Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/btA5KsdmC9FGD6HVAx0YQNAblBI.mft
File:                     btA5KsdmC9FGD6HVAx0YQNAblBI.mft (raw, json)
Hash identifier:          WgQ3P5AJ7Hi58CmXmBje0VV+rH4lq26OaSEHuq2Id8M=
Subject key identifier:   F3:FF:7A:9C:FA:EA:29:DB:3F:B6:C3:9E:B4:D6:90:3D:BA:99:81:84
Authority key identifier: 6E:D0:39:2A:C7:66:0B:D1:46:0F:A1:D5:03:1D:18:40:D0:1B:94:12
Certificate issuer:       /CN=6ed0392ac7660bd1460fa1d5031d1840d01b9412
Certificate serial:       01A0D382D725454B7ADDA427F3015ECE7BF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/btA5KsdmC9FGD6HVAx0YQNAblBI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/btA5KsdmC9FGD6HVAx0YQNAblBI.mft
Manifest number:          1A73
Signing time:             Thu 24 Sep 2026 13:02:42 +0000
Manifest this update:     Thu 24 Sep 2026 13:02:42 +0000
Manifest next update:     Fri 25 Sep 2026 13:02:42 +0000
Files and hashes:         1: 2S62mTmjDl4px8NNmk9NduukcXk.roa (hash: xYOYC1MdsFxurlcP8/NupJrR7Rlh58ssFzFiALiUCRE=)
                          2: 84qtyRzdn5we4xBoW1LVDrbiPAw.roa (hash: JOwq7LPQbha4BiSwQqjqrt8Dw3BVTVdv+eQ1EbJP8Xk=)
                          3: amzi7HtQV9_v7w8hHHWKukbKI-U.roa (hash: cjyKi8MyZ6FA0LhuL8RVz7jOZxAcNj3RS515aaG3koA=)
                          4: btA5KsdmC9FGD6HVAx0YQNAblBI.crl (hash: lZKpjZ85l4Ur+W7BOTjQaI6XtEZzvBXLr77to2zCpUk=)
                          5: jpyJdp9pVbvs1-8_fIYxVhnl96o.roa (hash: oOtfLMrxKeo2H6VS8YJdihkaYbP5cIULyDJARVZSWVQ=)
                          6: x-Z6tL-vvX_mJLHlb9B7x-d3eps.roa (hash: zHvZuxQOM2V/TXUiqeY3qlcrNS+y8gi7iI41siwUvv0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/btA5KsdmC9FGD6HVAx0YQNAblBI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/btA5KsdmC9FGD6HVAx0YQNAblBI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/btA5KsdmC9FGD6HVAx0YQNAblBI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 13:02:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d3:82:d7:25:45:4b:7a:dd:a4:27:f3:01:5e:ce:7b:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed0392ac7660bd1460fa1d5031d1840d01b9412
        Validity
            Not Before: Sep 24 13:02:42 2026 GMT
            Not After : Sep 25 13:02:42 2026 GMT
        Subject: CN=f3ff7a9cfaea29db3fb6c39eb4d6903dba998184
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e3:76:ce:f2:51:a3:a1:8d:ac:2c:6b:58:b0:
                    25:c5:64:22:f9:5f:36:c8:30:c2:98:58:9d:2e:56:
                    e1:6a:2f:df:a4:60:ff:8b:2d:de:61:ca:78:37:65:
                    6d:a8:5d:50:24:56:e7:1d:67:65:24:a7:b2:82:2b:
                    37:a8:a9:89:ad:ef:6f:a2:08:c1:39:01:fb:4f:f1:
                    40:83:b3:a3:26:d8:8a:45:2a:37:f6:1a:7f:d7:32:
                    da:ac:45:09:db:d9:cc:6d:38:54:b8:c0:ad:58:60:
                    16:c9:fb:74:b6:43:71:a7:96:52:b7:69:37:b2:e2:
                    56:3e:69:53:e3:6f:5c:c2:b0:63:48:d5:c4:e3:b4:
                    b5:ad:ba:0d:b5:8f:4a:4a:b2:d8:c9:3c:77:89:d7:
                    a1:f4:c5:2c:40:60:0b:7b:d5:cd:7d:87:2c:46:41:
                    8c:9d:65:62:a4:75:1d:b8:f9:ff:a9:4c:f0:0b:67:
                    77:b8:b3:aa:58:ce:d7:ae:20:c1:73:44:a6:39:85:
                    81:fd:59:9c:1c:9a:63:9a:8e:fe:3d:eb:9c:3e:16:
                    f4:6b:18:a2:31:ec:8c:4f:f3:9f:97:46:d2:ce:88:
                    0d:54:45:89:a6:f4:4b:f3:2a:ed:1e:74:38:9e:6e:
                    76:e7:c8:d4:e2:0f:4c:89:53:85:ab:d3:b6:86:c1:
                    9d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:FF:7A:9C:FA:EA:29:DB:3F:B6:C3:9E:B4:D6:90:3D:BA:99:81:84
            X509v3 Authority Key Identifier:
                keyid:6E:D0:39:2A:C7:66:0B:D1:46:0F:A1:D5:03:1D:18:40:D0:1B:94:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/btA5KsdmC9FGD6HVAx0YQNAblBI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/btA5KsdmC9FGD6HVAx0YQNAblBI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/btA5KsdmC9FGD6HVAx0YQNAblBI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:b4:35:a7:5e:71:35:e9:d5:c9:a7:47:f8:62:3c:00:d4:8b:
         74:1f:41:27:22:84:f8:05:44:be:fe:b0:33:64:04:93:44:f3:
         e4:0a:22:46:81:05:3e:75:b7:5f:78:62:9d:89:0f:b3:69:e8:
         e4:85:be:02:bb:90:8c:33:b2:47:b5:6b:71:83:6b:89:ed:82:
         0f:8f:5b:08:38:1f:c9:ed:de:18:30:7d:f4:f5:eb:31:81:10:
         34:69:26:0c:19:19:dd:a4:e2:63:37:26:84:25:e2:7c:e9:0d:
         85:4c:fb:b5:0c:ed:0d:54:b4:b4:d9:ad:ba:35:96:c1:c1:2c:
         74:8c:a6:91:33:b6:0f:1f:03:1e:e9:a0:91:2e:29:78:72:40:
         cf:a0:00:9f:8e:1c:7a:29:8e:66:56:4a:23:aa:a9:e5:ef:e2:
         da:6b:67:e6:e7:e4:9a:e4:5b:80:c2:00:02:fd:25:08:a8:62:
         2c:cc:0a:35:2a:5a:ef:bf:a2:84:49:85:f4:fe:8e:d3:e5:09:
         4a:df:23:a1:c5:3c:f1:6e:c3:89:bb:3c:d6:0a:d5:10:60:5c:
         08:69:12:1a:c3:f2:53:c8:5f:25:fd:b9:30:5b:2e:23:cf:f0:
         37:4b:1c:46:e0:a7:d4:82:8d:11:c9:93:c9:00:92:25:f1:c1:
         85:89:c3:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:34:54 2026 by rpki-client