Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/3nyCsidsvfEwzK0Ea2X-qywn7Uk.mft
File:                     3nyCsidsvfEwzK0Ea2X-qywn7Uk.mft (raw, json)
Hash identifier:          7eBM4WJUIjWUDL2iPAVjE+KbNEBF31gYMDlkzP6ROw8=
Subject key identifier:   11:EA:67:54:83:B4:5C:41:B3:16:17:18:DD:64:F0:0A:02:D3:B4:AE
Authority key identifier: DE:7C:82:B2:27:6C:BD:F1:30:CC:AD:04:6B:65:FE:AB:2C:27:ED:49
Certificate issuer:       /CN=de7c82b2276cbdf130ccad046b65feab2c27ed49
Certificate serial:       01A0CD10BAA7A4B6767BE3F257CBA42881EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3nyCsidsvfEwzK0Ea2X-qywn7Uk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/3nyCsidsvfEwzK0Ea2X-qywn7Uk.mft
Manifest number:          1A6C
Signing time:             Wed 23 Sep 2026 07:00:20 +0000
Manifest this update:     Wed 23 Sep 2026 07:00:20 +0000
Manifest next update:     Thu 24 Sep 2026 07:00:20 +0000
Files and hashes:         1: 3nyCsidsvfEwzK0Ea2X-qywn7Uk.crl (hash: XdZ0gI08UwuU3IPe8fCYGhwTFp7pI/YZCd2u1UfjFx8=)
                          2: 7x2m-lU6FNS5yqv5lwyGFac_X4Y.roa (hash: y5TlPBhDp/P3UW7VHo9Ke01pzrHP6whRVTrTY5Gd794=)
                          3: Sci8cSSHIwK8cAd-Z2NXFaGyt8A.roa (hash: RPjdlL4lf1ZtlD+1fltmcMb4oq51gUanC3qSsemgh8s=)
                          4: pUQRSDfWqJEoJFfVuZVUVOmlYsk.roa (hash: 9jvQHXY6BnSchwKk/mPiFTBcmMYYo7JbR6ZjMBc/ZDo=)
                          5: uLHH6IqO22bZWZTgO9nKR2wQbJE.roa (hash: laj7eTzK3jKEChy9oG/lzbHF9H3dpCdbB2ksudV3h+Y=)
                          6: wt4arE8aq0j9QUnZdYjCgQA4KE8.roa (hash: Wf+8drhwEyYnWOvWQqOC+IPf2/ohM2ew9EmbUhWiq90=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/3nyCsidsvfEwzK0Ea2X-qywn7Uk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/3nyCsidsvfEwzK0Ea2X-qywn7Uk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3nyCsidsvfEwzK0Ea2X-qywn7Uk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cd:10:ba:a7:a4:b6:76:7b:e3:f2:57:cb:a4:28:81:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de7c82b2276cbdf130ccad046b65feab2c27ed49
        Validity
            Not Before: Sep 23 07:00:20 2026 GMT
            Not After : Sep 24 07:00:20 2026 GMT
        Subject: CN=11ea675483b45c41b3161718dd64f00a02d3b4ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e0:03:f4:31:d8:ad:ed:6d:01:d1:c8:c4:5d:
                    af:86:bd:35:b4:c5:86:53:72:7e:ad:f3:6a:d5:b1:
                    66:df:88:cf:a8:7d:66:88:09:b1:58:8e:a6:5b:19:
                    13:8d:29:01:33:b6:db:1e:9c:0d:22:9c:2e:e8:0d:
                    77:5f:24:23:20:f8:4c:b3:4c:cb:0e:65:31:01:90:
                    23:43:5e:d9:e1:6c:c4:ca:7a:b7:78:34:0e:51:d1:
                    50:97:e5:53:47:75:c3:8f:a5:56:41:16:c0:1e:ba:
                    e9:4c:40:10:02:b6:40:c3:24:8a:48:5e:56:e3:ce:
                    8e:76:d2:01:75:fd:f8:82:ad:c6:30:4b:57:30:7e:
                    6e:dc:03:a6:8b:f8:12:cf:1c:43:c5:0d:a0:65:24:
                    28:25:5e:52:cb:bb:52:35:bb:36:bb:7e:e3:3e:13:
                    ed:27:50:a9:98:60:06:42:85:3a:c3:b0:2f:1e:4d:
                    69:6e:69:64:35:b4:87:51:7e:42:11:24:e3:d4:d6:
                    5c:88:01:09:40:51:a5:0a:ba:e9:ee:e8:e6:d3:cc:
                    38:b1:ac:e2:cf:11:5e:46:71:5f:78:5b:34:ef:bc:
                    cb:cb:6b:34:c0:62:85:45:6d:4d:a4:31:db:55:ee:
                    34:af:cc:f7:88:ec:4e:f7:d8:19:10:97:2d:07:f2:
                    f5:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:EA:67:54:83:B4:5C:41:B3:16:17:18:DD:64:F0:0A:02:D3:B4:AE
            X509v3 Authority Key Identifier:
                keyid:DE:7C:82:B2:27:6C:BD:F1:30:CC:AD:04:6B:65:FE:AB:2C:27:ED:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3nyCsidsvfEwzK0Ea2X-qywn7Uk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/3nyCsidsvfEwzK0Ea2X-qywn7Uk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/3nyCsidsvfEwzK0Ea2X-qywn7Uk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:38:66:68:85:fb:0a:2e:af:9a:dd:07:a0:66:91:8d:fc:e2:
         74:7d:c3:4a:b9:93:91:fe:ff:b0:4b:b0:95:f4:dc:fa:67:f0:
         20:75:9a:c4:74:f5:37:41:8f:e0:4c:1e:7f:3c:a4:12:13:8c:
         52:15:a1:2a:eb:75:03:8d:a9:15:ec:87:a6:47:9d:05:b5:57:
         86:36:3f:64:2b:88:36:fd:a6:9c:4c:24:ac:1a:8e:80:a4:5e:
         a9:ab:66:3b:b1:27:de:8a:65:4b:a6:51:26:f4:6e:bf:35:4e:
         3d:50:04:51:0e:6f:39:30:48:be:b5:f3:2a:63:ae:a7:48:ff:
         d6:44:9e:1c:41:29:1a:ae:be:8f:e2:b3:42:7d:b6:3b:10:bb:
         dc:b8:ff:b4:8f:34:36:51:fa:1c:72:2b:9b:f9:ec:a8:0d:34:
         af:7d:7a:ba:8d:88:d0:70:99:86:90:26:e6:e2:05:ad:e2:5e:
         fd:d7:08:c9:93:0f:a5:f1:e1:77:3b:29:3b:f2:9c:9f:c5:44:
         44:e4:a3:8f:5f:37:6b:49:49:67:21:1b:b6:1b:df:38:80:0f:
         3c:0b:26:3c:bf:8d:ee:2a:f0:a1:be:b5:b1:ad:76:83:25:f9:
         c5:fc:25:13:6e:3a:c0:d7:78:21:3b:15:77:08:b0:2d:d2:36:
         0b:80:dd:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 17:26:02 2026 by rpki-client