Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/t55dT4NeqI12tgJW4AN1R82Wgnk.mft
File:                     t55dT4NeqI12tgJW4AN1R82Wgnk.mft (raw, json)
Hash identifier:          /JvLAup66bjX/HPq4H/TqgEE6hhzY4gwtBZUnqjJ/9Q=
Subject key identifier:   82:6C:F8:76:9D:F8:91:CD:19:EB:51:52:18:7E:C7:29:6D:21:F5:DE
Authority key identifier: B7:9E:5D:4F:83:5E:A8:8D:76:B6:02:56:E0:03:75:47:CD:96:82:79
Certificate issuer:       /CN=b79e5d4f835ea88d76b60256e0037547cd968279
Certificate serial:       01A0DA96582C6EF8E4E37D927ADE1F580C62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t55dT4NeqI12tgJW4AN1R82Wgnk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/t55dT4NeqI12tgJW4AN1R82Wgnk.mft
Manifest number:          09BB
Signing time:             Fri 25 Sep 2026 22:01:20 +0000
Manifest this update:     Fri 25 Sep 2026 22:01:20 +0000
Manifest next update:     Sat 26 Sep 2026 22:01:20 +0000
Files and hashes:         1: 2zOKVHZfMm9AxAnIgk6BSVssqPo.roa (hash: UxUPcLpqbBTjs1BO/RAIL95/BplOFFKqBnWYZsn/g5c=)
                          2: t55dT4NeqI12tgJW4AN1R82Wgnk.crl (hash: ZctaYGG1rYdQgqkCjEIpePzMI3+LAcKlJzfyhu27/FA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/t55dT4NeqI12tgJW4AN1R82Wgnk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/t55dT4NeqI12tgJW4AN1R82Wgnk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t55dT4NeqI12tgJW4AN1R82Wgnk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 22:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:da:96:58:2c:6e:f8:e4:e3:7d:92:7a:de:1f:58:0c:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b79e5d4f835ea88d76b60256e0037547cd968279
        Validity
            Not Before: Sep 25 22:01:20 2026 GMT
            Not After : Sep 26 22:01:20 2026 GMT
        Subject: CN=826cf8769df891cd19eb5152187ec7296d21f5de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:b5:75:9f:43:5c:29:ec:6a:c2:74:6d:35:d4:
                    bb:31:f8:ff:51:6e:b1:67:5a:5a:fc:1e:fc:f5:bc:
                    b5:14:72:ea:67:9b:5d:e8:12:72:dd:d6:26:63:f2:
                    1c:0f:c5:7a:cf:1d:e4:57:01:90:2c:e3:a3:de:a8:
                    8e:54:7b:fb:16:58:59:fe:32:66:fc:2a:a3:b7:93:
                    18:38:87:bc:33:84:62:61:22:42:49:3d:85:cd:18:
                    30:d3:3c:4d:fd:75:7a:85:99:04:7d:48:55:96:fc:
                    e7:76:93:2a:87:4f:5d:44:03:c5:70:a1:37:ff:b1:
                    58:7b:0e:a1:23:08:e0:e1:29:d3:f5:c0:46:18:b4:
                    40:c9:ee:b9:14:60:e6:66:0b:e7:32:cc:11:80:cd:
                    97:2f:05:f9:61:60:13:1d:24:e6:cf:07:cf:30:57:
                    44:78:4c:5c:b0:8a:e7:17:47:51:4e:11:72:b3:00:
                    5a:2c:6e:18:d2:2c:6d:0b:bd:8f:17:86:7d:14:44:
                    4e:27:bc:5c:be:2f:f7:4f:46:f4:b7:a9:04:0f:66:
                    f0:21:3c:ee:07:d2:7b:b2:bb:19:dd:b5:40:d5:aa:
                    b7:c3:74:f9:81:fb:e8:36:63:61:a5:a1:94:6c:f0:
                    a4:31:fb:26:d9:05:2e:eb:20:d1:99:5d:89:74:b2:
                    03:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:6C:F8:76:9D:F8:91:CD:19:EB:51:52:18:7E:C7:29:6D:21:F5:DE
            X509v3 Authority Key Identifier:
                keyid:B7:9E:5D:4F:83:5E:A8:8D:76:B6:02:56:E0:03:75:47:CD:96:82:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t55dT4NeqI12tgJW4AN1R82Wgnk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/t55dT4NeqI12tgJW4AN1R82Wgnk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/t55dT4NeqI12tgJW4AN1R82Wgnk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:d4:51:4d:d3:3b:35:c9:57:fa:5a:08:db:38:73:fe:dd:3e:
         95:42:90:a6:91:62:6d:47:bd:25:64:5e:d8:35:67:8f:b7:e4:
         c0:20:d6:e8:53:81:ef:f7:8a:81:b7:98:c8:9c:e4:32:78:06:
         11:f1:f1:88:84:16:22:27:91:44:13:50:81:c0:a0:be:3e:67:
         c5:4f:ba:1b:c1:a8:e8:70:37:88:e8:b5:45:d0:65:18:2a:0e:
         56:1a:e9:5c:e6:78:cf:27:b8:3d:a9:dc:99:35:c6:69:1d:3d:
         f0:28:6a:20:32:d4:b9:1e:d3:c0:aa:e6:3e:fe:4c:9c:c5:32:
         90:4c:d9:eb:34:ad:cb:d0:dc:a5:8e:24:8f:bd:73:37:4f:e9:
         81:60:79:d7:f1:c0:95:7c:53:a3:40:91:96:ee:81:5c:2b:2e:
         50:2c:f3:ef:68:85:b2:ca:30:01:91:f2:0c:b0:cb:ec:af:43:
         38:2a:e2:93:2c:1e:58:b5:e0:d2:2f:7a:96:7f:ca:a2:a1:2f:
         20:a2:ce:5f:1c:db:3c:4c:fc:61:38:9b:d0:31:63:4f:28:c5:
         8e:0f:e3:50:2d:7c:02:1a:36:53:ae:5c:0f:0c:1e:e4:23:03:
         20:96:8a:34:c7:1d:31:04:3f:82:9a:5e:23:da:28:24:a3:4c:
         d1:59:13:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:42:46 2026 by rpki-client