Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft
File:                     b8UNDUIGe3arGi6OUz_4SbZdVvU.mft (raw, json)
Hash identifier:          0Wq7WTpwwEM2Dy74wf0krZgHBI6ZLr6byIjWq5qri68=
Subject key identifier:   DA:CD:4B:47:79:88:5E:2F:FE:6C:08:73:E2:63:DB:20:15:52:7D:F8
Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
Certificate issuer:       /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Certificate serial:       01A0D0EDE0CF6EB86C41EBE98AFCB0E6151C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft
Manifest number:          1AB3
Signing time:             Thu 24 Sep 2026 01:00:45 +0000
Manifest this update:     Thu 24 Sep 2026 01:00:45 +0000
Manifest next update:     Fri 25 Sep 2026 01:00:45 +0000
Files and hashes:         1: Dv8Xj573URhelnbmcJLlhmPDGD4.roa (hash: qlnvjr9BaLF0/kBmFp/g12eWnCcKOHwXVrBxaeJlhqI=)
                          2: GokOnLgcwEKBfp_sk2MIuuQ-_TY.roa (hash: zQRRa9NS4gIwYEiBt9K5iRhHmWoyu+BxEByrxS3tpEY=)
                          3: S-2u1gBJMJZerxMcphe152Mw_t4.roa (hash: zY+Kfzo1VDj/zBVAcDyYT3GL5KZN/lStcMsxxkbN2e8=)
                          4: V66mUyeO5X_O6JGUAL_LInwhpW0.roa (hash: WTpJ/+xyEsdWBV9e8DfdpDEOxLLOMxmk9zRPy8of4Nw=)
                          5: WAFGlC69-0ob11MbBQG2gcGKWnk.roa (hash: fs3/LEyDskuqCQv30OKbL6do/sufFAX29xlb3wrGuaA=)
                          6: _H3J1Q0wf1ue0eD6RUkc1ex1fZg.roa (hash: 8E6CjmtD48iYAKj5FVW1NYd7xgq0h72auMlNwc7qpB4=)
                          7: b4JEVE3QPzkNygQLlI0iBGroxU0.roa (hash: GbTRuy5jkEUqjUNqE8oi/B2zDg7qLzkinV68BhIMhV0=)
                          8: b8UNDUIGe3arGi6OUz_4SbZdVvU.crl (hash: Be3SlUNFhZr6CFs8K3MYcWdCzvxfshE/RP/1u5qRQMk=)
                          9: fX3KuGbBaSgozBC8VJSKif-SJWQ.roa (hash: YvJvbJ8D5DpHd4D9ZPHBQEllNbujWBnvbGsXVYfxrbQ=)
                          10: gBo-R92ImstxPprBT8xyf5PF5ro.roa (hash: ehOcdXMKXxl7qAMxAdqS/EYhNRFgKFvDwqQoTowHqqE=)
                          11: hS05mveN2aMKs32vgPN62OxZyU4.roa (hash: ppIsNge7NuGGbn+pU/a2PkG/ZsHka3x0Ag4o3/gijLY=)
                          12: iLauOm2qK9XnqY9ztUU9moKfnvg.roa (hash: MD/6ZVmSej56cLCXyFeTYzesox6xFljqFiihcyr2blE=)
                          13: mOIM-oZXOhPXcspDNu9QRUce9wI.roa (hash: TX23tkqgD+PXYsu3SvaWNxNHNfg0oQahFUpEkkPiqP0=)
                          14: maoDBiTq7OlnZavgCrqS2PNJzVg.roa (hash: 5lnUQuuOEn9crnGLrQz+sL2Asrk/3K0SqWLzxdWxHuc=)
                          15: rKU1mC3UrxRCEsXb-l25oaEBhJw.roa (hash: 4jepadulIWtRtacZBukRLsOXuyzRr5YeactatRKpnlE=)
                          16: wCrdreEenBFJr40kfhAiXxXP4VE.roa (hash: 1w9FYdnTnijOy22xqaq4vC9r9i/Zq/2AJnQG0P3/L0g=)
                          17: yX_yhv_jUUfVVPMPnlpzUI5cFxs.roa (hash: bg6ibEfMDVCBPduOQFB/gGWqEjD+qw8SCbixEdu1S7Q=)
