Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.mft
File:                     afGmtIBLtqOFSkThBp8lcmdBeAU.mft (raw, json)
Hash identifier:          7AcKh9tgt2xDBHSgOmde0XHlpRBffUDNRdxI+gFihiI=
Subject key identifier:   16:1D:B6:D2:5B:B7:55:E1:88:F5:16:EE:83:C2:91:75:8E:CE:C9:E9
Authority key identifier: 69:F1:A6:B4:80:4B:B6:A3:85:4A:44:E1:06:9F:25:72:67:41:78:05
Certificate issuer:       /CN=69f1a6b4804bb6a3854a44e1069f257267417805
Certificate serial:       01A0E1AB1C449CDD9A50FDCEC79591063664
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/afGmtIBLtqOFSkThBp8lcmdBeAU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.mft
Manifest number:          084B
Signing time:             Sun 27 Sep 2026 07:01:22 +0000
Manifest this update:     Sun 27 Sep 2026 07:01:22 +0000
Manifest next update:     Mon 28 Sep 2026 07:01:22 +0000
Files and hashes:         1: EWm46AI1rMUSMZthGRFJLKzdg5w.roa (hash: VkQfmMtNp47GhBpBHPy5YMBbYpA58g2YnMi7hmT4lRU=)
                          2: afGmtIBLtqOFSkThBp8lcmdBeAU.crl (hash: O+QcCGDQiWxTS6sAMtbnNT9sBemtHWd8J3GBbqLTKC8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/afGmtIBLtqOFSkThBp8lcmdBeAU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 04:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e1:ab:1c:44:9c:dd:9a:50:fd:ce:c7:95:91:06:36:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f1a6b4804bb6a3854a44e1069f257267417805
        Validity
            Not Before: Sep 27 07:01:22 2026 GMT
            Not After : Sep 28 07:01:22 2026 GMT
        Subject: CN=161db6d25bb755e188f516ee83c291758ecec9e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:69:94:b5:02:e3:f4:1a:24:38:eb:f9:96:d3:
                    d1:2c:c1:d4:51:cb:24:b4:b1:b3:53:34:53:d6:f3:
                    f1:7f:c7:fd:71:26:50:2d:40:d6:70:4e:ad:27:4a:
                    6f:28:58:87:6f:33:89:92:6f:c7:e3:33:f0:8f:78:
                    dc:d3:d5:72:b6:7c:1c:23:68:8a:18:10:55:04:a3:
                    ba:ed:05:1e:cd:09:4f:d3:b6:c6:c1:c3:f4:09:bd:
                    fa:1a:57:7a:36:e0:a6:49:01:e8:0d:82:2e:29:74:
                    29:8c:59:2e:2d:91:6a:04:e7:aa:51:31:88:97:2c:
                    b5:58:fd:66:2d:50:f1:61:84:3a:8d:65:59:e4:d8:
                    3c:0e:5d:be:04:de:21:2e:87:d5:7e:83:3f:9c:01:
                    d0:7b:7b:06:5b:ea:95:a3:dc:7e:43:c2:7d:20:3b:
                    99:34:67:d0:f9:5f:0d:fa:3b:b8:8d:7f:92:0f:a8:
                    0e:44:d1:a4:c3:7c:4c:26:19:0e:fc:3f:54:72:f0:
                    e1:22:10:28:e4:30:6e:d1:e7:f0:93:59:c3:68:d3:
                    33:1c:77:51:15:9e:3b:60:da:1e:27:9f:91:e3:97:
                    43:fc:04:eb:05:b1:bd:34:9e:67:62:95:f1:3c:66:
                    0d:b4:5f:d2:2f:27:9b:9c:50:cb:bc:d0:87:ce:89:
                    57:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:1D:B6:D2:5B:B7:55:E1:88:F5:16:EE:83:C2:91:75:8E:CE:C9:E9
            X509v3 Authority Key Identifier:
                keyid:69:F1:A6:B4:80:4B:B6:A3:85:4A:44:E1:06:9F:25:72:67:41:78:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afGmtIBLtqOFSkThBp8lcmdBeAU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:1f:54:ca:52:c3:e2:bb:06:7a:4a:47:81:e1:69:d4:46:aa:
         9b:a3:63:2c:e5:a9:60:ce:60:86:6e:ae:2f:61:78:b7:3c:5f:
         6b:b7:06:77:c6:db:dd:52:af:0f:fc:8a:62:9e:b4:3f:d0:39:
         d6:94:dc:20:97:a4:51:b9:5d:03:62:2a:1b:b9:6e:1d:2c:d0:
         36:cf:3a:c8:7e:fd:26:2c:a3:37:04:63:ff:60:49:37:c1:2b:
         12:85:1d:5f:70:e3:9d:2e:29:1d:ea:2d:a2:08:dd:1b:7f:db:
         34:f7:8c:97:1c:d2:37:12:af:b6:78:ed:60:12:d0:c4:dd:55:
         d6:35:05:cd:0a:bf:d5:1a:9f:a4:1b:d6:60:ee:0d:b8:ef:c1:
         bc:62:e2:b7:f0:33:31:d6:32:f1:67:55:d9:cb:e8:cf:d9:ba:
         0d:05:b8:13:60:0a:dc:38:ef:aa:9e:09:eb:13:68:4c:5d:b5:
         45:5a:9f:58:97:fb:73:0e:e1:e8:e0:12:99:6a:15:61:0b:9b:
         ed:b8:91:cf:38:41:fe:96:cf:c2:2e:7d:ac:6d:02:3d:6c:13:
         03:ba:59:9f:59:16:35:8c:70:9e:a7:de:f1:a9:3a:81:df:f5:
         f2:89:48:94:f4:94:8a:ef:ec:40:13:77:42:c8:e5:d9:bc:cb:
         a8:f8:15:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:13:26 2026 by rpki-client