Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
File:                     alg23em52u81qKf3TWMm9rQtp00.mft (raw, json)
Hash identifier:          9G1+9Rr+ZPnHWMtRBBhn+KRilJfmTT7GeNLau4/nyXI=
Subject key identifier:   61:C2:02:0F:10:B7:0A:86:86:68:8F:5D:D5:62:CB:72:AE:51:82:0A
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Certificate issuer:       /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial:       01A0D4CAE862A0D7C34E9E481AB4101B28C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
Manifest number:          1133
Signing time:             Thu 24 Sep 2026 19:01:02 +0000
Manifest this update:     Thu 24 Sep 2026 19:01:02 +0000
Manifest next update:     Fri 25 Sep 2026 19:01:02 +0000
Files and hashes:         1: 2wOulV0vAbQf8biJXAnQkgGArPI.roa (hash: 7hYlyThHw9PBylpjQHX2//RefihYkxx++H9IszVVhRo=)
                          2: 588PNHg6CncRbEovNSIqaa8i5LI.roa (hash: cKLcHrzYxurc879bXkmUn4CshZz0QJYPGDzoguXub1Y=)
                          3: G8BPphhm9oFoNoaDVHCDJOi1A1I.roa (hash: o25EiApUpZto47Wgp7aaZGTEkqSv5P2WX51MC5xNgcg=)
                          4: JWw_FABd9Q-ewURwU3IZ1GpRRJY.roa (hash: ZCt1hbjV0Oxdybocx7QzONRXEhTOvQ3xXy28wEkffEM=)
                          5: M0vUEBMIUgT4jDZek6CAIPYaSIg.roa (hash: PIpybvqNjJxeWjfkr7UEGiD+MMuADppLXWFHDY6S5Vc=)
                          6: MZRQk6tT-Iy_0EmbTY5ZwDElyos.roa (hash: pr7kUc7XXbghgioDyj2+ehsGl4rvR5Ny0ZhIypP6qnE=)
                          7: alg23em52u81qKf3TWMm9rQtp00.crl (hash: eouqeZcXgQt4LxQFJnRdF17mKiKz6t909fboEZ/PqvM=)
                          8: cx2hNcUqecSEJqe3n2yH1nbkzcQ.roa (hash: VM9cV3NpEOzoGjoegWLpfoVKjMdeb/qreQ0du+7oLuc=)
                          9: lbJDMqkl3r_zP_8RcjCwdgnRqqQ.roa (hash: MLj9IAZg1W5TsVOSKsUt+tjSOZpaYeIgJDEMRDXfZGo=)
                          10: mQKWGJcUH9K-JRzm__zzvh8RY30.roa (hash: kWUBDBmUmrcdRJVoYANr5CHiRnOgTYOm1wjhrADWFGE=)
                          11: mSzzMA6L5QbhcWeV8GJlOnBN0cM.roa (hash: KFpvmdmXJzfhj/vqjMViv2cspmTTL885sm48c0BNhjc=)
                          12: pcGsYQ6WmjLQ7fW-l50FaHq8fAw.roa (hash: OyCY6h+GWUv+mGKdOjMTfLCqD3xuf3tOl0/vrW+coks=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 14:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d4:ca:e8:62:a0:d7:c3:4e:9e:48:1a:b4:10:1b:28:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
        Validity
            Not Before: Sep 24 19:01:02 2026 GMT
            Not After : Sep 25 19:01:02 2026 GMT
        Subject: CN=61c2020f10b70a8686688f5dd562cb72ae51820a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ab:1f:73:ee:14:67:c7:74:90:d7:65:21:b4:
                    ed:d7:53:5c:9a:f9:22:20:0b:14:01:6d:42:31:39:
                    62:5a:91:b9:c0:cc:88:0b:22:c9:f1:97:f0:6c:dc:
                    fd:a4:d2:33:ab:2e:77:87:01:f3:bf:7d:90:f9:67:
                    9d:13:2f:8d:15:72:6c:76:76:dc:7f:79:05:b4:a2:
                    8e:9d:da:5b:fd:5c:38:e9:7e:12:64:1d:46:78:2a:
                    cf:51:0f:5a:3d:56:d2:18:31:64:97:70:26:57:44:
                    93:67:7e:50:3e:74:e1:6d:68:8e:c2:a0:dd:3e:53:
                    c8:eb:63:6d:c7:7d:9a:89:7c:d1:61:59:b3:62:12:
                    59:09:3e:24:c8:b0:60:63:8b:51:f9:93:77:18:39:
                    39:be:5e:3c:99:63:73:89:bf:c8:37:56:c7:7a:55:
                    77:09:ff:71:cd:8b:5c:d5:1d:de:62:55:46:d2:7e:
                    48:7d:6a:a7:9b:0a:6b:df:77:2b:1b:c3:f2:5c:52:
                    27:1a:63:f6:37:3d:eb:79:4f:48:8b:bf:1e:81:3c:
                    75:4e:9b:1b:cf:dc:d7:26:73:22:aa:0b:f8:1b:62:
                    bf:74:0b:2d:01:6e:f6:5a:2a:3b:4f:18:db:a1:d1:
                    49:19:b5:e9:2a:10:f0:ac:fe:ac:e8:2e:db:38:af:
                    40:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:C2:02:0F:10:B7:0A:86:86:68:8F:5D:D5:62:CB:72:AE:51:82:0A
            X509v3 Authority Key Identifier:
                keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:94:37:e8:de:4c:43:2a:aa:80:66:cf:1e:02:2a:92:e2:75:
         3e:b1:66:81:93:47:3d:03:b8:c4:88:1e:d7:0a:aa:52:15:33:
         ac:b5:9b:8a:63:44:e8:a7:26:22:d7:a6:e1:7f:28:c1:79:d4:
         23:cf:02:aa:d6:f5:05:b2:48:63:b3:e5:22:3d:b3:d0:21:c5:
         81:cf:4d:b5:cb:06:98:91:99:03:ad:33:4f:91:19:56:4d:81:
         0f:e0:3f:b2:41:d7:3d:67:01:43:37:8e:5c:d9:93:63:2b:48:
         8d:bf:2b:9e:a2:48:d7:d2:39:d5:6e:e0:7b:b9:b2:35:86:59:
         10:a7:3a:71:b0:24:87:63:b0:9e:73:a2:44:ac:a6:cb:58:7f:
         bc:b6:40:fc:f7:e7:91:c1:60:cb:01:30:fe:c3:1a:2d:8f:d0:
         54:af:f8:8e:a4:9b:98:89:c2:e1:4b:c2:ce:9f:16:c5:cf:a1:
         0b:2d:35:5e:b6:b6:1c:32:d2:85:7b:6d:13:25:6e:40:e3:6e:
         f7:41:bf:ba:06:22:cc:b2:2a:30:65:4e:fc:03:18:90:c3:9a:
         d9:68:99:f9:f3:79:01:98:43:7c:7c:48:e3:49:53:39:12:6a:
         77:4a:e6:84:db:62:45:09:79:a2:39:3d:8b:ad:da:b4:38:69:
         07:4f:ea:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:15:01 2026 by rpki-client