:5c:8e:2e:37:4c:2e:0b:1e:83:df:43:96:37:5e:76:9b:bd:
         25:21:ff:20:be:a9:0f:81:74:8f:93:a0:e3:4f:0f:82:1f:2b:
         9c:a3:96:b9:d2:7e:4d:4a:f8:68:51:a1:3b:83:b1:ca:e2:80:
         b6:d2:09:35:cf:71:50:25:8d:c4:e8:8e:d7:f1:7b:17:bc:df:
         e5:d1:a2:64:2f:be:68:2e:b7:b9:ce:3a:85:ec:bd:be:d2:f1:
         4c:a0:2c:14:53:db:4c:fb:59:3e:b2:6a:d6:62:b4:f6:e3:cd:
         a3:0e:ff:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:41:43 2026 by rpki-client