Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.mft
File:                     t2AdfMgg3HGRXqkwZz70fyQaccg.mft (raw, json)
Hash identifier:          i6heIkXpVqAT/B60UUbheQzm+Uqv1/KFjMSnCsrPJqA=
Subject key identifier:   90:46:35:05:EE:80:BD:E0:DF:59:B4:65:01:B2:8E:EE:0A:BD:DE:CE
Authority key identifier: B7:60:1D:7C:C8:20:DC:71:91:5E:A9:30:67:3E:F4:7F:24:1A:71:C8
Certificate issuer:       /CN=b7601d7cc820dc71915ea930673ef47f241a71c8
Certificate serial:       01A112607C289DBA0486A51A099F31BBA723
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t2AdfMgg3HGRXqkwZz70fyQaccg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.mft
Manifest number:          1A90
Signing time:             Tue 06 Oct 2026 18:01:15 +0000
Manifest this update:     Tue 06 Oct 2026 18:01:15 +0000
Manifest next update:     Wed 07 Oct 2026 18:01:15 +0000
Files and hashes:         1: 0ahuT_cQ-yr70ImuaU2y8TIM6YI.roa (hash: 2Sp8oKtDy+w7qYM5rV8PIyGUx3izF3kL/3cBlfuy8Ic=)
                          2: REUxyMPs7GWbZsF8OEuAFX9QDL8.roa (hash: qehVRR9bmjq29nQypelWb8SFMyO97IaXW9uMo+fR3FU=)
                          3: t2AdfMgg3HGRXqkwZz70fyQaccg.crl (hash: NIQy6LfZb1bKK3ShfxmuxG2Ex34N31rUXAYNuc9lc3k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t2AdfMgg3HGRXqkwZz70fyQaccg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Oct 2026 13:29:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:12:60:7c:28:9d:ba:04:86:a5:1a:09:9f:31:bb:a7:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7601d7cc820dc71915ea930673ef47f241a71c8
        Validity
            Not Before: Oct  6 18:01:15 2026 GMT
            Not After : Oct  7 18:01:15 2026 GMT
        Subject: CN=90463505ee80bde0df59b46501b28eee0abddece
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:4a:e9:e0:33:6c:76:d7:94:80:f4:bd:5b:81:
                    15:02:8f:96:b6:15:06:d0:89:d3:40:fd:0a:91:3c:
                    70:81:87:aa:71:53:63:b2:5b:e6:35:f3:1e:01:b9:
                    79:e1:b4:51:1a:d0:80:f6:8b:7d:b1:21:e7:f9:aa:
                    5d:83:fc:ee:02:f6:70:d2:38:26:06:5a:4b:6b:99:
                    99:e3:07:1d:5f:4d:7d:01:71:98:dc:f2:83:7f:65:
                    7d:4e:bc:f4:25:e2:db:93:c5:9d:13:32:95:aa:0f:
                    f1:58:94:a8:de:f5:04:c0:fc:bc:5c:53:39:92:62:
                    f0:da:82:10:7f:15:5f:ed:be:c9:d0:fd:81:6d:a0:
                    23:1a:f5:51:2e:dc:64:52:e9:c3:e7:e6:8e:68:49:
                    f7:50:7f:5f:5d:d5:e4:2d:05:6f:9e:2b:0b:47:3c:
                    d1:73:26:df:bd:53:66:de:38:ed:3e:26:83:03:b4:
                    14:86:d7:31:10:0c:a5:cd:91:55:d7:a2:ac:99:9f:
                    45:af:9f:d7:e8:8e:ea:3a:32:09:36:fb:d8:21:ea:
                    4b:88:77:ac:b0:ac:b2:80:9d:84:af:d9:99:fe:8e:
                    92:73:bc:ff:ad:0d:d1:0a:94:44:0b:89:6b:7c:a8:
                    31:29:fb:aa:9c:dd:20:45:22:2f:d4:dd:7c:70:b1:
                    99:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:46:35:05:EE:80:BD:E0:DF:59:B4:65:01:B2:8E:EE:0A:BD:DE:CE
            X509v3 Authority Key Identifier:
                keyid:B7:60:1D:7C:C8:20:DC:71:91:5E:A9:30:67:3E:F4:7F:24:1A:71:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2AdfMgg3HGRXqkwZz70fyQaccg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:34:0a:9f:e6:98:6c:b9:5d:e2:22:29:e3:4e:a8:10:b3:d3:
         6d:e0:50:64:06:c4:90:f9:36:1d:06:e2:86:36:49:f5:93:9e:
         5f:93:03:e6:fb:93:47:44:de:6b:16:10:6b:60:be:c8:9c:ce:
         13:6d:ee:2c:80:cb:c4:23:e1:8b:33:6e:3f:ca:03:39:b2:8c:
         7b:4f:a7:de:29:93:44:be:85:8a:13:c4:69:c8:0d:fa:02:01:
         d6:f0:8d:90:98:4f:d2:7a:a1:ac:3c:91:a7:b8:41:a3:dd:42:
         7e:28:3a:1b:3c:13:80:d6:94:ea:e6:8c:42:67:a1:76:8d:74:
         ec:7e:ef:67:66:3a:b2:72:e1:50:95:66:1b:4c:e1:a3:11:61:
         28:9e:c6:2f:d4:4a:98:5e:3f:73:5f:92:c1:5e:5d:77:1e:bc:
         96:c8:ed:e7:0f:86:01:e1:a2:5c:3f:ec:0f:c1:3c:5b:2e:26:
         1a:c1:18:a4:2d:03:2b:40:06:48:f4:73:68:c0:8a:75:f7:ff:
         61:c9:da:96:66:00:c5:93:f1:b3:86:5f:a8:64:ba:b4:40:f6:
         e4:03:d1:95:47:bc:06:f0:6f:9d:64:02:91:6d:47:77:62:3f:
         79:49:1f:aa:c6:c8:94:cd:85:c5:f4:1d:b8:18:25:e2:77:14:
         d4:67:28:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 23:28:48 2026 by rpki-client