                          18: zyjvREkWFF6X7pbwt-H3M-ZqZks.roa (hash: HtAgtb461giJt36H40FvVS9Xbx1kevgnUEyHwD9fYBI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 18:27:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:ed:e0:cf:6e:b8:6c:41:eb:e9:8a:fc:b0:e6:15:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
        Validity
            Not Before: Sep 24 01:00:45 2026 GMT
            Not After : Sep 25 01:00:45 2026 GMT
        Subject: CN=dacd4b4779885e2ffe6c0873e263db2015527df8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:50:8c:b0:e1:ac:6e:89:ab:57:95:f7:84:27:
                    45:e8:38:26:2c:0f:b7:10:dc:38:35:bf:38:2f:90:
                    26:e3:a0:e7:ff:b6:f0:c4:85:25:5d:9e:95:82:19:
                    4c:a6:a3:07:a6:b8:ab:4f:7b:00:2d:03:96:7a:1c:
                    f5:0b:c6:39:10:ec:19:7a:11:44:8d:ad:1d:ad:07:
                    a5:fe:32:9a:4b:35:1c:cb:41:da:c3:70:d8:14:c5:
                    bf:73:ff:98:12:01:31:eb:35:a1:da:7b:2f:c3:ef:
                    3a:24:db:34:c3:15:0a:2a:63:66:2c:52:5c:86:18:
                    da:73:2e:28:7b:14:e5:b5:ed:c3:81:1d:d2:ef:90:
                    24:56:9a:dc:7f:c2:8e:58:90:14:22:5b:d8:6c:b4:
                    aa:77:b0:40:7e:3f:c3:1c:83:21:b4:65:e9:a9:bd:
                    4d:cd:f1:4e:ba:0a:a0:3e:98:d7:d1:6b:de:11:ea:
                    23:92:a0:ae:2a:00:d2:c1:c9:9c:fa:84:e4:2b:4f:
                    09:5e:ad:9d:07:95:5f:62:27:69:3a:1b:d5:3b:f3:
                    1e:46:40:eb:1a:23:42:e8:e1:da:8f:9d:ec:a7:c0:
                    c7:51:68:a0:5e:3e:f5:0a:f3:84:de:b7:34:a4:ca:
                    5a:70:d7:08:79:92:b8:9c:40:3c:ec:c1:c8:2b:ff:
                    0c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:CD:4B:47:79:88:5E:2F:FE:6C:08:73:E2:63:DB:20:15:52:7D:F8
            X509v3 Authority Key Identifier:
                keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:a3:e4:4d:b5:d3:c3:b8:ae:b6:cf:84:de:cc:4d:5d:81:1b:
         a8:8c:c1:29:f9:05:04:96:a5:08:74:2b:63:dd:ce:a6:85:6e:
         06:81:c8:8d:ed:82:46:6c:49:0f:de:7c:71:4f:5a:ef:b1:26:
         f5:81:74:11:75:d5:9f:93:ae:20:e4:98:d8:da:3b:78:25:d0:
         13:7c:53:4a:70:f5:0b:27:ab:4a:5d:02:ab:19:7d:3c:6b:08:
         e4:84:82:a7:04:a9:d1:0b:f8:a3:df:b6:a7:48:a3:4c:9a:d1:
         de:e6:73:25:04:75:a4:82:24:1b:55:e0:6f:db:f6:f3:8e:85:
         7f:94:d5:60:cd:f2:ff:b5:56:77:8f:d8:e5:af:26:99:d3:23:
         72:b5:0e:8f:6e:ce:26:04:3e:25:39:6b:ec:5d:0b:5e:91:cd:
         73:41:95:36:d0:9c:e1:ef:81:91:c7:13:3e:a2:45:22:70:8b:
         c6:27:e7:06:b9:ce:55:ef:7f:e8:56:71:a0:9a:a2:b8:43:52:
         d6:1a:64:36:5c:43:42:c8:db:40:2d:5e:b2:f8:7d:21:e4:1b:
         b7:d4:eb:00:ab:88:a2:6b:69:9d:d7:a7:a3:e1:9d:04:d5:b6:
         62:df:73:97:77:4c:45:37:93:66:ce:5b:67:7d:fd:d4:f4:d8:
         d2:1a:5d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:27:11 2026 by rpki-client