Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/bb298b-3c39-49b2-abb1-11d636b56dab/1/aNogbIPVBeJUs-88dlD5-5NFNDU.mft
File:                     aNogbIPVBeJUs-88dlD5-5NFNDU.mft (raw, json)
Hash identifier:          D1AfcUnTAPqgsONZOuIfU7BFBaThaydh/zc1s/sAGOU=
Subject key identifier:   6A:B9:E5:FE:0B:3F:C2:19:5E:86:4C:18:C7:F9:DE:C7:1A:45:72:B6
Authority key identifier: 68:DA:20:6C:83:D5:05:E2:54:B3:EF:3C:76:50:F9:FB:93:45:34:35
Certificate issuer:       /CN=68da206c83d505e254b3ef3c7650f9fb93453435
Certificate serial:       01A0DBDFFDE023821F489C34161952B1B826
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aNogbIPVBeJUs-88dlD5-5NFNDU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/bb298b-3c39-49b2-abb1-11d636b56dab/1/aNogbIPVBeJUs-88dlD5-5NFNDU.mft
Manifest number:          0D61
Signing time:             Sat 26 Sep 2026 04:01:24 +0000
Manifest this update:     Sat 26 Sep 2026 04:01:24 +0000
Manifest next update:     Sun 27 Sep 2026 04:01:24 +0000
Files and hashes:         1: aNogbIPVBeJUs-88dlD5-5NFNDU.crl (hash: lPRuQDruSxzaLc0NtATc9mVoK6qMprTWHQc1HjaoogE=)
                          2: tI5e6iAaAZ4nNbkpCHsMqp1-ktQ.roa (hash: A9GN5Q7BwonPYBSN1TVcg69kmzmTkS/zhmBwNF2zRqM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/bb298b-3c39-49b2-abb1-11d636b56dab/1/aNogbIPVBeJUs-88dlD5-5NFNDU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/bb298b-3c39-49b2-abb1-11d636b56dab/1/aNogbIPVBeJUs-88dlD5-5NFNDU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aNogbIPVBeJUs-88dlD5-5NFNDU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 04:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:db:df:fd:e0:23:82:1f:48:9c:34:16:19:52:b1:b8:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68da206c83d505e254b3ef3c7650f9fb93453435
        Validity
            Not Before: Sep 26 04:01:24 2026 GMT
            Not After : Sep 27 04:01:24 2026 GMT
        Subject: CN=6ab9e5fe0b3fc2195e864c18c7f9dec71a4572b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:bf:68:5a:4e:50:c6:b0:5c:e8:29:0e:d1:f1:
                    ba:bc:74:be:7d:08:b0:62:a9:c6:67:73:f0:fd:08:
                    92:a7:92:8d:a7:eb:73:26:ac:70:ee:4f:5f:e5:a6:
                    07:c4:b3:21:29:b3:19:a0:5e:92:a7:ef:19:eb:79:
                    06:a6:e4:4b:d1:75:42:51:25:cb:01:69:95:c8:25:
                    5e:b7:1d:fe:51:ae:e0:81:2b:bb:73:20:d0:6d:d3:
                    94:90:f3:27:8e:5b:95:d0:63:17:70:84:75:5c:59:
                    4f:dc:dd:15:56:fa:a3:0a:0f:f5:b0:52:bc:5c:31:
                    ff:6d:72:f4:37:3e:92:ea:a9:fd:09:b7:2c:0b:c2:
                    98:01:e9:8b:de:57:ad:be:70:dd:2b:0d:22:53:a4:
                    b1:f8:da:ce:dc:25:c3:b7:32:7a:c1:be:91:f4:29:
                    e9:ad:e9:76:8f:26:87:45:1f:79:66:a2:d2:6d:d4:
                    6a:ae:bc:cf:d5:1a:ff:83:a1:12:f2:b1:f5:24:96:
                    b2:83:e2:fe:47:e6:dc:14:48:01:ff:26:fe:d9:62:
                    3e:20:fc:88:dc:3d:72:1b:db:b2:45:00:4d:1f:a2:
                    32:53:42:3d:a2:17:90:dd:43:ce:00:f2:08:f4:57:
                    c9:09:4f:c5:16:5c:5e:51:6c:fc:cb:7d:d8:0e:26:
                    bd:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:B9:E5:FE:0B:3F:C2:19:5E:86:4C:18:C7:F9:DE:C7:1A:45:72:B6
            X509v3 Authority Key Identifier:
                keyid:68:DA:20:6C:83:D5:05:E2:54:B3:EF:3C:76:50:F9:FB:93:45:34:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNogbIPVBeJUs-88dlD5-5NFNDU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/bb298b-3c39-49b2-abb1-11d636b56dab/1/aNogbIPVBeJUs-88dlD5-5NFNDU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/bb298b-3c39-49b2-abb1-11d636b56dab/1/aNogbIPVBeJUs-88dlD5-5NFNDU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:da:74:2d:c5:d4:f1:70:a8:73:94:46:ce:93:86:ec:31:0f:
         eb:25:fe:96:7f:dc:0e:b1:a2:aa:a9:4b:3b:3f:2d:eb:38:cb:
         81:d2:2d:b4:5a:15:8b:8b:93:26:d1:27:a2:1a:9a:a7:20:a0:
         3e:34:2c:98:35:7d:15:65:ae:ca:0c:fb:97:39:e7:23:b5:42:
         24:73:1e:8b:27:c0:71:8c:37:27:6f:fd:4c:a7:eb:b5:fa:39:
         8f:e8:ed:37:fc:0c:1f:3f:b0:d4:3c:a3:c3:f9:cc:b1:f3:91:
         44:9c:76:a2:a7:44:5f:6a:5a:9c:42:85:b5:8f:07:b2:7f:da:
         5b:51:05:d8:e1:bc:90:fe:63:d3:8a:31:4b:c2:46:f7:3a:50:
         7c:b0:11:6e:61:8c:62:24:a3:77:e4:c8:32:2b:cd:36:5a:cb:
         b0:eb:74:89:3e:0e:0d:99:7c:74:39:85:43:4e:65:d7:ed:98:
         db:44:34:c5:49:f3:91:78:b3:9d:8f:bc:20:78:93:eb:fe:48:
         56:a4:73:92:42:7a:4f:4d:04:97:7b:01:7a:dc:8e:01:91:97:
         49:51:96:e3:9e:16:ff:a7:ea:bc:46:ef:08:07:17:62:5a:56:
         aa:33:30:55:0b:b2:bf:db:d8:3b:34:a2:6c:3a:36:8a:8f:3d:
         ca:09:27:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:53:23 2026 by rpki-client