Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft
File:                     a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft (raw, json)
Hash identifier:          8S47ckokM0PjXyQSue8xdQIGayWqmNsQZ+uCLFVTqT0=
Subject key identifier:   E8:7A:CD:CF:08:DB:26:F0:E2:1C:FA:04:C2:D6:86:02:A4:09:72:57
Authority key identifier: 6B:B9:12:5B:8A:10:D3:22:34:86:81:A2:D2:AC:7D:67:D2:AD:25:35
Certificate issuer:       /CN=6bb9125b8a10d322348681a2d2ac7d67d2ad2535
Certificate serial:       01A0D83B680375E98644325108DF437DD250
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft
Manifest number:          1A6E
Signing time:             Fri 25 Sep 2026 11:02:46 +0000
Manifest this update:     Fri 25 Sep 2026 11:02:46 +0000
Manifest next update:     Sat 26 Sep 2026 11:02:46 +0000
Files and hashes:         1: Yg6FVNZBl1w2Rze2Thsw4t3zCtA.roa (hash: r0yjU3GNEbU4eEC9QPmI7gQD6DPzo++uXSGijCopcR8=)
                          2: a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.crl (hash: h8ROX5ndfm/nOV0gn6rVWaN6/3rwEEmUOXlDK2yjrM0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 08:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d8:3b:68:03:75:e9:86:44:32:51:08:df:43:7d:d2:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bb9125b8a10d322348681a2d2ac7d67d2ad2535
        Validity
            Not Before: Sep 25 11:02:46 2026 GMT
            Not After : Sep 26 11:02:46 2026 GMT
        Subject: CN=e87acdcf08db26f0e21cfa04c2d68602a4097257
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:79:61:fb:e7:e7:f8:77:6e:35:21:e1:bf:d4:
                    2f:a5:c1:e7:da:6d:f7:7a:a6:db:8d:cc:88:83:8c:
                    ad:35:aa:4a:8b:62:c0:8d:9f:4e:b9:98:d3:48:a2:
                    af:a9:69:ec:50:fe:e2:4b:58:c0:4e:de:84:27:55:
                    70:6a:52:e2:c9:35:f4:a6:24:87:df:84:66:47:be:
                    4b:c6:46:73:bb:43:72:f8:65:2d:a7:e3:0d:f1:8c:
                    ca:79:bc:8d:85:7c:c0:74:e2:ab:07:7c:3f:97:20:
                    ba:a9:ef:00:31:65:e9:ac:cb:16:00:7f:70:d5:ad:
                    23:38:ce:2f:a6:41:6e:ec:ca:5f:74:01:89:d2:19:
                    9d:d0:74:3d:e6:54:97:fc:66:19:5d:90:54:a1:bf:
                    d3:7f:de:75:68:9b:c0:52:8e:72:f9:50:88:1c:84:
                    e9:73:3c:ab:c7:2c:12:22:37:3d:7c:92:7c:69:dd:
                    fb:a0:b8:ad:7c:30:9a:ff:21:23:63:68:1a:64:6a:
                    e5:28:c8:00:b1:42:3a:5d:81:17:fa:28:3b:af:d2:
                    98:53:4f:d3:1c:4f:50:94:38:8e:79:6c:ba:28:ee:
                    04:9d:36:07:2d:b4:70:80:22:71:56:3a:6a:a9:f3:
                    c0:4e:33:67:28:8f:84:91:92:2e:c2:81:7c:a2:59:
                    21:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:7A:CD:CF:08:DB:26:F0:E2:1C:FA:04:C2:D6:86:02:A4:09:72:57
            X509v3 Authority Key Identifier:
                keyid:6B:B9:12:5B:8A:10:D3:22:34:86:81:A2:D2:AC:7D:67:D2:AD:25:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:45:8a:33:2e:93:25:97:28:ba:4d:07:a9:78:82:35:29:4c:
         d4:6b:87:64:f1:99:33:a3:26:4c:a8:0a:dc:18:ab:b1:15:f5:
         cd:ce:7a:8e:2d:8e:be:f7:82:f2:4d:8f:63:4f:41:fc:5b:fa:
         dc:01:94:9b:0f:76:a1:12:04:15:4e:1d:53:b3:86:c7:72:24:
         1a:c2:3d:85:24:e9:52:93:e6:3c:b2:8c:0b:55:3e:32:2f:82:
         8e:fd:f3:40:6f:5f:0d:20:32:65:9c:98:c3:ee:a9:ea:17:df:
         38:f9:0a:51:ab:15:33:b8:0c:bf:4a:3c:72:44:de:5a:af:63:
         32:b4:7e:81:8e:94:f1:15:17:a1:99:08:15:d2:51:ee:1d:8a:
         a3:c0:70:6c:0c:f4:3c:1c:48:57:74:e9:0d:e0:03:66:54:e9:
         a2:1f:27:17:b2:17:26:36:fa:98:3f:06:ec:ae:d4:af:7d:99:
         b4:f2:89:ec:7f:f5:d1:4d:6d:31:73:35:1f:19:1b:99:38:ea:
         bf:40:8f:88:21:12:2b:2f:db:f2:5a:07:c3:14:d4:81:86:b9:
         75:9b:e2:f9:41:dc:90:8f:72:db:32:f5:a7:ee:e5:32:c7:41:
         81:25:33:49:d4:2a:db:4c:fc:32:24:94:18:ed:10:30:d8:66:
         d5:ad:a6:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:37:12 2026 by rpki-client