Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/9eaf1e-c9ec-466d-8371-aabadd0719ba/1/B0ejbXdop7MKTuy7aWTIwjfXRAE.mft
File:                     B0ejbXdop7MKTuy7aWTIwjfXRAE.mft (raw, json)
Hash identifier:          UBmD24sknq/IRWzbW+BFd4MLH/nRdAIjqtHiblAXt60=
Subject key identifier:   67:CE:12:86:C5:D4:68:82:01:72:80:7E:47:E6:D3:BF:FA:6A:E1:47
Authority key identifier: 07:47:A3:6D:77:68:A7:B3:0A:4E:EC:BB:69:64:C8:C2:37:D7:44:01
Certificate issuer:       /CN=0747a36d7768a7b30a4eecbb6964c8c237d74401
Certificate serial:       01A0D5709C78513946A53BDC57F8241A330A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B0ejbXdop7MKTuy7aWTIwjfXRAE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/9eaf1e-c9ec-466d-8371-aabadd0719ba/1/B0ejbXdop7MKTuy7aWTIwjfXRAE.mft
Manifest number:          1A6D
Signing time:             Thu 24 Sep 2026 22:02:01 +0000
Manifest this update:     Thu 24 Sep 2026 22:02:01 +0000
Manifest next update:     Fri 25 Sep 2026 22:02:01 +0000
Files and hashes:         1: AiPCwT2mOHblP5OWBwZI_2If-qc.roa (hash: ZI02ce5tKSPDXFD64PX8BGZ+5za9hEAGoOG8T2YkDzY=)
                          2: B0ejbXdop7MKTuy7aWTIwjfXRAE.crl (hash: On8G48Iyq2TxzbLFbQynExzNN2jd5oML7cq6pFOMaj0=)
                          3: R6tX7n1EUzhS2Rc8AgVfdcymHjg.roa (hash: nb/6KQdFOLZV09sF9OK9gvGL0HQoI0XdoKq2+mGgfyY=)
                          4: Rv-jwelP5qAOVsTY2O3lL6StCzI.roa (hash: 3p4Tm23LFUYRqfwgQDQDi43EjAXLyoXTDot/c2J7+7Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/9eaf1e-c9ec-466d-8371-aabadd0719ba/1/B0ejbXdop7MKTuy7aWTIwjfXRAE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/9eaf1e-c9ec-466d-8371-aabadd0719ba/1/B0ejbXdop7MKTuy7aWTIwjfXRAE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B0ejbXdop7MKTuy7aWTIwjfXRAE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d5:70:9c:78:51:39:46:a5:3b:dc:57:f8:24:1a:33:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0747a36d7768a7b30a4eecbb6964c8c237d74401
        Validity
            Not Before: Sep 24 22:02:01 2026 GMT
            Not After : Sep 25 22:02:01 2026 GMT
        Subject: CN=67ce1286c5d468820172807e47e6d3bffa6ae147
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f1:ae:e9:b0:87:d4:e7:e2:83:cb:91:50:ce:
                    17:78:d4:02:f2:d6:5a:f0:6f:05:19:13:a8:07:7a:
                    5a:3d:95:5d:d5:37:bd:7c:b7:b6:ab:f9:52:55:db:
                    ad:2c:58:d4:7c:62:dc:5e:2d:b4:81:0c:94:a1:67:
                    97:f2:15:07:dc:c3:3a:76:c4:04:9e:8c:c3:0c:07:
                    a0:4e:3d:29:15:d4:d1:7e:2d:1d:9b:cb:6f:08:96:
                    fc:1e:39:60:00:8b:8e:1e:4b:dd:22:95:53:b5:ed:
                    cf:93:98:3a:44:9c:65:a8:8d:1e:cd:63:7a:54:46:
                    05:77:07:f0:65:1c:4c:1f:c5:6d:3d:41:41:b2:f8:
                    a3:c5:0d:88:d0:bf:a2:cd:9b:b5:a7:d6:36:cf:24:
                    29:83:18:9e:89:85:96:d7:5c:b8:e6:61:6b:9c:e7:
                    72:23:38:5e:80:03:42:ab:78:22:ff:9e:b4:e8:ae:
                    94:e0:5d:7d:7c:62:2f:bd:2a:92:1d:e9:4f:c2:2b:
                    72:e1:b3:65:7d:fb:10:10:7c:99:3c:2c:2f:93:84:
                    1c:ab:67:7a:9b:02:cf:d8:89:8b:38:3d:73:be:d6:
                    43:7c:f2:9c:13:18:55:17:fa:c0:d9:c5:3c:07:37:
                    1d:53:81:e3:d5:8a:1e:b7:80:42:93:46:5c:0e:1b:
                    63:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:CE:12:86:C5:D4:68:82:01:72:80:7E:47:E6:D3:BF:FA:6A:E1:47
            X509v3 Authority Key Identifier:
                keyid:07:47:A3:6D:77:68:A7:B3:0A:4E:EC:BB:69:64:C8:C2:37:D7:44:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B0ejbXdop7MKTuy7aWTIwjfXRAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9eaf1e-c9ec-466d-8371-aabadd0719ba/1/B0ejbXdop7MKTuy7aWTIwjfXRAE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9eaf1e-c9ec-466d-8371-aabadd0719ba/1/B0ejbXdop7MKTuy7aWTIwjfXRAE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:37:50:df:6b:62:ee:14:92:97:a6:81:5b:a2:e6:e0:e1:37:
         8f:f5:cf:4e:b1:cf:91:78:d6:69:1d:fe:ee:8b:15:5c:62:f2:
         a0:12:4c:63:dc:12:5d:a1:97:3e:14:4a:d4:79:43:89:32:58:
         b6:fb:d9:93:de:cd:48:a1:dc:a4:55:fa:e7:d2:ad:ac:b2:82:
         c6:71:bd:09:75:55:bc:d5:be:5f:3a:0f:bd:4b:95:47:82:50:
         c7:bd:a1:37:7c:c9:05:8f:c8:a6:d7:04:4e:cc:de:f8:89:09:
         02:8e:a6:9f:cf:8e:f2:09:5d:b7:20:5b:99:c7:26:e2:5b:e7:
         e5:e8:0e:d8:31:ae:6b:63:2e:a4:73:32:a6:c6:b6:e0:39:16:
         f0:9e:00:64:94:52:76:a1:83:0a:06:ac:d1:79:c8:2c:3b:c8:
         a4:3e:8d:a1:cf:3e:ba:1a:9b:ec:53:c8:73:a1:6d:34:b1:e3:
         97:58:4a:aa:25:28:8b:12:6f:16:15:74:c9:b3:20:46:f1:db:
         37:25:08:86:70:ec:a2:72:d4:64:ae:1f:a1:5b:06:c9:ae:50:
         52:df:fe:ec:af:d2:63:be:95:d5:52:58:85:94:c8:ec:25:0a:
         d1:43:f8:8a:f2:e8:4d:4f:f5:80:8b:4b:f6:de:43:90:66:f9:
         9a:20:ce:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:40:42 2026 by rpki-client