Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6b/637377-cadc-4fd4-b66d-c9a56c5d3e91/1/azroDOy1b1swA4g6leJvRB10ny4.mft
File:                     azroDOy1b1swA4g6leJvRB10ny4.mft (raw, json)
Hash identifier:          A4sRuhpUy1R8duVk835RKcMeoKvaLxLAtG6xK8Ke+JI=
Subject key identifier:   91:64:D2:8F:18:00:EB:4D:AA:2B:FD:A1:0F:22:9E:85:26:43:08:FC
Authority key identifier: 6B:3A:E8:0C:EC:B5:6F:5B:30:03:88:3A:95:E2:6F:44:1D:74:9F:2E
Certificate issuer:       /CN=6b3ae80cecb56f5b3003883a95e26f441d749f2e
Certificate serial:       01A0D75F9553A9D719C8EA03AEB5E4274727
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/azroDOy1b1swA4g6leJvRB10ny4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/637377-cadc-4fd4-b66d-c9a56c5d3e91/1/azroDOy1b1swA4g6leJvRB10ny4.mft
Manifest number:          1A70
Signing time:             Fri 25 Sep 2026 07:02:40 +0000
Manifest this update:     Fri 25 Sep 2026 07:02:40 +0000
Manifest next update:     Sat 26 Sep 2026 07:02:40 +0000
Files and hashes:         1: TuL-GYp-KGLKeZlI1PQQjB4rz5Q.roa (hash: lKYAwRhWgiFs7sAqV5HJFu1VfDaJ/UZffjbVIIDda48=)
                          2: azroDOy1b1swA4g6leJvRB10ny4.crl (hash: xyxZLmThjPmEu63ThxN3IhSYlGjQgir779yhaYYf0xs=)
                          3: nbIvrx7sm7OwjVQqUWYz7-Ej8ik.roa (hash: ojgsRosmxWEVTH6lCEXrXkAjnSTCm4lGdDblGwk6LXQ=)
                          4: t7cHmqfPrhRkkV0A84jsifhswOM.roa (hash: Vqg/OtS8823soNqzOmMuoWT//Jc+2v5jegUaPIzkzRg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/637377-cadc-4fd4-b66d-c9a56c5d3e91/1/azroDOy1b1swA4g6leJvRB10ny4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/637377-cadc-4fd4-b66d-c9a56c5d3e91/1/azroDOy1b1swA4g6leJvRB10ny4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/azroDOy1b1swA4g6leJvRB10ny4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 07:02:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d7:5f:95:53:a9:d7:19:c8:ea:03:ae:b5:e4:27:47:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b3ae80cecb56f5b3003883a95e26f441d749f2e
        Validity
            Not Before: Sep 25 07:02:40 2026 GMT
            Not After : Sep 26 07:02:40 2026 GMT
        Subject: CN=9164d28f1800eb4daa2bfda10f229e85264308fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a3:bc:50:24:f8:c8:b8:7a:9e:ea:94:07:14:
                    10:0b:0f:3b:41:30:59:02:5a:7c:58:85:e8:b6:e3:
                    10:55:53:6b:2e:a1:1e:95:47:9b:ba:fe:99:be:47:
                    63:36:f5:1f:63:57:a6:61:9e:89:3f:af:c4:58:f5:
                    34:e9:d2:40:5c:0c:7b:56:33:05:ab:91:19:c4:5f:
                    69:70:14:14:39:1c:e8:ab:63:16:53:61:a2:17:bb:
                    32:a0:9c:ed:4a:1e:86:4f:30:e0:ff:4e:d4:d1:10:
                    72:99:92:18:2a:98:b4:de:aa:f8:d4:93:39:0b:71:
                    0b:77:c1:e1:7d:47:f9:7a:99:ab:68:21:d3:80:37:
                    e8:de:f6:29:47:75:de:3e:ce:2d:5f:a6:e3:e8:fd:
                    40:77:ae:d6:10:55:5e:5d:b3:dd:fc:9b:ed:69:62:
                    b7:c6:8a:ec:e1:90:c0:55:0b:e6:06:84:d4:4a:ef:
                    dc:79:42:6c:5a:eb:fd:f1:6b:89:b0:98:ea:92:21:
                    6e:51:bc:3e:83:19:66:e7:f2:6a:14:b8:97:a5:9a:
                    28:f1:f0:d1:bd:79:42:de:97:5e:85:eb:e2:7c:c6:
                    54:97:35:c2:2d:b3:82:f6:6f:2d:ed:6a:03:22:b4:
                    c7:8f:af:34:17:ad:bc:b7:5e:5a:ab:7d:4d:a5:1c:
                    6f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:64:D2:8F:18:00:EB:4D:AA:2B:FD:A1:0F:22:9E:85:26:43:08:FC
            X509v3 Authority Key Identifier:
                keyid:6B:3A:E8:0C:EC:B5:6F:5B:30:03:88:3A:95:E2:6F:44:1D:74:9F:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azroDOy1b1swA4g6leJvRB10ny4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/637377-cadc-4fd4-b66d-c9a56c5d3e91/1/azroDOy1b1swA4g6leJvRB10ny4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/637377-cadc-4fd4-b66d-c9a56c5d3e91/1/azroDOy1b1swA4g6leJvRB10ny4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:0f:61:8b:1e:0f:3e:1c:ec:3f:d9:f9:10:b6:c6:8d:54:81:
         6f:4d:f4:20:13:40:84:db:a9:89:76:05:78:8d:61:9a:75:c5:
         9a:a2:e7:eb:7e:c0:eb:35:cc:0d:a9:d2:bf:16:b2:1b:31:a5:
         38:1e:93:8a:d1:48:9c:38:10:45:42:d9:fe:cd:fd:62:6c:54:
         33:b3:58:fb:90:99:1f:bf:8d:f2:32:60:97:13:21:1e:22:1d:
         e2:99:d4:63:43:b3:2e:ca:35:dc:01:de:7a:81:de:39:5c:c0:
         70:9e:18:c1:ba:ca:3e:d4:ed:74:c3:62:97:94:6c:c7:4e:65:
         9c:3f:36:f1:16:1c:cc:ff:ce:66:52:15:70:c8:59:3b:e8:8b:
         7f:fd:0c:eb:52:ad:e1:b0:c5:ac:36:4c:96:6b:36:f8:6e:3e:
         e1:66:cd:dd:f7:09:14:93:90:86:3b:af:52:39:83:73:bc:55:
         99:49:3a:bd:a7:aa:b5:a8:89:ee:e7:93:2f:c8:ad:57:b2:14:
         dd:75:22:93:ea:a9:00:bf:b0:78:78:87:95:8b:0c:5e:71:2a:
         78:81:55:ff:67:9a:45:3b:29:d9:72:5b:62:65:fa:d7:02:f7:
         3c:79:b8:9b:6a:33:1e:9d:aa:c3:26:4c:ba:cb:ad:97:95:2b:
         8e:7f:66:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:07:30 2026 by rpki-client