Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/rB9yG3t-bQSfv-Ug4cqJwcolaBM.mft
File:                     rB9yG3t-bQSfv-Ug4cqJwcolaBM.mft (raw, json)
Hash identifier:          qOJqt/lQrjTBTujEP+VrorvuT1BdWXUhsUnZIhzjNY8=
Subject key identifier:   A0:C8:A3:5E:D7:71:AC:00:A5:32:91:F6:5C:F9:F2:FA:86:F6:39:FB
Authority key identifier: AC:1F:72:1B:7B:7E:6D:04:9F:BF:E5:20:E1:CA:89:C1:CA:25:68:13
Certificate issuer:       /CN=ac1f721b7b7e6d049fbfe520e1ca89c1ca256813
Certificate serial:       01A0DE73C6C23A5716FDBA72C5426372B984
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rB9yG3t-bQSfv-Ug4cqJwcolaBM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/rB9yG3t-bQSfv-Ug4cqJwcolaBM.mft
Manifest number:          0F02
Signing time:             Sat 26 Sep 2026 16:02:04 +0000
Manifest this update:     Sat 26 Sep 2026 16:02:04 +0000
Manifest next update:     Sun 27 Sep 2026 16:02:04 +0000
Files and hashes:         1: 8HyCmR3m3bB-ZPFvZNYQwHNfPQc.roa (hash: dVgFr+se9/uNWjPcDQ0s+MLuqUnv796+kO0OhL/2WIw=)
                          2: BkqDRw1iz5sXxEobDQ8sSl8fZ-Q.roa (hash: ImpBJmFAicVZe4FyuclessqektskyarT3dkjgbIAApc=)
                          3: PMbYzy537M6FYdAlUz4jkGsPA-I.roa (hash: ajPdaGQfR1aG3NMZPS8OhmT50QrXba1wlnD+tFLuyOs=)
                          4: SRsY6kj5UGqnvlxagIJmGE1euUg.roa (hash: pp/0wYUhglX69fSE7dDhNnaobIMP1ZMhV2ZCliiYC+s=)
                          5: d4FTinSkSpgAsftue4mw0muV9g4.roa (hash: o18FFk0GKCajlV5Qp0ox/qU7G6qQj7a4wSQkqbavJis=)
                          6: jaZZIPaePJPu0ozcRQcxpeC9OGk.roa (hash: UzwtVe+1ET6sqDNyn+jHWQug7bRb6m7cB5+R/hyELRc=)
                          7: rB9yG3t-bQSfv-Ug4cqJwcolaBM.crl (hash: J3GeN3khFLtyZFX/yDiqL3KNCzQKOp51WA+NKmOOSM4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/rB9yG3t-bQSfv-Ug4cqJwcolaBM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/rB9yG3t-bQSfv-Ug4cqJwcolaBM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rB9yG3t-bQSfv-Ug4cqJwcolaBM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 11:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:de:73:c6:c2:3a:57:16:fd:ba:72:c5:42:63:72:b9:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac1f721b7b7e6d049fbfe520e1ca89c1ca256813
        Validity
            Not Before: Sep 26 16:02:04 2026 GMT
            Not After : Sep 27 16:02:04 2026 GMT
        Subject: CN=a0c8a35ed771ac00a53291f65cf9f2fa86f639fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ab:a3:94:96:f0:75:a7:a0:38:82:d8:3f:c7:
                    67:d6:13:f6:04:26:3c:91:b2:1b:a5:87:50:e5:e1:
                    23:76:ea:99:7b:01:68:aa:14:14:63:ee:74:83:4d:
                    15:61:6e:33:51:8b:d0:86:27:cc:60:30:98:80:58:
                    53:48:05:97:88:58:93:3d:55:eb:2b:0a:c4:85:80:
                    4e:d3:e5:18:30:e2:1a:c3:81:8f:51:2d:ff:26:de:
                    36:a5:a3:ca:09:d2:f9:38:d2:92:d1:e6:0b:b5:46:
                    a9:5c:2e:c8:a8:38:e6:e0:72:06:98:b5:e3:81:a9:
                    22:83:c0:79:c7:4e:a9:7f:91:cc:17:e0:bb:e8:ee:
                    5a:4f:08:f9:54:c6:7d:d5:7a:6b:37:eb:0b:30:89:
                    6c:90:9a:5b:6f:e7:75:89:da:c5:01:2e:04:b2:59:
                    a1:27:f8:2e:b0:ad:7c:ba:56:bf:bd:81:90:a2:83:
                    e8:49:d2:b5:a5:a9:05:cd:76:0f:fc:de:18:01:f7:
                    a7:33:ca:06:5b:60:45:f2:bd:08:3f:e2:44:72:83:
                    83:91:5c:cb:bc:c3:d9:45:16:8b:e3:4f:46:7a:e1:
                    06:b2:35:2d:e1:5d:5c:fe:5b:26:c3:dc:cd:b9:58:
                    7a:92:ba:34:40:df:37:26:6d:79:e5:1a:14:09:8c:
                    69:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:C8:A3:5E:D7:71:AC:00:A5:32:91:F6:5C:F9:F2:FA:86:F6:39:FB
            X509v3 Authority Key Identifier:
                keyid:AC:1F:72:1B:7B:7E:6D:04:9F:BF:E5:20:E1:CA:89:C1:CA:25:68:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rB9yG3t-bQSfv-Ug4cqJwcolaBM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/rB9yG3t-bQSfv-Ug4cqJwcolaBM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/rB9yG3t-bQSfv-Ug4cqJwcolaBM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:69:37:2d:0e:50:28:7a:4b:d2:b0:7d:26:90:af:88:38:23:
         dc:ee:39:99:32:63:45:f8:d9:8a:5b:e9:7b:d0:ac:5e:6d:2b:
         e4:00:86:4c:5b:71:b2:2a:c4:de:7d:c7:f0:e7:dc:88:4a:a6:
         96:d8:4c:ed:c8:5a:8f:8f:a3:72:63:43:14:f7:10:bb:79:8e:
         35:6d:0d:38:34:03:79:83:df:36:19:bb:84:7f:75:66:5a:26:
         95:58:c9:aa:e0:19:8e:5d:c4:15:50:01:54:09:9b:a9:93:23:
         1e:34:ef:4b:da:aa:52:19:39:3f:cc:cb:35:fc:e8:d8:6c:ee:
         74:cd:6a:31:1e:d3:c0:b0:1b:2c:19:56:cd:0c:3b:64:ec:38:
         60:92:57:44:a5:41:83:d2:4c:07:c8:16:85:24:76:c2:2a:39:
         02:a4:fd:ac:13:0e:95:e7:a8:6d:11:9f:83:db:76:96:b1:bd:
         24:6f:d3:ea:e4:45:e0:77:3c:39:38:1d:b9:89:07:37:39:70:
         28:f8:bb:ed:77:a7:0f:31:e8:c1:85:c3:89:53:98:99:e9:92:
         58:0d:f8:05:64:e5:08:fb:e4:19:09:71:df:59:d5:8a:6c:a9:
         90:2f:b4:23:e3:22:56:56:3f:df:a6:0b:08:ef:83:24:6d:72:
         15:aa:53:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 20:59:07 2026 by rpki-client