Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/3a9210-eac9-4893-8ffc-9a6af617519e/1/95GOL2KDAdauUZe5M-PqJb-AUBg.mft
File:                     95GOL2KDAdauUZe5M-PqJb-AUBg.mft (raw, json)
Hash identifier:          kP6kOuRhmvFWUAxyKYZXxnbO0covKS9OZE1oB1KljT8=
Subject key identifier:   F3:53:BD:A7:AB:A3:83:A1:C1:4F:67:2D:31:A8:99:E9:71:A6:13:65
Authority key identifier: F7:91:8E:2F:62:83:01:D6:AE:51:97:B9:33:E3:EA:25:BF:80:50:18
Certificate issuer:       /CN=f7918e2f628301d6ae5197b933e3ea25bf805018
Certificate serial:       01A0BFC36CFF9E90B940512F197D58A61E8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/95GOL2KDAdauUZe5M-PqJb-AUBg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/3a9210-eac9-4893-8ffc-9a6af617519e/1/95GOL2KDAdauUZe5M-PqJb-AUBg.mft
Manifest number:          DD
Signing time:             Sun 20 Sep 2026 17:00:50 +0000
Manifest this update:     Sun 20 Sep 2026 17:00:50 +0000
Manifest next update:     Mon 21 Sep 2026 17:00:50 +0000
Files and hashes:         1: 52TpR6t3ARWh4r2WUqOWWA4XPIs.asa (hash: 9+4CI5GbZ/xO/RNWUs5Pz6QrRhV9vaitn+UXl40n8fM=)
                          2: 95GOL2KDAdauUZe5M-PqJb-AUBg.crl (hash: MR0tPM9j83JRFMu7Kpwp9A+7nJiQgEegvlcGzOysd6E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/3a9210-eac9-4893-8ffc-9a6af617519e/1/95GOL2KDAdauUZe5M-PqJb-AUBg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/3a9210-eac9-4893-8ffc-9a6af617519e/1/95GOL2KDAdauUZe5M-PqJb-AUBg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/95GOL2KDAdauUZe5M-PqJb-AUBg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:bf:c3:6c:ff:9e:90:b9:40:51:2f:19:7d:58:a6:1e:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7918e2f628301d6ae5197b933e3ea25bf805018
        Validity
            Not Before: Sep 20 17:00:50 2026 GMT
            Not After : Sep 21 17:00:50 2026 GMT
        Subject: CN=f353bda7aba383a1c14f672d31a899e971a61365
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:03:15:8e:fc:b8:bf:d8:44:f3:e5:75:90:a2:
                    b3:8a:e9:62:52:db:1e:a1:c0:cd:b4:c1:53:28:1a:
                    b9:51:7e:34:b6:41:72:d4:b6:9e:9e:9d:7b:e3:4e:
                    50:1c:6a:8c:ce:47:f0:b6:64:aa:38:0d:5a:80:ee:
                    8a:5b:8a:46:18:a6:3e:f8:80:e6:72:e4:63:e9:22:
                    35:85:65:11:1c:31:9a:c6:27:8e:4e:1a:82:17:bc:
                    86:aa:61:5e:15:e4:c9:e1:2b:dd:ba:7a:5f:b6:ac:
                    3a:5d:ac:b6:6e:66:1b:8a:e1:ea:d3:43:b7:97:73:
                    f3:9b:3a:b0:b9:3e:6a:f2:9f:55:22:77:24:80:7c:
                    67:8e:35:90:43:cc:85:f1:31:89:a5:07:9b:de:27:
                    0b:73:8e:39:7d:46:75:83:ef:da:44:9a:bd:0c:38:
                    27:30:17:a1:1f:76:80:ad:6a:37:8b:1e:de:65:cf:
                    b2:68:c5:d3:cf:14:c3:d7:1a:1c:b6:d0:1d:d7:88:
                    cc:cf:80:84:4f:d4:e7:5b:01:36:eb:f8:5a:75:7b:
                    8b:cb:fc:46:b2:19:88:cd:4f:5e:67:48:37:7f:e9:
                    1b:8f:09:5a:69:67:a9:00:bd:70:8e:99:3d:12:ba:
                    cd:77:60:f5:07:8a:82:60:50:da:67:a9:3d:de:eb:
                    62:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:53:BD:A7:AB:A3:83:A1:C1:4F:67:2D:31:A8:99:E9:71:A6:13:65
            X509v3 Authority Key Identifier:
                keyid:F7:91:8E:2F:62:83:01:D6:AE:51:97:B9:33:E3:EA:25:BF:80:50:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95GOL2KDAdauUZe5M-PqJb-AUBg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3a9210-eac9-4893-8ffc-9a6af617519e/1/95GOL2KDAdauUZe5M-PqJb-AUBg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3a9210-eac9-4893-8ffc-9a6af617519e/1/95GOL2KDAdauUZe5M-PqJb-AUBg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:21:88:82:d7:16:e1:45:4d:a0:40:d5:2e:6f:49:de:45:9f:
         22:0a:e2:6a:8f:0f:35:ab:95:5d:2e:c4:7e:8a:ad:a4:de:bf:
         7b:3a:e3:20:de:f6:14:07:cb:92:c4:f3:b6:c9:31:e3:3d:03:
         4e:1e:12:38:ea:17:c8:0c:16:d1:92:fa:9a:22:16:8a:2b:76:
         bf:00:a0:49:21:9d:86:c3:ef:2d:e2:da:b3:f8:81:e3:03:13:
         ed:5c:12:04:34:f2:4a:54:e7:2f:eb:39:b8:9b:c6:11:9a:c6:
         40:89:be:79:37:b6:da:77:4c:5a:b8:71:50:2c:a9:d4:55:eb:
         6b:ef:0e:fa:3c:68:95:1e:33:f5:86:a0:d1:9a:4c:53:df:4c:
         ae:a4:ea:a5:9a:73:0a:0e:64:ba:96:41:26:4a:7f:c6:ae:fa:
         f3:0b:dc:8f:a2:db:a7:cd:94:5a:a5:69:15:09:29:68:b3:50:
         8c:eb:b4:89:4a:2d:36:9a:2b:9a:a0:05:61:64:be:41:0a:56:
         89:92:e2:fb:91:2f:c1:0e:e1:bb:10:80:00:a9:8d:65:36:b3:
         ac:6b:b2:75:bd:00:54:54:73:d5:61:fe:84:12:cf:80:7b:64:
         83:8b:d9:4d:26:85:0c:8d:0a:47:aa:ee:04:4f:d9:20:25:72:
         fb:84:4a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:08:25 2026 by rpki-client