Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/868cf8-b74b-448a-af13-a28fd9feda76/1/t_-rO6tIKRwB6MDl71D4Hzs5sjk.mft
File:                     t_-rO6tIKRwB6MDl71D4Hzs5sjk.mft (raw, json)
Hash identifier:          TB2er5LaSw1UpYajr+yK+Q9JFb+Nd26G/X0fm1j1/zo=
Subject key identifier:   87:C3:B9:F6:B4:28:9F:46:9D:0F:90:89:97:D4:F0:00:25:26:84:93
Authority key identifier: B7:FF:AB:3B:AB:48:29:1C:01:E8:C0:E5:EF:50:F8:1F:3B:39:B2:39
Certificate issuer:       /CN=b7ffab3bab48291c01e8c0e5ef50f81f3b39b239
Certificate serial:       01A0D2014FE9F9558449BD6AAA19EAD7314F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t_-rO6tIKRwB6MDl71D4Hzs5sjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/868cf8-b74b-448a-af13-a28fd9feda76/1/t_-rO6tIKRwB6MDl71D4Hzs5sjk.mft
Manifest number:          86
Signing time:             Thu 24 Sep 2026 06:01:36 +0000
Manifest this update:     Thu 24 Sep 2026 06:01:36 +0000
Manifest next update:     Fri 25 Sep 2026 06:01:36 +0000
Files and hashes:         1: 40Yv3FJarP6L9fctYDOp2f3FVUM.asa (hash: jpERvaDO1bnIeXcly3KkynVSBYXXgKkGP8cwdmaFv9U=)
                          2: t_-rO6tIKRwB6MDl71D4Hzs5sjk.crl (hash: zcIrsiG9Pd6nOXtD2v5AjR1djhI2y2LZWp2SXSLA0tk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/868cf8-b74b-448a-af13-a28fd9feda76/1/t_-rO6tIKRwB6MDl71D4Hzs5sjk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/868cf8-b74b-448a-af13-a28fd9feda76/1/t_-rO6tIKRwB6MDl71D4Hzs5sjk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t_-rO6tIKRwB6MDl71D4Hzs5sjk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d2:01:4f:e9:f9:55:84:49:bd:6a:aa:19:ea:d7:31:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7ffab3bab48291c01e8c0e5ef50f81f3b39b239
        Validity
            Not Before: Sep 24 06:01:36 2026 GMT
            Not After : Sep 25 06:01:36 2026 GMT
        Subject: CN=87c3b9f6b4289f469d0f908997d4f00025268493
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:fa:a7:f8:fd:06:f4:c2:78:e1:77:4b:6d:3f:
                    87:6d:5a:03:7f:a2:3a:95:a5:bf:d6:7c:7a:27:02:
                    63:bb:82:52:74:40:af:07:e7:a1:4f:5d:b6:db:c7:
                    89:f6:95:3e:c0:ba:c6:b3:06:2f:e6:d8:1d:99:c5:
                    43:0c:ce:d8:18:c8:92:6e:ab:94:8d:52:f6:bd:89:
                    ee:fd:71:88:42:4e:3b:30:2e:93:d0:80:5e:9d:20:
                    0b:db:c3:f2:91:82:5d:ae:4a:f1:d6:69:34:12:88:
                    fd:bc:94:e8:5b:39:ce:77:dd:8b:2f:e1:7f:02:bf:
                    31:25:a7:fd:92:a1:69:50:86:3e:af:01:dd:7f:bf:
                    84:b1:46:e2:54:bf:cb:e1:e7:22:5d:53:54:75:3c:
                    49:b5:cd:9f:2e:b1:6f:c3:3c:e8:0b:5e:c4:4d:79:
                    41:18:b7:7d:0c:a5:e9:ef:2a:08:e2:dc:a0:c2:da:
                    71:f0:ca:c6:1c:69:e3:01:9f:26:ce:5b:a8:8d:3e:
                    20:0d:34:5f:75:fe:07:36:8e:10:7d:f0:76:08:02:
                    ea:b9:5d:9d:a2:e8:69:88:86:5a:8b:f6:5e:8f:61:
                    ba:87:a2:aa:4d:39:07:62:9c:40:28:e6:c9:63:00:
                    15:09:d6:14:97:f1:2b:75:ef:c8:5e:bf:88:e7:97:
                    0c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:C3:B9:F6:B4:28:9F:46:9D:0F:90:89:97:D4:F0:00:25:26:84:93
            X509v3 Authority Key Identifier:
                keyid:B7:FF:AB:3B:AB:48:29:1C:01:E8:C0:E5:EF:50:F8:1F:3B:39:B2:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t_-rO6tIKRwB6MDl71D4Hzs5sjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/868cf8-b74b-448a-af13-a28fd9feda76/1/t_-rO6tIKRwB6MDl71D4Hzs5sjk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/868cf8-b74b-448a-af13-a28fd9feda76/1/t_-rO6tIKRwB6MDl71D4Hzs5sjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:d9:91:97:b5:5c:a3:30:a9:13:d1:5e:9f:a4:45:3f:a5:92:
         d0:95:c2:b2:41:62:2d:2f:de:c9:24:07:55:27:9e:45:ab:46:
         52:f2:e1:2f:b2:2b:3b:a8:42:83:f1:46:46:1a:a2:b2:7e:6f:
         b5:b9:2e:58:6d:dd:b8:82:d5:ca:26:84:04:ba:bb:31:b9:6a:
         c3:27:f1:fb:7a:e9:06:8d:27:77:3a:f5:eb:ed:59:e8:69:8a:
         37:99:9b:ae:81:a8:41:6f:b0:88:a8:40:10:09:e5:f9:9c:06:
         cf:32:b9:16:56:b3:08:3c:9a:8e:1f:ff:15:b4:c6:14:23:1e:
         71:1e:3a:4c:12:50:78:94:f7:f1:77:95:10:f8:3d:8a:02:bc:
         35:6e:d5:fe:7c:51:fa:b3:f8:41:0d:2a:a7:8a:5e:25:fc:22:
         de:e7:07:27:ec:2c:1d:1c:8b:eb:f6:ff:e0:58:ac:18:bd:1b:
         d8:5c:b9:02:ff:7a:26:e6:fb:bf:b1:05:39:2e:92:ff:32:c1:
         58:16:e3:64:12:f1:2a:6e:5d:57:0e:f6:8f:66:6f:7c:76:b7:
         be:8a:3a:86:57:52:b7:52:f5:43:25:a5:fd:0f:90:54:c2:94:
         9d:af:38:07:c2:8c:5d:64:81:6a:cc:25:47:00:c4:b5:fe:96:
         97:9a:69:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:20:30 2026 by rpki-client