Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/b1eSq4t1mqdzA42SB3qZvPjYGqA.mft
File:                     b1eSq4t1mqdzA42SB3qZvPjYGqA.mft (raw, json)
Hash identifier:          SUxAB0baku4aTt5qhi2FnSeAmd1YrT9H0oD9tTH2aWI=
Subject key identifier:   B2:60:9A:B8:E2:01:82:74:F7:E4:3D:F6:07:D9:50:20:45:7F:76:09
Authority key identifier: 6F:57:92:AB:8B:75:9A:A7:73:03:8D:92:07:7A:99:BC:F8:D8:1A:A0
Certificate issuer:       /CN=6f5792ab8b759aa773038d92077a99bcf8d81aa0
Certificate serial:       01A0E0CF3B0973BF52F82E4665B2A5225167
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b1eSq4t1mqdzA42SB3qZvPjYGqA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/b1eSq4t1mqdzA42SB3qZvPjYGqA.mft
Manifest number:          1156
Signing time:             Sun 27 Sep 2026 03:01:12 +0000
Manifest this update:     Sun 27 Sep 2026 03:01:12 +0000
Manifest next update:     Mon 28 Sep 2026 03:01:12 +0000
Files and hashes:         1: aXJznUL0xUln13cBfkJIhsiborQ.roa (hash: jlyCOLcXpbHCPjdfEeooCCZpqWJT8+78wdU1bfNr7vE=)
                          2: b1eSq4t1mqdzA42SB3qZvPjYGqA.crl (hash: x6Y0aRwjvMCCx2OQtIEipCJZZ0EUOsOwpWvZM9U8Bgg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/b1eSq4t1mqdzA42SB3qZvPjYGqA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/b1eSq4t1mqdzA42SB3qZvPjYGqA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b1eSq4t1mqdzA42SB3qZvPjYGqA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 20:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e0:cf:3b:09:73:bf:52:f8:2e:46:65:b2:a5:22:51:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f5792ab8b759aa773038d92077a99bcf8d81aa0
        Validity
            Not Before: Sep 27 03:01:12 2026 GMT
            Not After : Sep 28 03:01:12 2026 GMT
        Subject: CN=b2609ab8e2018274f7e43df607d95020457f7609
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:84:2b:a1:60:2d:78:c2:b9:64:a3:5e:ef:32:
                    c2:34:77:b1:cc:1f:55:88:45:58:a0:b7:ee:29:3b:
                    54:66:ec:73:25:1e:de:da:28:17:04:c5:6e:9d:15:
                    26:05:93:16:9a:9e:89:f8:c9:1f:86:6c:e6:4b:c3:
                    16:2f:f9:65:73:d3:93:44:c2:81:19:47:ed:50:ac:
                    82:58:12:8f:a3:db:24:0c:ab:e0:52:ff:ce:7c:d4:
                    2d:a0:f9:bd:54:f0:df:59:f4:2c:5b:86:a6:40:e0:
                    4d:fa:66:b8:b0:7e:63:ff:aa:1c:90:21:b8:22:bc:
                    56:0f:7f:21:aa:60:03:81:df:1d:51:01:e3:dc:e8:
                    05:bf:73:bb:5f:f1:4c:de:dd:66:b1:5d:9f:e5:ed:
                    00:a2:1c:11:ab:1b:35:57:8b:be:92:8a:5f:c0:99:
                    ac:c5:3d:d9:fd:75:44:eb:c0:b2:b0:13:35:cf:ad:
                    9d:ed:7c:0f:01:70:80:25:34:6a:f6:8a:4d:2a:a7:
                    15:a0:b9:19:2b:c3:be:aa:c1:75:42:b5:3e:b2:be:
                    a3:8f:be:b6:34:7a:86:9a:62:27:b7:e7:80:c9:d1:
                    c4:35:83:c5:c0:b8:9e:7f:ca:f4:58:5c:49:22:28:
                    1d:95:f2:b6:55:03:dc:c4:69:da:a6:f0:0f:87:ed:
                    03:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:60:9A:B8:E2:01:82:74:F7:E4:3D:F6:07:D9:50:20:45:7F:76:09
            X509v3 Authority Key Identifier:
                keyid:6F:57:92:AB:8B:75:9A:A7:73:03:8D:92:07:7A:99:BC:F8:D8:1A:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1eSq4t1mqdzA42SB3qZvPjYGqA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/b1eSq4t1mqdzA42SB3qZvPjYGqA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/b1eSq4t1mqdzA42SB3qZvPjYGqA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:dd:da:d6:a6:03:cf:fb:17:fb:07:fd:2e:38:65:22:9e:67:
         a6:b1:b9:f2:b4:6c:d5:c1:da:c0:ab:22:a9:85:e8:ac:c0:0e:
         48:64:2e:9e:1f:01:27:34:60:e5:67:d9:9f:b4:81:58:59:03:
         d1:f4:44:d4:0c:de:f6:87:7b:86:26:94:d1:de:0a:f6:61:ba:
         93:c2:76:9f:bc:5e:e7:52:75:5c:10:bc:7b:61:e8:92:ea:05:
         3c:ff:ba:f2:4f:f3:10:5e:0c:06:04:2b:ab:ce:ad:3a:1e:69:
         69:cb:22:c5:03:5c:e7:dc:29:1f:d4:78:39:c3:aa:ad:3e:05:
         8c:78:18:62:37:e7:b3:a1:69:0e:82:e3:5e:ec:73:d3:79:4d:
         90:78:d0:62:41:ea:ca:32:0f:a3:9f:e0:ba:ad:37:3d:2c:8b:
         20:77:9d:2f:b9:57:a7:c6:7e:87:77:a4:2a:c6:9b:bd:cd:a6:
         f2:98:62:8b:3a:90:9b:8f:4e:f2:ab:b7:83:31:7c:00:8f:d2:
         91:ee:ca:ed:c8:cb:c3:72:f8:a4:69:5c:c1:b3:b6:d2:27:21:
         35:5f:dd:f0:cb:25:e1:52:f2:2e:23:06:e1:4b:88:e8:4f:05:
         56:ee:02:74:ec:7f:a3:d8:6f:bf:ac:f7:af:26:b9:24:72:f3:
         62:8c:99:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 07:58:09 2026 by rpki-client