Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/d7jPRUsJYtFqSFWAj9OrwVhSu9g.mft
File:                     d7jPRUsJYtFqSFWAj9OrwVhSu9g.mft (raw, json)
Hash identifier:          /eci6JjPlbKBI8pa/cl/lDNP9sKM5hhT9AyLYSpjqPQ=
Subject key identifier:   BA:90:F2:C2:63:9C:84:DC:2C:E4:57:D8:EA:67:36:F3:B3:9F:66:22
Authority key identifier: 77:B8:CF:45:4B:09:62:D1:6A:48:55:80:8F:D3:AB:C1:58:52:BB:D8
Certificate issuer:       /CN=77b8cf454b0962d16a4855808fd3abc15852bbd8
Certificate serial:       01A0D42678719A6A54BC388A5C0959E191D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d7jPRUsJYtFqSFWAj9OrwVhSu9g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/d7jPRUsJYtFqSFWAj9OrwVhSu9g.mft
Manifest number:          1A7D
Signing time:             Thu 24 Sep 2026 16:01:25 +0000
Manifest this update:     Thu 24 Sep 2026 16:01:25 +0000
Manifest next update:     Fri 25 Sep 2026 16:01:25 +0000
Files and hashes:         1: 0EYCl_u7AU56YlSvHpYQis-MWnk.roa (hash: lcxZZ3W8GXhqGxMNgdkpvNjJpkamu9CsXtsLtPwfuzQ=)
                          2: SqLjz_YZ1ox7hHX_e2Fbl6iZekQ.roa (hash: H0HNrcJQzEmfkf815xlHJlafhtiV6TFeniX2HAOlK+U=)
                          3: d7jPRUsJYtFqSFWAj9OrwVhSu9g.crl (hash: NWi3z3NTgeyfccV97RGTU1I5ars3zOD9fz1ZrQNsZko=)
                          4: gApx7_2-IVeTOgv2vlenRdRxu4A.roa (hash: c6v6uoIsvWo8tgRVkkD7YA4iGmNGOGbbt0sNKC1bk1c=)
                          5: pp7zPOmyknFg8d0Gr5g-I2wOEDQ.roa (hash: 2LjSnEN+hHc9XuvzHuSzawxoX9WgA8pySl8rAgAIPKk=)
                          6: zvW2BXG_KR2tH5wPFjzByZu5Wic.roa (hash: aJKDQB0eC1MIkoZBUkIu5PMs0EeE5CsftG39rD94VMI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/d7jPRUsJYtFqSFWAj9OrwVhSu9g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/d7jPRUsJYtFqSFWAj9OrwVhSu9g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d7jPRUsJYtFqSFWAj9OrwVhSu9g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 14:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d4:26:78:71:9a:6a:54:bc:38:8a:5c:09:59:e1:91:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77b8cf454b0962d16a4855808fd3abc15852bbd8
        Validity
            Not Before: Sep 24 16:01:25 2026 GMT
            Not After : Sep 25 16:01:25 2026 GMT
        Subject: CN=ba90f2c2639c84dc2ce457d8ea6736f3b39f6622
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:08:01:fb:c1:27:26:23:c7:74:a6:e4:b0:c5:
                    c6:87:1c:c7:8a:50:08:e5:6d:ab:5c:5d:25:d6:9d:
                    27:fc:c7:7f:be:5b:d9:da:8d:1e:dc:c6:8d:a3:6a:
                    e3:b6:b6:40:65:69:a1:4e:b2:d4:b5:35:71:80:86:
                    76:e2:64:17:ae:e0:08:4a:77:b8:60:b3:5c:e9:54:
                    75:4b:7c:d6:bd:1b:30:ee:15:fc:30:a0:61:f4:f5:
                    4c:0c:e4:27:87:7e:de:e8:d6:87:4d:ec:1a:20:e2:
                    25:43:75:a7:25:a7:44:ee:d9:11:26:37:e4:08:c4:
                    61:b5:84:72:b6:7d:cc:2f:60:2b:e3:5a:2a:02:df:
                    03:ac:3f:fd:f9:31:40:4a:41:a9:7d:cf:83:93:c8:
                    9d:e3:94:22:fc:0c:e3:ed:cc:de:7b:78:87:f6:65:
                    11:a7:92:b8:c0:76:11:eb:17:41:27:ef:b5:c3:77:
                    69:94:71:e4:a7:1e:a5:4d:8a:d6:f4:7b:69:7d:13:
                    f8:d8:ba:75:ed:f6:c8:2b:84:33:24:d8:a6:61:72:
                    60:27:fe:14:bd:b3:32:64:ce:4f:fc:20:2f:86:a1:
                    8c:cf:91:de:cd:94:d4:07:6b:91:c4:d1:f9:28:11:
                    d4:c0:29:3e:67:e6:49:98:b0:b9:44:61:2a:3d:7e:
                    34:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:90:F2:C2:63:9C:84:DC:2C:E4:57:D8:EA:67:36:F3:B3:9F:66:22
            X509v3 Authority Key Identifier:
                keyid:77:B8:CF:45:4B:09:62:D1:6A:48:55:80:8F:D3:AB:C1:58:52:BB:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7jPRUsJYtFqSFWAj9OrwVhSu9g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/d7jPRUsJYtFqSFWAj9OrwVhSu9g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/d7jPRUsJYtFqSFWAj9OrwVhSu9g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:3d:5a:8c:8a:be:5c:25:c1:a7:bc:47:63:1f:85:21:2b:8f:
         c0:de:88:d6:e7:53:9f:fd:b2:1a:36:04:4d:71:e2:4c:7e:b6:
         18:0b:92:7e:83:ce:66:e6:aa:c7:de:d2:c5:79:8d:73:7d:20:
         f0:17:f6:1d:c7:7e:6f:18:d9:37:8e:18:9d:2c:b3:15:c0:5d:
         12:77:2c:5a:b2:f2:30:dc:d2:f6:36:99:b0:18:47:cc:9b:e9:
         1a:7e:e6:06:1f:79:a4:5f:c1:91:05:22:bd:43:35:68:f5:f0:
         a1:c0:17:14:f7:93:6a:18:2f:42:c8:70:35:d5:0f:37:6a:b0:
         c9:2d:85:26:11:c0:a4:12:3b:78:f3:09:59:48:c4:36:6b:15:
         31:bd:f7:c2:10:8c:61:94:94:d9:20:dd:b1:7e:ce:f6:2d:c6:
         25:59:2c:3b:72:dd:5e:ff:88:41:52:9b:59:c8:5d:bc:40:8e:
         8a:aa:30:2c:8d:78:ed:52:4a:cb:84:47:73:c9:5e:06:00:e6:
         4b:f8:8f:94:d2:10:c1:c0:73:5c:8f:2f:9e:b2:26:ab:fc:0c:
         c2:bb:d6:1a:33:aa:a1:ca:02:8d:0e:d3:79:4f:1d:7d:64:98:
         45:e3:7a:1f:d9:35:c6:dd:7e:53:46:5b:2e:ad:6d:dc:97:2b:
         03:55:d8:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:50:54 2026 by rpki-client