Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.mft
File:                     339euIF_Lal_ZlUHaDtcRadNDKA.mft (raw, json)
Hash identifier:          rQFv3c6OWLTGqyVREKEXccN9gnzT0pTjWjfuJSp9XT0=
Subject key identifier:   67:95:66:43:C6:9B:E8:50:73:18:82:04:C1:1A:F7:C2:27:9F:F8:94
Authority key identifier: DF:7F:5E:B8:81:7F:2D:A9:7F:66:55:07:68:3B:5C:45:A7:4D:0C:A0
Certificate issuer:       /CN=df7f5eb8817f2da97f665507683b5c45a74d0ca0
Certificate serial:       01A0C8FD079205E2891C2F5F8446E68D5DD9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/339euIF_Lal_ZlUHaDtcRadNDKA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.mft
Manifest number:          1765
Signing time:             Tue 22 Sep 2026 12:00:20 +0000
Manifest this update:     Tue 22 Sep 2026 12:00:20 +0000
Manifest next update:     Wed 23 Sep 2026 12:00:20 +0000
Files and hashes:         1: 339euIF_Lal_ZlUHaDtcRadNDKA.crl (hash: Z68CMelY/EAOSzszZAkU4jFFHz6MCCdXZE/3oM8MQFQ=)
                          2: ADb-8cFQ-NqBiNjB-9VRdEXxXGo.roa (hash: Z0tlGeHI28w/uWa6BzOx7bS4D0r8kubbhdFc5SfUT7M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/339euIF_Lal_ZlUHaDtcRadNDKA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 12:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c8:fd:07:92:05:e2:89:1c:2f:5f:84:46:e6:8d:5d:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df7f5eb8817f2da97f665507683b5c45a74d0ca0
        Validity
            Not Before: Sep 22 12:00:20 2026 GMT
            Not After : Sep 23 12:00:20 2026 GMT
        Subject: CN=67956643c69be85073188204c11af7c2279ff894
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8d:db:b7:f6:0e:ea:87:ef:36:e3:08:73:0a:
                    43:ba:fa:73:28:89:50:2f:e2:16:0e:34:a4:02:cf:
                    22:1a:57:c6:db:85:79:2d:c1:82:f9:98:72:d5:3b:
                    03:af:7d:3a:ed:3a:cf:fc:f9:01:52:fb:f2:c8:30:
                    6a:8a:83:29:3e:d6:ba:29:a5:17:79:b5:84:e8:bb:
                    d4:1e:fb:9b:1a:a4:f7:44:4b:4e:ba:c1:b1:3f:e2:
                    94:83:64:c6:e9:77:b1:77:75:2d:52:d7:38:d7:6f:
                    c8:32:a5:29:c6:c4:df:5b:06:98:5d:52:cb:e5:60:
                    8e:3a:f4:80:cd:00:e2:9f:c3:52:f9:8b:2e:1d:91:
                    a2:f0:a0:d9:00:b7:e0:46:87:11:39:f1:ee:7d:04:
                    dd:88:16:fb:38:3c:c0:36:80:05:9e:e8:b6:2b:05:
                    1f:8e:64:2f:90:1a:9c:c5:22:51:d9:c3:f7:a9:0a:
                    27:e6:2b:f0:25:66:2b:4f:d3:91:47:c9:6a:c7:ab:
                    97:9b:ee:ed:ef:26:d4:fb:0d:a7:c0:ed:ca:35:f1:
                    7c:2f:b1:0c:da:c9:7f:fc:15:62:ce:51:f7:85:f2:
                    68:8b:4f:42:38:f8:25:9f:ff:89:b4:e0:8c:70:e3:
                    42:9f:71:65:62:9e:0c:ca:df:54:1b:69:65:f4:36:
                    97:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:95:66:43:C6:9B:E8:50:73:18:82:04:C1:1A:F7:C2:27:9F:F8:94
            X509v3 Authority Key Identifier:
                keyid:DF:7F:5E:B8:81:7F:2D:A9:7F:66:55:07:68:3B:5C:45:A7:4D:0C:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/339euIF_Lal_ZlUHaDtcRadNDKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:39:99:f6:f3:dd:7e:bb:47:4d:40:7f:13:39:09:3e:1f:30:
         e3:67:92:17:03:15:6f:85:71:e2:09:17:30:27:76:70:a5:ea:
         ab:51:2f:24:28:5c:25:bb:d7:67:89:d7:bb:16:56:1b:45:e9:
         b3:d0:7e:b1:0f:97:62:c3:9d:e4:a2:c1:8e:35:6a:e7:70:1f:
         54:5d:f4:40:b7:c8:4d:c5:2b:d4:74:e3:b7:5d:2e:21:03:d7:
         db:f2:fa:f8:3f:89:3c:62:41:c1:84:d4:02:f8:8c:d4:01:21:
         05:b9:f6:17:28:eb:65:41:fd:c4:bf:d3:37:06:e2:59:4d:ad:
         93:04:dd:da:8c:e6:54:c3:52:8c:29:51:f2:6f:0a:ee:62:77:
         b9:d5:76:61:a1:fa:1f:7c:c2:30:ff:b9:22:3a:46:13:9e:aa:
         bf:48:3e:47:30:d6:2d:a0:5e:9d:cd:02:99:d9:0d:6b:4f:ca:
         84:3c:79:d7:c9:eb:e1:49:88:0d:30:e5:a1:fb:91:59:7e:a0:
         16:54:19:ec:f6:27:7d:5e:4e:f0:8b:6f:ce:16:2b:c6:c6:6a:
         b8:07:ec:33:1c:4b:85:53:f1:b4:53:80:e8:79:96:af:b6:ab:
         2b:16:69:53:ac:70:73:e1:8d:60:25:90:20:4d:c6:c9:d1:cc:
         55:d4:a9:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:09:09 2026 by rpki-client