Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.mft
File:                     inuFwxZYaxmdJr_Ej-JZiTnLb94.mft (raw, json)
Hash identifier:          zUeEfUzDb5mRpuXGGvoblF4HYifUm2ziS3woxcQ93j0=
Subject key identifier:   30:1A:3A:0B:61:14:F6:F7:70:74:B2:30:A0:54:DA:68:B5:AC:A3:70
Authority key identifier: 8A:7B:85:C3:16:58:6B:19:9D:26:BF:C4:8F:E2:59:89:39:CB:6F:DE
Certificate issuer:       /CN=8a7b85c316586b199d26bfc48fe2598939cb6fde
Certificate serial:       01A0D79651426171EBF438951727459E7B2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/inuFwxZYaxmdJr_Ej-JZiTnLb94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.mft
Manifest number:          1A6F
Signing time:             Fri 25 Sep 2026 08:02:27 +0000
Manifest this update:     Fri 25 Sep 2026 08:02:27 +0000
Manifest next update:     Sat 26 Sep 2026 08:02:27 +0000
Files and hashes:         1: b2w6O9WirtRCdzK66va1rPliDCM.roa (hash: stbRk0sxdQicjLZT3kCAibpOrHEkv6FoTLisoOLFpLg=)
                          2: inuFwxZYaxmdJr_Ej-JZiTnLb94.crl (hash: /7g1ABd7t1QW2nbxol5PpRwTqq7lfEtnV6PEBx7UubY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/inuFwxZYaxmdJr_Ej-JZiTnLb94.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 08:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d7:96:51:42:61:71:eb:f4:38:95:17:27:45:9e:7b:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a7b85c316586b199d26bfc48fe2598939cb6fde
        Validity
            Not Before: Sep 25 08:02:27 2026 GMT
            Not After : Sep 26 08:02:27 2026 GMT
        Subject: CN=301a3a0b6114f6f77074b230a054da68b5aca370
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a9:8b:f2:a5:f2:15:a8:e5:4a:51:8c:0e:4f:
                    34:2e:8c:14:0d:40:b4:f5:ab:ae:36:f6:61:43:7a:
                    a1:ee:61:0c:21:08:0b:e2:80:83:03:de:06:90:33:
                    41:2a:8b:99:c0:b6:bd:8b:65:83:4d:0f:b8:78:bc:
                    6a:51:2f:2a:a1:0e:21:f3:ad:66:2a:19:ba:01:1f:
                    26:18:40:0a:1d:20:69:06:d7:bf:33:89:54:0e:3b:
                    11:09:e0:3f:08:61:3d:56:28:e5:9b:ed:ea:8e:98:
                    e5:4b:fd:13:f4:97:8c:df:bb:54:79:26:96:89:e7:
                    64:ca:cd:48:7c:bb:ad:aa:0c:87:2e:cc:4c:71:13:
                    8f:08:ae:ae:7f:47:7d:e3:9e:76:c0:c2:33:e0:62:
                    67:25:2a:fc:e9:24:d1:0a:97:e9:46:1c:48:7f:90:
                    1b:d4:90:c5:7f:da:6e:bc:fe:23:67:74:81:a2:6f:
                    15:4c:a8:82:34:a4:48:cc:c9:21:07:6b:f3:58:0c:
                    4a:81:2a:f1:64:96:b1:e2:ad:0e:21:93:a0:08:43:
                    7e:95:1f:fe:d0:75:be:d6:99:b0:96:1f:a5:14:4d:
                    e8:44:d7:c8:71:5e:c6:c0:9f:8a:2e:f1:ce:3c:17:
                    9f:9a:2b:91:b4:aa:42:cd:9f:29:9f:4f:a5:9a:bf:
                    5f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:1A:3A:0B:61:14:F6:F7:70:74:B2:30:A0:54:DA:68:B5:AC:A3:70
            X509v3 Authority Key Identifier:
                keyid:8A:7B:85:C3:16:58:6B:19:9D:26:BF:C4:8F:E2:59:89:39:CB:6F:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/inuFwxZYaxmdJr_Ej-JZiTnLb94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:e8:64:69:06:f5:02:7b:ab:64:c7:cc:e0:46:2c:a4:71:88:
         fa:77:e3:75:03:36:3e:e4:f7:71:c7:0d:3c:47:13:2b:4a:e2:
         23:77:ad:9d:ad:d4:8b:db:f1:db:f1:0e:63:43:9a:be:14:60:
         8f:1d:c0:40:43:44:8d:fb:80:40:fa:83:3a:e0:4b:b9:9a:07:
         cf:1c:9c:a9:e2:6a:2e:d5:88:36:9b:cd:05:82:26:c5:b3:48:
         03:d7:55:44:d6:10:47:97:90:45:19:11:a2:3f:6a:ba:9d:eb:
         d7:b9:5c:0f:da:bb:ea:bd:cc:57:e6:fc:34:47:92:01:cd:a2:
         cc:21:50:54:c6:b7:62:5d:82:91:6b:1e:f4:c3:92:8d:b6:06:
         6a:00:5b:7c:19:50:ab:7d:f5:bf:7e:4d:f8:96:dd:e6:c9:f8:
         79:54:bd:53:df:4f:3d:47:6c:f7:b6:a3:4b:f7:8e:3f:77:87:
         4a:f8:a2:d5:bc:b7:e0:31:42:99:5c:84:7f:36:ae:27:db:38:
         e9:66:0c:a6:31:3f:18:b1:08:c8:7e:ae:34:5c:e4:86:8a:a4:
         1e:9b:01:e8:e5:65:d6:57:33:09:82:60:db:5c:ae:f7:6d:23:
         e5:64:1b:ac:12:0d:41:f7:d3:9d:21:0a:c1:fc:74:1a:08:0d:
         f8:b0:6e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:39:03 2026 by rpki-client