Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.mft
File:                     6LPu0cespjbWJFhSuALg5zdU32M.mft (raw, json)
Hash identifier:          LFIINlIOE9he4RJjCwJ9PfTyOASwj+GIV2h74iTtApc=
Subject key identifier:   19:FE:FF:A2:C9:7A:41:05:99:0D:63:BD:60:80:60:A4:11:6D:A7:96
Authority key identifier: E8:B3:EE:D1:C7:AC:A6:36:D6:24:58:52:B8:02:E0:E7:37:54:DF:63
Certificate issuer:       /CN=e8b3eed1c7aca636d6245852b802e0e73754df63
Certificate serial:       01A0CD483AE18D563B7B1AADD8C0E913BFEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.mft
Manifest number:          1AB3
Signing time:             Wed 23 Sep 2026 08:00:57 +0000
Manifest this update:     Wed 23 Sep 2026 08:00:57 +0000
Manifest next update:     Thu 24 Sep 2026 08:00:57 +0000
Files and hashes:         1: 5aXtBFrEaFxc7NvgU5mY7H-wj0k.roa (hash: gUBkEzyP8iaytHOreWTExUHiIR5ZQICj5DGtFxRPQDE=)
                          2: 5aZWyJBLIHcU6RZHhhqPqFmCtrk.roa (hash: 13nxKMdVKVjzMHdAUhxbH/qaDgQty47l+n7Zxmnvz20=)
                          3: 6LPu0cespjbWJFhSuALg5zdU32M.crl (hash: /q+sjhRHYJo6RSCkzwGPHlBZV6ZoiiJzdwekuFiaMhA=)
                          4: AhkbSOCLS4yDGPwazoLZAIwOBYI.roa (hash: Rph2+pIbfLaRmdGdlFiwGaZxjiSbSPI579nxiE9oIDc=)
                          5: DuYZ-H2sVttInwcrjvBsEkIUdds.roa (hash: Lhr2x7vqwrufK/M/sxNyImyNWEig+QhwP0mdSLVXqow=)
                          6: gErETpLkL1Wulh1Sd26eyD56QTQ.roa (hash: 8oSrkQlx9IB4UN1/Zqqdf0UUPBBcBw5//CQWtwVqrR8=)
                          7: kRR25rBX48JUtOH-FpsShSIWmXY.roa (hash: 8cCQUGZZCH+0u7+J+1+9zU6qHLN1KaTdcE26nn3foFo=)
                          8: tLKsS9rHMqeh-IFPdFpCYdg8ROM.roa (hash: EG0Tu5j6vFe/p0ZOO6/JOj61PT4A02/SojBmqacBkr0=)
                          9: ujSx52BQjLKBERcbBmmYd5-UdCA.roa (hash: LvlXIEXYgxOLjVoGgZsOJJNe14GMXjgwHtX/Mdlm0CY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 08:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cd:48:3a:e1:8d:56:3b:7b:1a:ad:d8:c0:e9:13:bf:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8b3eed1c7aca636d6245852b802e0e73754df63
        Validity
            Not Before: Sep 23 08:00:57 2026 GMT
            Not After : Sep 24 08:00:57 2026 GMT
        Subject: CN=19feffa2c97a4105990d63bd608060a4116da796
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d5:ca:7a:db:4e:7d:c3:18:90:9d:bf:3b:79:
                    7c:ea:fd:8b:19:e0:bd:4d:08:be:f7:f7:6d:f0:58:
                    71:15:bb:eb:cc:91:e6:9c:85:2b:29:bd:84:ae:cf:
                    25:da:a8:a3:de:e8:4f:c1:8d:cd:08:57:d8:95:8e:
                    ce:6b:17:d6:52:2f:5a:cf:63:58:8e:c9:8f:3b:9d:
                    74:0f:94:15:b7:d9:66:72:a0:c6:5d:02:17:d6:90:
                    b0:fc:81:39:52:4d:5e:eb:79:cd:b0:63:a2:77:c7:
                    7c:b9:21:15:a4:1d:8e:84:17:0c:20:ed:63:d1:73:
                    57:9b:05:be:65:d9:eb:94:8a:52:75:07:38:bf:c0:
                    8e:c2:97:67:4a:ae:36:28:90:0d:5c:22:c8:29:d7:
                    69:c0:76:b0:f2:97:96:76:8b:cb:98:5b:c8:73:7f:
                    ae:c5:8f:e7:89:ec:b6:6b:93:10:7a:ec:1a:ac:e4:
                    ef:10:96:91:0a:10:f1:a5:92:d7:6c:c3:3a:7b:29:
                    b5:0c:e9:dc:b8:f5:ca:d1:2a:86:23:bb:d0:b8:9c:
                    32:5e:5f:59:c0:36:90:31:73:ff:d2:a5:09:95:d4:
                    30:57:d3:62:67:49:7d:73:03:64:a1:47:80:8e:be:
                    fc:c0:65:e0:e1:6c:a3:8d:b9:5b:41:2a:48:1d:d4:
                    7b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:FE:FF:A2:C9:7A:41:05:99:0D:63:BD:60:80:60:A4:11:6D:A7:96
            X509v3 Authority Key Identifier:
                keyid:E8:B3:EE:D1:C7:AC:A6:36:D6:24:58:52:B8:02:E0:E7:37:54:DF:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:7d:9d:d7:7e:82:ba:9f:b8:80:15:f4:ae:2f:80:95:11:40:
         db:10:b2:04:28:1e:f1:b7:a6:1c:f9:d0:3b:11:71:23:27:33:
         ab:5e:5b:2a:54:ab:b2:3e:cf:a8:f8:27:e0:85:8d:8e:66:fd:
         dd:fa:88:7a:8d:e9:b3:2e:92:a1:43:c5:4b:56:ae:e8:92:13:
         c6:a8:e0:c6:7a:4a:91:f8:e9:9d:fc:b5:18:ce:d7:15:b5:f4:
         87:3b:85:87:38:54:db:5b:3b:4d:82:14:4a:90:ad:f7:9e:37:
         45:f0:90:69:25:0e:78:a9:e7:a5:76:41:2c:18:f0:09:8f:0f:
         bb:e1:76:b8:8b:4c:a5:0b:9f:fd:85:c6:bf:7a:a7:b0:1a:d7:
         d6:27:f3:7e:85:62:91:ec:97:fe:c0:a7:b6:fd:9e:12:ff:c1:
         db:8a:7a:e5:6c:9b:11:bc:8c:2f:6e:35:68:ff:4b:3e:34:90:
         33:29:5f:6d:7e:bc:72:da:23:3f:05:31:38:99:66:ba:2b:4d:
         25:0c:bd:30:dc:db:eb:4b:9a:a9:08:e1:d3:d7:2d:f1:ee:68:
         29:ee:32:01:ac:d9:d2:43:45:71:15:bc:73:6f:da:74:41:55:
         ea:0b:33:53:85:f5:92:81:c3:cd:c8:98:35:4d:57:13:81:ca:
         0d:2e:8a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:05:27 2026 by rpki-client