Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/20f23d-1fc9-471a-82bd-fe8af9a6efd2/1/a30B3ePCq3-ntYjsrU0c0xOXvYQ.mft
File:                     a30B3ePCq3-ntYjsrU0c0xOXvYQ.mft (raw, json)
Hash identifier:          HREvAgByB4DKSZyFhM++f1Nbud8Y45iHtxzVOuxbX34=
Subject key identifier:   A1:60:B6:6F:76:71:F3:99:A6:94:07:34:54:4D:0F:69:4A:E3:22:F0
Authority key identifier: 6B:7D:01:DD:E3:C2:AB:7F:A7:B5:88:EC:AD:4D:1C:D3:13:97:BD:84
Certificate issuer:       /CN=6b7d01dde3c2ab7fa7b588ecad4d1cd31397bd84
Certificate serial:       01A0DA96BC4D2FC6CD6CEFBFACC8E72C90D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a30B3ePCq3-ntYjsrU0c0xOXvYQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/20f23d-1fc9-471a-82bd-fe8af9a6efd2/1/a30B3ePCq3-ntYjsrU0c0xOXvYQ.mft
Manifest number:          02EF
Signing time:             Fri 25 Sep 2026 22:01:46 +0000
Manifest this update:     Fri 25 Sep 2026 22:01:46 +0000
Manifest next update:     Sat 26 Sep 2026 22:01:46 +0000
Files and hashes:         1: T__G1Ca-eMsMLPhR2fqq6jZzabE.roa (hash: /YNdonFxgiuSJ7bSBLLw5KHpjMZ1mWh/QAHnXBlZOVY=)
                          2: a30B3ePCq3-ntYjsrU0c0xOXvYQ.crl (hash: 1rAHfgU+cC5th7+d8jQJDTtOVhMrRjGx6i0+O7saB5k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/20f23d-1fc9-471a-82bd-fe8af9a6efd2/1/a30B3ePCq3-ntYjsrU0c0xOXvYQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/20f23d-1fc9-471a-82bd-fe8af9a6efd2/1/a30B3ePCq3-ntYjsrU0c0xOXvYQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a30B3ePCq3-ntYjsrU0c0xOXvYQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 22:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:da:96:bc:4d:2f:c6:cd:6c:ef:bf:ac:c8:e7:2c:90:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b7d01dde3c2ab7fa7b588ecad4d1cd31397bd84
        Validity
            Not Before: Sep 25 22:01:46 2026 GMT
            Not After : Sep 26 22:01:46 2026 GMT
        Subject: CN=a160b66f7671f399a6940734544d0f694ae322f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d8:2c:41:2d:17:1f:ad:51:31:ba:ab:c8:d4:
                    cf:77:53:b3:99:6a:d2:6c:43:a2:9b:5e:d2:cb:39:
                    86:d1:6a:83:b8:bb:53:e4:e1:aa:6f:4c:81:6f:a7:
                    bd:f6:7a:af:53:71:46:99:15:f8:cd:09:4c:21:9e:
                    15:3d:e1:3c:9a:5f:8c:8c:d5:7b:bb:bc:b8:99:9e:
                    72:67:f5:94:76:d5:46:79:fc:c1:81:50:42:cb:3f:
                    ef:86:cd:c0:6c:07:85:9a:12:53:6c:b8:88:ee:4e:
                    a8:5e:e6:4a:b7:a9:a3:6d:d0:95:27:f3:7c:a9:5e:
                    93:ea:b2:1a:1a:7a:ae:3b:3f:e4:c6:98:fa:cb:40:
                    c5:3f:8c:26:8b:62:0d:13:34:d2:fb:bf:83:db:2a:
                    cd:52:7c:63:38:4a:55:30:1d:48:7d:93:1b:a8:b2:
                    99:11:32:a5:be:ef:2a:9c:37:b6:17:a3:bb:ff:d1:
                    f1:04:d4:94:eb:34:09:d4:ca:4b:9d:11:ec:f6:7d:
                    bc:b9:c6:9b:12:b7:9f:4d:64:f5:ee:5d:59:03:59:
                    df:fd:a4:7e:0e:10:bd:0d:af:24:41:ca:60:b1:8a:
                    9b:ae:9e:b5:d9:be:0d:03:9f:05:fb:da:a7:3a:4b:
                    f3:6a:19:fd:68:dd:44:eb:aa:c4:9a:1d:f3:3d:8a:
                    07:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:60:B6:6F:76:71:F3:99:A6:94:07:34:54:4D:0F:69:4A:E3:22:F0
            X509v3 Authority Key Identifier:
                keyid:6B:7D:01:DD:E3:C2:AB:7F:A7:B5:88:EC:AD:4D:1C:D3:13:97:BD:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a30B3ePCq3-ntYjsrU0c0xOXvYQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/20f23d-1fc9-471a-82bd-fe8af9a6efd2/1/a30B3ePCq3-ntYjsrU0c0xOXvYQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/20f23d-1fc9-471a-82bd-fe8af9a6efd2/1/a30B3ePCq3-ntYjsrU0c0xOXvYQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:be:6d:bf:60:a2:3b:7e:ce:bb:e2:f3:9f:1a:b2:a3:03:46:
         eb:b8:16:7e:67:2f:d5:ee:bb:b2:f5:e6:64:6d:8a:3a:a0:e8:
         8d:41:0c:a3:30:74:d2:0a:34:42:ee:4e:3a:4a:6f:20:2c:55:
         be:37:d0:7d:49:d6:ed:0f:c6:cb:ba:98:a1:5d:3f:56:10:78:
         50:fb:a1:d4:e1:32:6f:d9:50:2a:f5:d0:60:b7:d8:95:76:77:
         0b:82:98:0f:c9:e4:00:89:95:86:84:eb:24:11:93:6c:e0:f1:
         17:a0:49:cc:ee:9f:86:a3:0d:00:55:5a:e3:d6:48:83:ff:17:
         67:5e:ab:d2:fa:7b:8f:cf:60:35:84:00:ad:19:24:6d:fe:74:
         e8:af:2d:d4:fc:e7:4c:59:8f:1c:f1:a7:b9:61:cd:d1:37:b4:
         2c:90:15:90:d8:fd:96:6b:cb:a5:9d:ff:96:9b:c0:2a:86:38:
         69:98:ce:d9:1b:35:9d:7d:3d:47:45:6e:1a:0c:b8:cd:9a:16:
         96:e0:48:40:0f:2c:3e:c0:ef:23:05:cd:7e:09:0c:5a:5b:90:
         5d:b1:f9:aa:57:0c:2d:3c:57:89:8c:89:73:4d:18:b9:76:6c:
         e2:1c:9f:b6:e6:eb:c7:40:dc:ed:c3:ce:c6:dc:22:a0:49:40:
         28:be:88:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:56:22 2026 by rpki-client