Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.mft
File:                     diZWxeZrgsBGVL4aJWKbH9allFY.mft (raw, json)
Hash identifier:          YkaKj0+JB+bSQQg1EDJ14JPae/NLX4c8Ude66kYVSqI=
Subject key identifier:   25:6C:93:38:85:49:B9:54:A1:F2:79:5B:EB:E9:10:49:30:97:2B:7E
Authority key identifier: 76:26:56:C5:E6:6B:82:C0:46:54:BE:1A:25:62:9B:1F:D6:A5:94:56
Certificate issuer:       /CN=762656c5e66b82c04654be1a25629b1fd6a59456
Certificate serial:       01A0EBF91B79F906AC16741BE3464C436850
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/diZWxeZrgsBGVL4aJWKbH9allFY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.mft
Manifest number:          157C
Signing time:             Tue 29 Sep 2026 07:02:46 +0000
Manifest this update:     Tue 29 Sep 2026 07:02:46 +0000
Manifest next update:     Wed 30 Sep 2026 07:02:46 +0000
Files and hashes:         1: 1-zaHjVwrXdDitoh6SDMlLgRUArk.roa (hash: 2dph5L/a7e013iS7+d1tHym3zVjN1Vn40bBX/w70pXQ=)
                          2: 4gGd7LcQ6qQ6avnurf3xejB1t0s.roa (hash: j3iW+b3EiZhGw5mm3ly7V+FoiiHAPGatR1ru3J1J6Vg=)
                          3: diZWxeZrgsBGVL4aJWKbH9allFY.crl (hash: XDL5QxGWKlNWXTc0Po8iKtJynp8vHNtONWx75H5M5/o=)
                          4: zNm5Qj7aAnNhn0PPXpRiZPpb-Cc.roa (hash: aecWS2V1Qv9HVqql7W0x5HQGtiHaZA7TdAFG/WsALog=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/diZWxeZrgsBGVL4aJWKbH9allFY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 07:02:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:eb:f9:1b:79:f9:06:ac:16:74:1b:e3:46:4c:43:68:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=762656c5e66b82c04654be1a25629b1fd6a59456
        Validity
            Not Before: Sep 29 07:02:46 2026 GMT
            Not After : Sep 30 07:02:46 2026 GMT
        Subject: CN=256c93388549b954a1f2795bebe9104930972b7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:78:4e:5a:63:a0:7a:bf:ea:bb:0f:98:b3:c5:
                    4b:5c:85:c2:9d:63:d1:78:b7:e4:56:9f:2b:ad:1f:
                    7c:95:d1:be:12:69:8d:15:71:1e:3a:c4:da:7a:29:
                    92:23:a2:bf:ba:1d:5b:d3:17:4d:10:63:65:d6:f1:
                    5c:5d:16:2c:66:d8:bd:2b:ef:59:ea:6c:41:c7:0e:
                    fd:e1:f8:02:8d:4c:f4:cb:88:27:ac:06:31:ff:1c:
                    50:5a:4b:36:d1:85:35:ef:ae:89:f3:02:3b:43:35:
                    ba:18:98:b1:75:72:dc:b1:7d:ed:40:12:6d:10:d4:
                    33:34:34:ab:57:75:81:e1:c4:49:36:e8:51:64:5d:
                    30:9a:1e:a6:51:ec:61:12:2e:bd:9f:0f:28:21:93:
                    25:b9:10:d6:c8:e1:ee:0e:f3:f3:92:06:ca:3f:59:
                    c9:e8:93:3c:48:1f:ed:97:73:ab:c3:94:86:86:2d:
                    aa:83:d7:de:7f:c6:1b:5b:6b:14:9c:e5:ac:47:3d:
                    a7:da:65:63:10:41:1b:b0:9a:cb:04:1e:4d:01:74:
                    bf:89:86:51:1f:49:d2:6f:53:fa:10:dc:61:39:4f:
                    50:cf:10:fd:73:d8:02:5e:3d:38:26:a2:ae:63:4a:
                    e6:b4:88:5f:2f:42:4c:c6:22:dc:37:64:c0:4d:30:
                    f5:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:6C:93:38:85:49:B9:54:A1:F2:79:5B:EB:E9:10:49:30:97:2B:7E
            X509v3 Authority Key Identifier:
                keyid:76:26:56:C5:E6:6B:82:C0:46:54:BE:1A:25:62:9B:1F:D6:A5:94:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/diZWxeZrgsBGVL4aJWKbH9allFY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:dd:37:65:5d:db:64:63:84:8b:bc:2d:03:12:e5:8e:ce:a0:
         1c:f7:28:cf:2d:43:b0:7d:f6:1c:10:af:4b:41:ea:65:d2:9b:
         91:d1:f2:ff:eb:b3:76:25:4d:7e:d6:0b:f4:b3:c6:73:04:5e:
         7b:e7:51:30:62:3e:19:34:4e:f1:ff:4f:b1:7f:70:a9:30:d8:
         1f:4a:cb:bb:f5:5c:06:44:f0:48:0a:88:a1:d5:a3:a6:63:72:
         f8:4b:2b:0d:1d:15:d3:de:69:7a:62:c1:36:a5:01:5b:63:d8:
         4e:9e:54:96:8d:9d:21:8b:9a:85:39:a6:98:ce:5e:c3:9f:43:
         68:6c:fb:3d:9d:88:1c:de:0d:9e:71:5a:b0:1e:9c:49:b6:85:
         88:7b:f0:45:07:d4:01:8e:97:e0:7b:02:93:75:04:49:17:6f:
         1f:1a:79:b6:e4:69:a2:cc:3a:88:98:ab:f9:e5:00:2e:a6:84:
         7b:d6:ea:fb:aa:70:38:0c:13:9a:63:ce:1d:39:8e:9e:21:a1:
         2b:76:3d:52:1f:01:88:e3:52:51:2b:64:4c:48:da:04:40:6f:
         ba:7d:c0:40:4f:1f:b9:9e:a7:77:ab:9b:fc:e3:2a:00:2b:71:
         ba:f9:59:c1:5b:0a:7b:70:ac:11:18:df:cc:55:06:be:2e:1b:
         e2:26:14:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 16:59:36 2026 by rpki-client