Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.mft
File:                     exSNtC-Q6WRHvX9j7dinzL7qqEI.mft (raw, json)
Hash identifier:          Q7FLm62M2z6mt2dX3RDRaIiGLZm/9FnBC+7XtpLrCaM=
Subject key identifier:   E2:FC:13:50:E4:77:7D:E6:57:7D:8A:41:0A:13:B0:84:00:D0:F3:29
Authority key identifier: 7B:14:8D:B4:2F:90:E9:64:47:BD:7F:63:ED:D8:A7:CC:BE:EA:A8:42
Certificate issuer:       /CN=7b148db42f90e96447bd7f63edd8a7ccbeeaa842
Certificate serial:       01A0F267F80C374A1D1A3D4F4F45885D95C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/exSNtC-Q6WRHvX9j7dinzL7qqEI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.mft
Manifest number:          1A86
Signing time:             Wed 30 Sep 2026 13:01:34 +0000
Manifest this update:     Wed 30 Sep 2026 13:01:34 +0000
Manifest next update:     Thu 01 Oct 2026 13:01:34 +0000
Files and hashes:         1: ZMqKx_6kfuiX4K4ynTlfHqpsGbU.roa (hash: FJ1ky7ybgFQgS7rlLZd7ZHiiCZM3aB6z1Cs+iuKBI+8=)
                          2: dHzF4P3tNtzyJNFvhC01ek08kYc.roa (hash: bUI0+2xFTsseXiv/I8zBJZyi3U6hUXamNCOgX/NaEog=)
                          3: exSNtC-Q6WRHvX9j7dinzL7qqEI.crl (hash: 4SPSNUQ3vel90CVRkU/yBb5PjgoZuIs0f8gu2hNxTdg=)
                          4: qPSlTWuBwEhYZesqn2vIMokA97I.roa (hash: +VxHS7EmR7QvgmKrejlLV1ZOVtujydoNhAoPrqYBYks=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/exSNtC-Q6WRHvX9j7dinzL7qqEI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 Oct 2026 11:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f2:67:f8:0c:37:4a:1d:1a:3d:4f:4f:45:88:5d:95:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b148db42f90e96447bd7f63edd8a7ccbeeaa842
        Validity
            Not Before: Sep 30 13:01:34 2026 GMT
            Not After : Oct  1 13:01:34 2026 GMT
        Subject: CN=e2fc1350e4777de6577d8a410a13b08400d0f329
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:22:e0:7a:65:49:29:94:89:a0:07:4a:7f:4d:
                    3f:7e:41:7e:58:a2:09:cb:74:9f:67:14:50:4a:97:
                    b3:b6:76:e6:31:4d:2f:13:b3:7e:53:1b:82:33:f2:
                    13:42:a6:ca:93:e7:2c:ac:fe:65:ab:14:a7:b5:55:
                    82:6f:f4:02:87:d3:cf:ee:44:b6:da:5a:7b:67:f6:
                    91:23:3f:95:c6:cc:e7:52:bf:33:aa:7b:7d:9c:bb:
                    43:67:03:09:3d:ed:68:6d:66:99:91:09:e3:b6:ce:
                    a7:92:fc:5f:ed:8b:b4:47:90:1e:95:8f:66:dd:a0:
                    d9:bb:28:66:5a:06:c4:2c:98:7b:3b:6c:ac:ce:98:
                    34:b7:79:9a:32:68:20:c3:a8:dc:4e:80:e2:69:25:
                    a8:fa:88:f0:fd:a7:4d:39:42:56:2c:82:72:16:c5:
                    81:94:9c:f2:63:2c:ac:e2:79:8f:fe:73:0a:a5:ef:
                    e9:4e:38:ec:6e:68:da:09:75:6d:ab:d3:e6:ce:c6:
                    6b:8a:54:32:97:7c:a0:c0:2f:4f:02:01:7f:32:7a:
                    bc:2c:2a:bf:15:c1:27:3f:c8:52:44:50:71:3f:99:
                    51:b1:cf:65:45:7e:4e:a8:b5:31:6c:2a:d2:fe:e0:
                    e1:12:61:95:ac:f3:cd:47:67:96:95:4f:70:0b:69:
                    9b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:FC:13:50:E4:77:7D:E6:57:7D:8A:41:0A:13:B0:84:00:D0:F3:29
            X509v3 Authority Key Identifier:
                keyid:7B:14:8D:B4:2F:90:E9:64:47:BD:7F:63:ED:D8:A7:CC:BE:EA:A8:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/exSNtC-Q6WRHvX9j7dinzL7qqEI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:ec:ed:71:fc:33:a8:74:73:b9:7a:8b:04:b4:32:6a:80:f6:
         f3:bd:ab:1a:2d:ea:03:ff:f2:9f:86:97:68:2e:3f:18:8d:a7:
         73:0a:38:f8:e4:b6:ae:e4:dd:10:89:23:ef:e1:3d:af:21:50:
         0e:6c:c6:f1:7e:11:ac:d6:e1:33:dc:db:0a:95:26:01:ef:36:
         91:6e:4e:f5:f7:9e:83:c1:a1:d2:a3:c1:52:17:d6:68:6a:87:
         0b:e3:e4:a4:c2:37:55:47:b3:2e:b4:51:66:ca:82:8a:d4:c4:
         27:b7:76:92:5c:eb:f8:f6:41:06:98:68:51:ae:f9:c9:00:ee:
         6b:93:80:5d:24:e5:de:8e:66:63:80:c7:0c:3e:fd:46:7b:ec:
         eb:f3:a2:3d:e6:d7:b1:60:9a:db:91:4d:68:97:64:74:b7:d2:
         e1:0a:b0:21:23:00:0c:65:3d:c5:f3:c6:59:50:67:81:d0:5e:
         6d:7c:d3:39:fb:c4:d0:9e:d2:b4:ba:2b:0a:6d:64:c3:ef:28:
         5a:37:46:fc:53:db:a0:e8:c2:f2:28:ef:92:f6:2f:86:92:b4:
         d3:68:d6:5c:5e:ef:72:6a:fb:9b:3b:68:ac:63:13:83:ce:dd:
         b7:94:dc:03:0c:eb:00:4f:af:40:e0:04:46:25:07:62:f0:8d:
         23:32:ef:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 19:38:35 2026 by rpki-client