Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.mft
File:                     B_65rg-oknBF-DQjdDxKc6J6dKc.mft (raw, json)
Hash identifier:          LyizuVBVBPwhV0B3TgrA6YP1GfIsWesBv4d15J20UDw=
Subject key identifier:   84:7A:9C:24:3D:16:15:A0:EC:E0:FA:C2:CA:FE:65:89:72:0B:DE:24
Authority key identifier: 07:FE:B9:AE:0F:A8:92:70:45:F8:34:23:74:3C:4A:73:A2:7A:74:A7
Certificate issuer:       /CN=07feb9ae0fa8927045f83423743c4a73a27a74a7
Certificate serial:       01A0D79673B56EE4AF2A9F987BB254BCA6C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B_65rg-oknBF-DQjdDxKc6J6dKc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.mft
Manifest number:          1A72
Signing time:             Fri 25 Sep 2026 08:02:36 +0000
Manifest this update:     Fri 25 Sep 2026 08:02:36 +0000
Manifest next update:     Sat 26 Sep 2026 08:02:36 +0000
Files and hashes:         1: ABBwkEzotHssFvLAUqOqZl36BVo.roa (hash: dEDcIYfYDWYKiT/mjWB6IYlv7v5dgtX5b4iPv92zXw4=)
                          2: B_65rg-oknBF-DQjdDxKc6J6dKc.crl (hash: aHXUOt4J6uRg19bMJZlNC0/iUcoRVuzvHT2SC6tqs4s=)
                          3: JxdVQlPabf5FpimKARBZDSKiNxU.roa (hash: iaX91Mhj2IG2/tYDP0MoHlwqtJyUmq2/acODPla0N8E=)
                          4: KtSkCkgQPN_jCjx_NpSrj0Cqf2k.roa (hash: Z7pmLe6ijXP6+y2mebYVp1P1jXZISWrSpz5NJdmd0Uo=)
                          5: dtKfjS2Cx153-9Bxv94dxO25icU.roa (hash: e1P0tOI8yTdnj97qKiJfMB6m74LROCBqW62mLe1obDI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B_65rg-oknBF-DQjdDxKc6J6dKc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 08:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d7:96:73:b5:6e:e4:af:2a:9f:98:7b:b2:54:bc:a6:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07feb9ae0fa8927045f83423743c4a73a27a74a7
        Validity
            Not Before: Sep 25 08:02:36 2026 GMT
            Not After : Sep 26 08:02:36 2026 GMT
        Subject: CN=847a9c243d1615a0ece0fac2cafe6589720bde24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:db:99:14:33:94:d9:43:f1:64:20:38:8c:31:
                    01:c0:cb:23:78:9d:41:46:9b:7f:49:0a:57:8b:7a:
                    2e:2b:d0:a3:23:32:6a:77:16:06:9b:4c:8a:da:5e:
                    ec:b2:47:db:5f:f3:97:20:6f:08:5a:c9:41:7c:e8:
                    82:46:72:6e:0b:83:2d:66:27:5e:b8:b5:98:2e:fd:
                    db:5d:27:1a:d7:f4:52:3e:99:7c:ca:03:32:56:d5:
                    22:08:c3:88:95:68:f2:83:6d:ba:68:b3:21:88:15:
                    6b:65:de:a7:77:29:68:14:f8:c2:5c:48:1d:05:96:
                    20:0a:16:8d:5d:ef:4a:01:2a:83:d9:93:3b:ca:3c:
                    e6:63:59:cb:71:46:f3:b4:ba:04:04:d4:07:7d:3b:
                    05:69:67:d5:c6:d1:9e:68:2a:6d:6d:85:81:4d:fd:
                    04:4f:29:69:00:6c:34:a0:25:c1:97:48:2b:0e:20:
                    03:db:ba:76:df:ba:de:1a:39:08:47:49:ef:a0:02:
                    a6:75:99:5a:e0:55:89:fd:5f:2d:b7:71:84:e1:23:
                    37:7a:16:fd:f6:b1:32:13:ac:1e:98:98:68:00:a5:
                    cf:38:14:70:6c:d8:17:a3:f6:e9:e8:6b:3d:9f:9c:
                    a7:31:da:93:19:3d:13:be:c4:fd:b5:d8:55:f4:cd:
                    0a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:7A:9C:24:3D:16:15:A0:EC:E0:FA:C2:CA:FE:65:89:72:0B:DE:24
            X509v3 Authority Key Identifier:
                keyid:07:FE:B9:AE:0F:A8:92:70:45:F8:34:23:74:3C:4A:73:A2:7A:74:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_65rg-oknBF-DQjdDxKc6J6dKc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:59:7b:70:7c:47:4c:42:2c:15:58:82:ba:6d:0f:f9:03:ef:
         2d:45:6a:b3:e1:87:15:1d:eb:a8:48:50:0c:f1:29:09:b1:a2:
         33:ee:0d:05:7e:9b:1a:05:9b:a8:c7:43:63:df:04:c2:b3:e3:
         35:3d:68:f7:c8:fa:ad:6a:1d:90:18:97:f8:05:3c:7c:0d:87:
         5e:fe:3d:cf:05:ec:c5:f5:a4:00:26:fd:ca:5f:f8:4a:24:ef:
         61:2c:39:03:a5:b7:01:1d:6e:ec:7b:db:6a:b7:d1:61:fc:94:
         2a:98:40:60:29:30:ce:b2:ae:78:b3:60:4b:33:69:67:6d:82:
         dd:65:3c:e1:60:7f:3d:9b:e5:2a:d8:72:00:08:5f:eb:30:32:
         87:5c:99:8b:09:f5:b0:93:6d:f6:95:ae:43:e8:e2:77:5f:2d:
         1d:f9:91:6e:a6:89:2b:b9:5b:f9:87:8c:05:94:ad:f4:b1:ce:
         7d:44:39:8a:57:0b:3f:ee:1f:ba:e0:cb:f7:17:c5:e2:31:2e:
         e5:20:ea:2b:89:03:ff:bf:e7:92:74:58:6f:40:cb:7b:56:80:
         d1:6f:6f:bb:e2:9a:a0:b5:03:18:26:c9:91:c3:8b:6c:8f:ea:
         18:c7:d0:ba:f4:93:16:4f:66:84:fb:12:f1:7a:e9:a1:56:ad:
         19:9a:cf:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:20:24 2026 by rpki-client