Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft
File:                     2x1uukY7dWSr-uk4tG7UcYfeDsA.mft (raw, json)
Hash identifier:          jbBptq4wzLpAiAZOuGQ0dISVtZjUw2+rJgEdf46NzdI=
Subject key identifier:   99:84:D6:71:F6:F6:53:F0:94:A3:3D:DD:2D:7B:17:47:AC:22:3D:D4
Authority key identifier: DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0
Certificate issuer:       /CN=db1d6eba463b7564abfae938b46ed47187de0ec0
Certificate serial:       01A0D3EF1BEFA8C17B56282F0B2448EB56FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft
Manifest number:          0DA0
Signing time:             Thu 24 Sep 2026 15:00:57 +0000
Manifest this update:     Thu 24 Sep 2026 15:00:57 +0000
Manifest next update:     Fri 25 Sep 2026 15:00:57 +0000
Files and hashes:         1: 2x1uukY7dWSr-uk4tG7UcYfeDsA.crl (hash: 0BatUyVxPBuT8/9f5N2Tl+jXJ7yO+szjuXthfgD4jdI=)
                          2: 3oec_TyMXwngpMvuUxwQnKRoElI.roa (hash: TFcbDBit8LDG31OcoB8NyufVnMw0bC4YlIBYjbX5HV4=)
                          3: 834MdZoIilVHj8ITDHKmWhc4LI8.roa (hash: 0joC1jVmieeRq9IYfq18LPrQeRhpWEC9AchkePVGZrA=)
                          4: Po1iPTbiF1HxWAxAdi5tfajzMlo.roa (hash: 68qLDff/0Yfto5RJ5VfAe9GhmhGb2Dhs3nR+qh/T7x4=)
                          5: hEnie4lAKWMfLCKJsCCZKZxiu1g.roa (hash: LVdc2gIDM4zgTqHBAYOGjuQI7H2q3tdcKwkXIssuGwo=)
                          6: nmUEueZ47VwZ2p45WO9IB9LwnHc.roa (hash: 7G7DGRCra0g7DJS2A+f3DeEW4sjpq81WtiS6g/X3UCM=)
                          7: sFonxK-Y58VpBEBeRzqHkdF8ojA.roa (hash: 3844hgTnl1FX+Rx774ovA6z2yPS2q62u+c8Vt6GI/5E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 14:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d3:ef:1b:ef:a8:c1:7b:56:28:2f:0b:24:48:eb:56:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db1d6eba463b7564abfae938b46ed47187de0ec0
        Validity
            Not Before: Sep 24 15:00:57 2026 GMT
            Not After : Sep 25 15:00:57 2026 GMT
        Subject: CN=9984d671f6f653f094a33ddd2d7b1747ac223dd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a9:87:84:be:ea:29:a3:2d:6a:7d:86:13:a3:
                    b5:6a:03:ef:48:cc:9d:63:f5:af:69:95:21:35:e8:
                    d2:62:c7:cc:9a:a4:ed:17:ca:a4:41:c2:82:f7:2f:
                    6c:d8:88:39:03:a9:de:2a:c2:ee:1c:c8:00:02:26:
                    5d:9e:90:24:49:a1:73:07:5f:0f:72:06:d5:3f:1c:
                    e4:b1:a5:c4:80:b4:e6:12:0a:76:57:4d:5c:49:83:
                    01:d7:be:45:50:36:8e:65:59:dc:8d:49:41:0e:3a:
                    ee:8e:60:e8:6c:8c:89:7d:ae:3e:b3:67:1d:d4:ae:
                    2b:1f:5d:c6:ee:c4:bc:4d:0b:fa:2c:84:42:d3:61:
                    7b:96:eb:07:77:b9:0e:ba:27:ac:9e:99:07:c3:92:
                    a7:6c:2b:00:e2:af:1b:75:d8:d4:8b:19:46:78:fe:
                    e3:27:b7:f9:72:b1:3f:6e:76:26:ea:93:e2:1e:08:
                    7d:fc:26:bb:2d:60:7f:f9:fb:1a:c1:9d:45:07:ec:
                    77:e7:80:b3:9e:d5:24:19:c1:d3:bb:e6:18:77:07:
                    7f:8c:3c:24:3b:55:bc:c0:1b:cf:c0:67:d6:9b:35:
                    79:b2:32:e4:4a:2e:4b:80:02:24:ba:9c:3c:0b:da:
                    68:2a:40:5d:b0:14:70:e3:9f:4a:dc:f2:7f:ee:2e:
                    12:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:84:D6:71:F6:F6:53:F0:94:A3:3D:DD:2D:7B:17:47:AC:22:3D:D4
            X509v3 Authority Key Identifier:
                keyid:DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:83:8f:60:2b:2e:21:9f:0f:4b:24:c7:e6:22:84:a9:27:03:
         2f:fd:b0:95:39:5e:22:39:2f:74:1f:57:ce:5c:82:cf:a2:f0:
         ec:67:c6:0a:c3:3e:76:a5:cf:75:39:27:9b:5d:c8:37:d8:10:
         9c:e3:00:90:48:a6:8f:95:68:e3:7a:f5:87:84:f8:bd:1c:7e:
         08:64:f6:6f:a8:20:25:80:9d:38:e9:a4:c2:91:50:b3:f8:50:
         59:35:ca:1e:4a:9f:72:53:32:59:5f:94:84:99:69:03:d5:2f:
         01:66:c9:df:23:98:29:41:b8:d2:8e:87:58:a7:00:d5:29:ae:
         c4:99:a2:7e:fd:55:13:be:20:e9:36:81:66:e7:44:72:4b:d9:
         54:a6:fa:2c:74:5c:90:bf:99:5c:20:82:09:0f:0c:a4:b0:72:
         ae:5b:6f:77:cf:65:6d:f5:c6:25:f4:2e:51:3c:07:25:04:7b:
         7b:b5:e1:3a:8f:84:df:56:16:dd:ea:8b:6f:07:34:ed:0e:02:
         9a:c0:28:8f:06:19:5e:b5:7b:83:04:b8:94:c1:03:ee:c0:e4:
         c4:e3:37:d0:38:e4:38:1d:e1:c7:a3:d7:ed:02:8d:9b:a0:53:
         51:65:7d:d8:db:2b:5e:73:e4:03:75:f3:8f:37:1e:92:0c:bf:
         26:8c:b2:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:33:00 2026 by rpki-client