Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft
File:                     bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft (raw, json)
Hash identifier:          OhkhZO131cxo1ii0TV6BA5UGCftQ8GT6TrCy3yMRaXU=
Subject key identifier:   9C:58:8D:B2:4F:95:23:18:AE:46:C4:12:A7:52:84:1A:38:FD:5A:86
Authority key identifier: 6F:30:30:A4:B6:7F:95:C2:FE:D9:02:D5:66:57:FA:A2:49:4B:51:29
Certificate issuer:       /CN=6f3030a4b67f95c2fed902d56657faa2494b5129
Certificate serial:       01A0CC3634D2FB9692A9B700222E58F45BA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft
Manifest number:          1AF2
Signing time:             Wed 23 Sep 2026 03:01:39 +0000
Manifest this update:     Wed 23 Sep 2026 03:01:39 +0000
Manifest next update:     Thu 24 Sep 2026 03:01:39 +0000
Files and hashes:         1: TjYcJALyGbmW-x31ry7QsUvdQtQ.roa (hash: knhLPKVdJjwTBCuKiy0BNSL8TQGPgiu2tFYYWRO2204=)
                          2: baEkayAg80jmYDBU-ExaHSLpuaI.roa (hash: nAErtQy9uElHFQjfJS5ckQ4epiwL6hvpsQEYN9BEeqw=)
                          3: bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl (hash: flLY6VAbM44WjEVArnaDbmK0z2ov/065lIy5ByzXEcQ=)
                          4: cGs3UaDvGLQ1Q_TQpZAPaINt4Es.roa (hash: W7uHnT9KoPvCIjHy/wyMQaAb03AUeFyxBB7Do1XvIvI=)
                          5: ebSZBecc7df92SgP59-y12trz8Y.roa (hash: eWLHCXv7jbIrxX4dZcu1pV/1wCL3MzIiRwN/vf2jitQ=)
                          6: hp4kjoTsfGIBSPnL3Ulvv5LRB_A.roa (hash: icmc8vcVjmZSj8X83I0R9LEtCGtKRf3+GDCj0xm9IVc=)
                          7: nmGtGkrhBfqxDaqozTHEU7woU_8.roa (hash: myNlScXFtUNhqDOYxLDED2mEeSRwem2M2mluAw2qbGU=)
                          8: oRALtbh2nuCRd23sDYqfy35X5z0.roa (hash: jC6NP1kM59PVY3etFPE/j9NV0XqouvnOb2E4RPSGrX4=)
                          9: pI2S2lg5Mevtnr1gNuhTMLXlTZk.roa (hash: 5cp4WqQX2Fq4/2gG8NNXNJQnzkTkhV+uz8kgPR8ik8M=)
                          10: pUi-gLSXqZ0JaQPDBRSSYpMiavg.roa (hash: BVbd5i0a2oHy3QrO+gV4ifjJEQxi06QcvV9UBgsyx9E=)
                          11: rWySjgHmxws3lM6jmie75S8CDBw.roa (hash: At0oBHsNt1VyqDJTW3hMzgCfUrv9SJ/hPxisShjHIa0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cc:36:34:d2:fb:96:92:a9:b7:00:22:2e:58:f4:5b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f3030a4b67f95c2fed902d56657faa2494b5129
        Validity
            Not Before: Sep 23 03:01:39 2026 GMT
            Not After : Sep 24 03:01:39 2026 GMT
        Subject: CN=9c588db24f952318ae46c412a752841a38fd5a86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:37:a4:13:4f:25:e9:48:c5:e7:ac:41:40:f9:
                    b7:c4:df:cf:9a:5d:82:f5:6b:a4:2c:8e:26:b1:a0:
                    6f:55:f6:ad:83:30:ae:41:72:9f:1f:85:8a:65:6f:
                    d1:f8:8a:83:bb:a3:e0:75:55:f4:09:4c:b1:9b:9a:
                    17:a5:4c:32:42:c5:0f:a9:4d:79:81:d3:63:f4:0c:
                    fd:51:aa:dd:3c:49:eb:c9:cf:54:f1:81:30:73:fb:
                    b5:5f:be:10:32:ae:b8:c1:53:b1:33:53:a4:f3:da:
                    7e:a4:9b:ff:e5:3e:5f:27:8d:c2:e7:38:35:82:ef:
                    3f:91:11:ff:e0:09:53:0f:b1:02:c6:30:eb:5e:46:
                    18:d3:3f:9a:3c:c8:cb:6e:a6:5c:e0:92:3d:c8:4b:
                    49:56:f9:4b:1e:fc:1d:71:e8:71:1b:b7:44:ff:a2:
                    d8:39:46:c3:04:b9:c2:e7:f6:ed:98:c5:cd:8f:1f:
                    2f:73:af:35:2e:c3:8c:8e:1a:9e:d6:b9:d3:f8:19:
                    23:8b:79:86:38:42:97:b6:18:fc:31:eb:65:a3:00:
                    d1:8b:a0:e9:fd:06:2b:8e:b4:b7:a1:89:88:ee:bb:
                    cb:5a:d7:2d:94:ad:ab:9c:cb:cb:5b:2c:8b:d2:84:
                    3f:40:1a:59:49:57:66:db:77:b1:ce:c5:cb:75:c1:
                    aa:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:58:8D:B2:4F:95:23:18:AE:46:C4:12:A7:52:84:1A:38:FD:5A:86
            X509v3 Authority Key Identifier:
                keyid:6F:30:30:A4:B6:7F:95:C2:FE:D9:02:D5:66:57:FA:A2:49:4B:51:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:14:f6:f1:65:15:be:61:a0:bd:ea:6e:f9:51:65:4b:08:e5:
         34:04:50:57:af:ec:1d:ee:db:2e:e9:25:32:2f:cc:cb:10:02:
         5b:85:21:0e:41:3c:08:7f:44:14:14:bb:bc:e0:53:ba:f3:8c:
         d1:0b:f3:0a:d9:58:db:7c:bc:98:06:b5:69:78:76:b7:85:48:
         c2:ca:df:6d:a5:ef:aa:fa:ee:d7:9a:52:86:e7:4d:dd:27:25:
         2b:c2:b4:c5:7e:b0:4a:d8:74:f3:b7:6c:2b:43:07:09:f8:11:
         41:4d:c1:b7:4e:76:66:b8:25:94:c2:1e:ab:65:e5:67:c8:f5:
         a4:a7:1f:dc:2c:72:98:57:18:7a:7b:ec:59:02:6a:85:1a:e7:
         c6:0b:dd:24:aa:3b:4c:88:a9:15:1b:7e:9a:fb:7e:ac:c9:00:
         f8:42:35:64:bb:fb:31:1e:44:6b:bf:e3:56:e1:3b:17:24:95:
         5b:b2:9a:0e:c8:ad:47:c5:d3:09:95:0c:c0:a8:a4:0e:14:17:
         22:99:a5:ec:d4:87:cc:40:36:fe:d4:66:6c:cd:2b:49:80:48:
         89:3e:22:2e:78:d0:80:bb:9c:9b:01:65:86:51:bf:1b:01:4e:
         8f:f9:7f:5c:74:30:ea:f4:24:24:d0:aa:8d:97:da:ef:99:a5:
         15:4e:f1:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:45:54 2026 by rpki-client