Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/f81a66-6706-495b-9e0a-b089d18fc09b/1/V27gKsYF8LuYu81jeprfrkg6boQ.mft
File:                     V27gKsYF8LuYu81jeprfrkg6boQ.mft (raw, json)
Hash identifier:          yd7NQqrSTKw1lC5EgnVO+GSOmoGsZ63BoA4AxkwtiVo=
Subject key identifier:   BA:12:DE:72:90:C7:78:F5:3B:77:4D:92:57:A8:BE:B7:F4:F5:B6:D2
Authority key identifier: 57:6E:E0:2A:C6:05:F0:BB:98:BB:CD:63:7A:9A:DF:AE:48:3A:6E:84
Certificate issuer:       /CN=576ee02ac605f0bb98bbcd637a9adfae483a6e84
Certificate serial:       01A0E81D2E04EF55CC0E17F5D73253AE4067
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V27gKsYF8LuYu81jeprfrkg6boQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/f81a66-6706-495b-9e0a-b089d18fc09b/1/V27gKsYF8LuYu81jeprfrkg6boQ.mft
Manifest number:          146D
Signing time:             Mon 28 Sep 2026 13:03:41 +0000
Manifest this update:     Mon 28 Sep 2026 13:03:41 +0000
Manifest next update:     Tue 29 Sep 2026 13:03:41 +0000
Files and hashes:         1: 0i0XuDvoPgs1nd1NeD83B2IScVA.roa (hash: YNJF/olVt/Dil/zKrwDDUgcE/N5peyDf18kFIpNKPX8=)
                          2: V27gKsYF8LuYu81jeprfrkg6boQ.crl (hash: 8XIz+idyJuC62CLNcMcJP97YpnXaaLFME5NecHIM1us=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/f81a66-6706-495b-9e0a-b089d18fc09b/1/V27gKsYF8LuYu81jeprfrkg6boQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/f81a66-6706-495b-9e0a-b089d18fc09b/1/V27gKsYF8LuYu81jeprfrkg6boQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V27gKsYF8LuYu81jeprfrkg6boQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 13:03:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e8:1d:2e:04:ef:55:cc:0e:17:f5:d7:32:53:ae:40:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=576ee02ac605f0bb98bbcd637a9adfae483a6e84
        Validity
            Not Before: Sep 28 13:03:41 2026 GMT
            Not After : Sep 29 13:03:41 2026 GMT
        Subject: CN=ba12de7290c778f53b774d9257a8beb7f4f5b6d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:99:97:8d:b9:6e:df:60:ff:a0:83:1e:b9:03:
                    75:73:c6:9d:75:b3:9f:0c:a1:0d:f7:20:08:e7:18:
                    7c:e2:4a:cc:38:98:94:2f:a0:bd:0a:68:e8:d6:03:
                    c6:ab:db:d3:3a:bf:c6:f5:e3:84:23:c6:c7:83:c1:
                    7e:78:d0:2e:44:d3:55:a9:fb:6d:e6:cf:b4:3b:a8:
                    9d:dd:fa:11:19:8f:26:65:bd:26:32:aa:e6:03:99:
                    79:8d:27:1f:1b:b6:57:bb:82:c5:2a:a2:68:45:26:
                    1f:e5:d7:36:8b:59:55:61:fb:19:ac:47:86:d5:b5:
                    6a:eb:38:8a:d4:3d:97:d8:90:92:91:c3:aa:0c:f1:
                    70:b4:d7:db:b9:3a:7f:d3:62:12:a3:3a:c4:fa:c5:
                    77:97:1d:4c:dd:61:81:3e:54:d8:74:ce:4b:9a:2a:
                    79:44:04:5e:df:94:d0:d8:13:d9:6a:ee:c7:6c:19:
                    d6:4f:42:5f:41:31:60:38:ed:db:7b:de:0e:6c:19:
                    9b:f4:e9:0b:a7:8b:9d:b6:4f:ae:0c:e1:5e:70:11:
                    bb:67:5c:a5:48:46:dd:98:f9:68:fb:6f:47:49:92:
                    d9:85:9d:60:5d:e7:05:dd:77:50:b6:05:78:11:b9:
                    fb:5a:27:83:85:da:89:d1:42:11:eb:d1:04:44:b5:
                    3f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:12:DE:72:90:C7:78:F5:3B:77:4D:92:57:A8:BE:B7:F4:F5:B6:D2
            X509v3 Authority Key Identifier:
                keyid:57:6E:E0:2A:C6:05:F0:BB:98:BB:CD:63:7A:9A:DF:AE:48:3A:6E:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V27gKsYF8LuYu81jeprfrkg6boQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f81a66-6706-495b-9e0a-b089d18fc09b/1/V27gKsYF8LuYu81jeprfrkg6boQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f81a66-6706-495b-9e0a-b089d18fc09b/1/V27gKsYF8LuYu81jeprfrkg6boQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:43:d6:32:10:5a:4d:e2:96:ac:5b:24:ff:48:4f:3f:20:6c:
         f7:3b:68:6c:c9:05:12:f3:73:11:94:7e:e9:6f:9a:d2:10:5d:
         9e:a3:8e:19:51:e9:f0:97:ae:2e:71:ce:93:c9:35:34:d5:8a:
         9a:43:b1:fd:94:40:5c:2e:5e:f9:af:59:f7:6c:4d:c9:dc:0f:
         95:84:09:6b:55:4f:47:53:d4:b7:8c:34:d9:f2:b0:ea:bc:d5:
         f6:b7:01:7b:50:b5:32:0b:36:fd:76:2d:87:0a:51:89:9b:2f:
         30:01:a3:89:a3:73:14:a1:88:93:ec:86:58:00:4a:3d:0a:cb:
         e8:3c:3f:62:08:91:62:76:ef:80:d2:50:f4:99:58:65:5e:39:
         d2:4c:01:38:28:2e:1e:95:59:c9:9f:77:e9:c3:98:6c:96:50:
         3f:0a:74:ab:06:e0:1a:fb:2c:b3:23:bc:7c:40:eb:e5:0c:25:
         4b:98:89:24:6a:8f:4e:3f:47:17:17:48:5c:40:0b:9b:df:d3:
         91:c0:c1:48:e1:82:37:dc:3f:f4:76:4a:1c:da:e3:43:14:ff:
         94:20:6c:15:9d:b4:d9:dd:10:e4:77:51:d0:6b:ca:18:40:96:
         d6:94:ff:ae:ac:25:80:66:38:d1:45:fa:ea:cc:8b:bf:b6:5b:
         cf:0f:be:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:02:41 2026 by rpki-client