Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.mft
File:                     a0s-anyHg_yKVxn72fN7MsjHxco.mft (raw, json)
Hash identifier:          wWjRJ5cvn/ovtYfgJAvfe+9xMCK1M9mhnjb0dHamfI8=
Subject key identifier:   8C:4C:12:FD:61:0E:2E:1F:75:8F:D3:2F:20:BD:A2:E0:B0:0E:D8:C9
Authority key identifier: 6B:4B:3E:6A:7C:87:83:FC:8A:57:19:FB:D9:F3:7B:32:C8:C7:C5:CA
Certificate issuer:       /CN=6b4b3e6a7c8783fc8a5719fbd9f37b32c8c7c5ca
Certificate serial:       01A0DEA9C238FD3D8740F8099774DC720BA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a0s-anyHg_yKVxn72fN7MsjHxco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.mft
Manifest number:          12E2
Signing time:             Sat 26 Sep 2026 17:01:02 +0000
Manifest this update:     Sat 26 Sep 2026 17:01:02 +0000
Manifest next update:     Sun 27 Sep 2026 17:01:02 +0000
Files and hashes:         1: 1-PU-Hm_SbxZzdKhiYrsJyhJw6oI.roa (hash: F3ey1QrO2lAooe3dk5bBb9+xgHy1sfZAGBgLbjbxbY0=)
                          2: Bf9RdHQMdQL9V8vN6-doDD0kdao.roa (hash: OeRuEu23I1npxCLbqKUi8RpgkFTQ1kB32heke6+KB6M=)
                          3: GQIGNP3ib22FM0gmlZYEVyr6wsE.roa (hash: 6pjgMVqEKUSiLzAce+B/Gv6+j8GqxUjYg+qoHDWXENw=)
                          4: a0s-anyHg_yKVxn72fN7MsjHxco.crl (hash: OlnJ1FB82ztgGg5AcIHlmeDmINP2dWnX4kHTKb/WiRc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a0s-anyHg_yKVxn72fN7MsjHxco.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 17:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:de:a9:c2:38:fd:3d:87:40:f8:09:97:74:dc:72:0b:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b4b3e6a7c8783fc8a5719fbd9f37b32c8c7c5ca
        Validity
            Not Before: Sep 26 17:01:02 2026 GMT
            Not After : Sep 27 17:01:02 2026 GMT
        Subject: CN=8c4c12fd610e2e1f758fd32f20bda2e0b00ed8c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:18:4e:75:8d:fc:07:b5:44:7a:c9:ee:c2:c1:
                    39:a0:f2:50:4b:2b:8e:f1:4a:cd:c4:a9:8d:1c:fe:
                    8e:05:79:37:73:91:d1:30:92:79:cf:64:27:57:a0:
                    1e:4d:e9:de:7a:06:fc:36:b1:7c:45:bf:1a:ca:4b:
                    e6:8f:8a:3c:11:f4:4d:40:0c:2c:23:d2:06:5e:1e:
                    b9:25:5e:3b:23:f2:ca:d6:74:4a:b2:6b:0d:4b:59:
                    dd:db:fa:fb:90:88:51:70:57:04:09:37:3c:f9:76:
                    48:30:4e:0a:72:2f:9f:f2:f9:44:5d:51:98:89:88:
                    e5:01:03:35:73:33:c4:b3:18:6b:97:e4:93:05:68:
                    e2:64:ac:b6:15:88:ec:04:76:68:e4:13:81:45:9c:
                    a8:d7:83:c0:d2:3f:6b:e4:48:e5:17:92:7b:af:a2:
                    fc:af:c7:51:63:85:5f:bf:61:3f:eb:f5:02:ee:12:
                    b6:cf:2c:62:f6:22:1f:5a:01:bf:27:40:51:16:3c:
                    e1:2c:7e:3a:b2:ca:af:34:de:8a:b8:28:e2:fc:f5:
                    6c:f5:28:d8:25:f0:e6:9b:60:31:2f:56:44:b9:b8:
                    ca:e6:69:1e:03:b6:2a:4f:0b:d6:17:08:6b:c8:41:
                    ea:7e:13:38:eb:ab:a9:4e:18:07:11:f2:2a:3d:6d:
                    f8:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:4C:12:FD:61:0E:2E:1F:75:8F:D3:2F:20:BD:A2:E0:B0:0E:D8:C9
            X509v3 Authority Key Identifier:
                keyid:6B:4B:3E:6A:7C:87:83:FC:8A:57:19:FB:D9:F3:7B:32:C8:C7:C5:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0s-anyHg_yKVxn72fN7MsjHxco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:8b:3c:9a:eb:51:ee:7a:37:70:58:c9:6a:ff:92:b3:b5:6d:
         f2:b3:a5:2b:30:97:7d:80:8d:32:a2:0b:fb:be:93:e6:40:df:
         9f:06:ec:af:cb:06:31:8b:b9:76:81:a1:33:42:e3:65:d8:a0:
         c3:37:dd:6e:08:38:52:18:56:ac:99:c0:97:37:7d:d2:7f:ef:
         31:b4:6a:05:41:7a:8f:5f:5a:81:2b:0a:33:d0:b2:d9:d3:a6:
         bc:b0:72:c2:a2:08:cb:51:2c:be:7f:4b:a8:d8:87:fb:b5:ea:
         b0:4d:2a:61:50:c6:d4:44:6a:bf:f6:17:a1:61:dc:80:99:32:
         17:7c:fa:ef:4b:8f:3d:cd:15:d6:f5:38:fa:98:eb:e1:a2:1c:
         c7:b9:b3:61:12:e5:33:f5:d9:d8:a3:33:93:7a:dc:a9:63:c3:
         bc:3a:5a:01:11:eb:d3:dc:d5:1f:f5:59:09:22:a6:2e:e3:a6:
         be:97:be:75:7d:3b:74:5d:8f:d8:10:34:66:1a:b8:86:6b:87:
         5a:f1:36:fb:c5:0c:5f:d0:0f:52:7b:37:29:98:e0:07:0e:eb:
         13:b0:81:fd:12:aa:90:a5:b2:7a:5b:3f:43:0e:6c:75:b1:58:
         b9:c6:51:b9:fa:7c:93:c4:32:fc:8b:b9:9c:d3:7a:c6:23:83:
         40:53:4f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 02:58:44 2026 by rpki-client