Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft
File:                     s_7bUAlSbwxrrUI_AM2gigkzt4s.mft (raw, json)
Hash identifier:          v/oJoDi5O7Ll21AyBjx974S9lRn6gtgKi1Di0Lak2LA=
Subject key identifier:   A2:4F:0E:C6:FE:89:5B:33:FB:89:ED:EC:C2:05:B4:D5:DD:AE:F0:FA
Authority key identifier: B3:FE:DB:50:09:52:6F:0C:6B:AD:42:3F:00:CD:A0:8A:09:33:B7:8B
Certificate issuer:       /CN=b3fedb5009526f0c6bad423f00cda08a0933b78b
Certificate serial:       01A0D426A4A3305B43191AC49D567E736824
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s_7bUAlSbwxrrUI_AM2gigkzt4s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft
Manifest number:          1A6E
Signing time:             Thu 24 Sep 2026 16:01:37 +0000
Manifest this update:     Thu 24 Sep 2026 16:01:37 +0000
Manifest next update:     Fri 25 Sep 2026 16:01:37 +0000
Files and hashes:         1: BSBTdISOwUSk76V2qhorPXUYcls.roa (hash: gMCNavqIUpRgqrn5vcMqwPcSr1Q6xSaeOjz/QGd0jJc=)
                          2: s_7bUAlSbwxrrUI_AM2gigkzt4s.crl (hash: C/sU3Oc33o+Gfe0CPszNFrgIPx+nlijf3CIZ1g5tVsM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s_7bUAlSbwxrrUI_AM2gigkzt4s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 14:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d4:26:a4:a3:30:5b:43:19:1a:c4:9d:56:7e:73:68:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3fedb5009526f0c6bad423f00cda08a0933b78b
        Validity
            Not Before: Sep 24 16:01:37 2026 GMT
            Not After : Sep 25 16:01:37 2026 GMT
        Subject: CN=a24f0ec6fe895b33fb89edecc205b4d5ddaef0fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:da:a6:8f:1c:be:c5:2e:1f:e0:cc:2c:2c:aa:
                    3a:c6:39:c4:3b:ee:fd:a1:f1:10:ef:01:8b:72:c1:
                    e7:61:d8:25:31:f7:4f:d1:9c:0f:d4:3a:c8:36:73:
                    ec:27:e5:fa:91:1a:b3:f8:6c:8c:e3:76:8f:ff:2b:
                    d4:55:cd:91:79:09:ec:35:50:7a:43:d2:8e:8f:bf:
                    09:a4:86:dd:54:ad:9d:75:65:0c:40:5c:0d:ec:11:
                    58:93:47:ef:e5:05:3b:00:6e:0a:08:b2:73:78:c9:
                    0d:4c:21:76:13:a6:eb:87:c7:78:01:77:e3:8d:0b:
                    a2:69:67:5e:e7:ae:0c:25:8d:57:e2:cf:5c:4e:47:
                    83:c2:7a:59:f0:a4:91:c8:94:d3:49:63:3c:ac:37:
                    85:9c:8c:84:fb:dc:9b:4d:cf:bf:c1:d8:67:e2:4a:
                    40:b8:df:65:7f:67:8e:c0:ca:5c:f5:c8:45:d6:57:
                    24:cd:d1:43:a6:70:99:aa:e5:47:f0:26:b3:82:f9:
                    cb:c6:23:5b:55:2a:30:de:9e:91:68:ab:a0:9c:a8:
                    eb:90:ce:ee:de:f8:1c:5a:9d:20:0c:1b:5e:64:da:
                    8e:5f:db:09:49:18:e2:52:27:ca:3f:56:05:ed:f6:
                    22:5f:73:da:5c:4b:42:e3:0c:56:fa:0b:1a:69:94:
                    92:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:4F:0E:C6:FE:89:5B:33:FB:89:ED:EC:C2:05:B4:D5:DD:AE:F0:FA
            X509v3 Authority Key Identifier:
                keyid:B3:FE:DB:50:09:52:6F:0C:6B:AD:42:3F:00:CD:A0:8A:09:33:B7:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s_7bUAlSbwxrrUI_AM2gigkzt4s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:cc:f1:94:0f:87:6a:80:26:ec:84:07:a1:f8:d7:76:21:02:
         d4:fc:e4:73:25:4f:47:06:ab:e9:3e:47:4c:cc:03:07:77:54:
         11:ea:5d:55:b7:bd:06:6d:26:55:c1:d8:96:2f:bb:8f:15:ad:
         5d:54:f3:72:9a:4d:3f:28:07:dd:0a:d4:9c:54:f0:54:d1:a4:
         1f:90:55:4e:df:e1:bf:48:d7:99:b0:50:b3:ee:15:22:df:ad:
         fd:b9:2c:03:23:cc:69:f2:bf:e5:66:e0:50:03:14:23:27:50:
         5a:3d:fb:c6:b4:c0:69:fe:2f:df:3e:70:84:b9:08:91:b9:5f:
         6e:49:09:b4:db:c5:b2:74:a1:22:b3:25:5b:e5:5a:58:e0:f3:
         8f:05:6b:4d:23:b9:bd:c6:94:9e:63:6a:16:c7:1a:cc:3a:1c:
         c9:d8:b8:ab:82:4f:ee:2a:00:51:1b:86:b6:9c:63:68:3b:72:
         da:37:7c:7b:62:d7:f2:49:14:11:ed:88:c1:f9:b9:47:28:bb:
         04:64:4f:cc:0b:a7:b5:3b:3b:e6:c4:03:a1:a6:ab:57:e6:5e:
         75:8e:cb:72:37:33:a5:4e:12:5a:1c:c8:83:33:98:17:f5:11:
         ab:1e:af:f8:53:6e:55:bf:9d:d3:05:86:3c:91:11:7a:12:31:
         60:b6:88:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:51:33 2026 by rpki-client