Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/c37c16-0603-4845-b4d4-95ddb0974e4b/1/hB82_L9zNO_2uR6AKX6lslxOz9I.mft
File:                     hB82_L9zNO_2uR6AKX6lslxOz9I.mft (raw, json)
Hash identifier:          qYBvEFGr3TK+gMOTrMOiTHc1n6C2Sp4jxfNw5pjuUeQ=
Subject key identifier:   41:5F:C8:0E:6B:6B:EB:47:A3:21:F9:1D:6F:71:10:9E:31:A9:A2:2D
Authority key identifier: 84:1F:36:FC:BF:73:34:EF:F6:B9:1E:80:29:7E:A5:B2:5C:4E:CF:D2
Certificate issuer:       /CN=841f36fcbf7334eff6b91e80297ea5b25c4ecfd2
Certificate serial:       01A0E5BF7A07C5CEE3DFFA89942D54B22CF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hB82_L9zNO_2uR6AKX6lslxOz9I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/c37c16-0603-4845-b4d4-95ddb0974e4b/1/hB82_L9zNO_2uR6AKX6lslxOz9I.mft
Manifest number:          1A0A
Signing time:             Mon 28 Sep 2026 02:02:05 +0000
Manifest this update:     Mon 28 Sep 2026 02:02:05 +0000
Manifest next update:     Tue 29 Sep 2026 02:02:05 +0000
Files and hashes:         1: AJeVrZCLxAoT2hk1jNnC-Wu8ic0.roa (hash: frjC5Gbfb/b6ellH82d+qc/ADaLtRdBgOt68RftUF/k=)
                          2: e352oEgVriZnYK_AKJa-CWKEICc.roa (hash: U/aIt3PG8wiAKdOrpvdQvx37nl+6JO2D4S8tDrL+hpc=)
                          3: hB82_L9zNO_2uR6AKX6lslxOz9I.crl (hash: OdwHJXQtknG8k9JVZtOK4+Fkf/mt1PTTmbWfviUMbI8=)
                          4: oRy8UxR8Vc3XM-6AZCofxXbESbU.roa (hash: OxE0g4307Lmb3G4tCr6jdPxniZZCP8iXtLRIdgc9vMc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/c37c16-0603-4845-b4d4-95ddb0974e4b/1/hB82_L9zNO_2uR6AKX6lslxOz9I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/c37c16-0603-4845-b4d4-95ddb0974e4b/1/hB82_L9zNO_2uR6AKX6lslxOz9I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hB82_L9zNO_2uR6AKX6lslxOz9I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 23:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e5:bf:7a:07:c5:ce:e3:df:fa:89:94:2d:54:b2:2c:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=841f36fcbf7334eff6b91e80297ea5b25c4ecfd2
        Validity
            Not Before: Sep 28 02:02:05 2026 GMT
            Not After : Sep 29 02:02:05 2026 GMT
        Subject: CN=415fc80e6b6beb47a321f91d6f71109e31a9a22d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5d:8c:65:90:97:cc:10:38:44:bd:16:38:8d:
                    fe:b1:2b:e8:1e:59:00:82:09:4b:0c:21:16:5b:f9:
                    62:2e:a9:01:3a:a4:5c:9c:40:c5:86:0b:a5:f4:f2:
                    05:71:df:85:00:2b:79:84:ad:97:75:af:0e:78:08:
                    31:2c:28:62:5b:8f:13:7a:27:1f:7b:22:76:e2:ed:
                    6d:69:ce:10:50:26:44:75:8d:d8:f2:41:3e:dd:e6:
                    aa:e2:7a:cc:02:e5:b3:4f:19:a9:f1:30:fe:0a:7a:
                    3f:6d:68:1e:aa:a3:84:c9:19:cf:d7:95:bc:03:f1:
                    e4:6c:00:e3:f9:78:0d:f7:dc:cd:f6:b1:f5:02:c0:
                    0c:91:68:ad:7b:22:98:81:1a:6e:39:6e:bb:84:c7:
                    49:fb:93:83:dd:bf:29:79:49:86:9d:04:86:28:45:
                    08:bc:49:bb:45:fa:e0:47:9f:39:0f:d6:26:84:7b:
                    0e:bf:ca:df:d7:12:62:47:03:66:49:14:29:0d:c5:
                    7c:63:29:69:48:37:43:89:ae:44:90:9e:e0:1b:b8:
                    18:26:91:ab:0f:9f:1c:42:1c:9c:a7:f7:ae:a7:a4:
                    da:e2:bb:d7:88:07:3a:0b:1f:9f:d6:72:0a:1a:18:
                    24:59:52:ae:b8:b7:14:58:93:9a:87:ed:bd:fb:c6:
                    8a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:5F:C8:0E:6B:6B:EB:47:A3:21:F9:1D:6F:71:10:9E:31:A9:A2:2D
            X509v3 Authority Key Identifier:
                keyid:84:1F:36:FC:BF:73:34:EF:F6:B9:1E:80:29:7E:A5:B2:5C:4E:CF:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hB82_L9zNO_2uR6AKX6lslxOz9I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c37c16-0603-4845-b4d4-95ddb0974e4b/1/hB82_L9zNO_2uR6AKX6lslxOz9I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c37c16-0603-4845-b4d4-95ddb0974e4b/1/hB82_L9zNO_2uR6AKX6lslxOz9I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:41:5b:9b:4d:71:8e:6d:a8:3f:5c:33:47:8b:18:f8:8c:79:
         5b:35:5d:88:9e:f1:60:b0:23:79:1e:ca:d6:31:c0:39:5f:08:
         87:9b:8d:ef:cf:fa:f2:5f:af:c3:33:77:c1:98:e4:4a:74:14:
         7f:11:ae:eb:e9:dc:60:93:bf:d4:db:de:da:e7:dd:0e:3a:51:
         d1:6a:78:b7:7b:ae:f2:af:ee:83:24:e4:a5:7b:1b:fc:f5:eb:
         cb:9d:b8:c3:8c:1a:6a:1d:53:1f:83:17:42:04:55:56:51:06:
         de:13:86:f6:95:e5:9f:6c:0b:89:10:8f:c6:9f:3a:f2:78:4c:
         b7:36:55:92:30:ef:5c:15:2a:e7:68:fa:cc:d9:94:66:b9:06:
         3d:a9:61:78:64:47:e6:49:02:b9:79:cc:f9:64:fb:62:23:20:
         e4:72:ba:01:d5:b2:69:0b:ae:f5:99:af:9b:e3:61:9f:24:2e:
         0b:ed:ba:67:67:b3:fe:86:c3:76:8a:72:07:3f:65:82:cb:7b:
         98:7b:19:91:bd:36:4e:b9:47:c2:47:f0:db:fb:d7:25:6a:aa:
         d2:1e:11:83:0b:46:80:6f:a6:d4:98:9d:10:a1:f5:be:ea:55:
         27:7b:5f:1b:2d:82:29:15:76:ae:be:76:75:7d:b4:04:17:84:
         9d:b2:7a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----