Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/468b75-5994-48fb-a85d-4a5eed1ee5bc/1/63g1imqX0ZsvWv_xz8eT-7Tq_J0.mft
File:                     63g1imqX0ZsvWv_xz8eT-7Tq_J0.mft (raw, json)
Hash identifier:          PqrTjdXR0cROF/T2FRh0b4XfEXJI6lBwmHyHt959X6Q=
Subject key identifier:   38:00:A2:8B:68:05:67:05:71:95:9A:9A:4D:2C:9C:73:AE:7B:32:1D
Authority key identifier: EB:78:35:8A:6A:97:D1:9B:2F:5A:FF:F1:CF:C7:93:FB:B4:EA:FC:9D
Certificate issuer:       /CN=eb78358a6a97d19b2f5afff1cfc793fbb4eafc9d
Certificate serial:       01A0DA28ACBBDBC1671683132E7EBE88015D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/63g1imqX0ZsvWv_xz8eT-7Tq_J0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/468b75-5994-48fb-a85d-4a5eed1ee5bc/1/63g1imqX0ZsvWv_xz8eT-7Tq_J0.mft
Manifest number:          0DD4
Signing time:             Fri 25 Sep 2026 20:01:33 +0000
Manifest this update:     Fri 25 Sep 2026 20:01:33 +0000
Manifest next update:     Sat 26 Sep 2026 20:01:33 +0000
Files and hashes:         1: 63g1imqX0ZsvWv_xz8eT-7Tq_J0.crl (hash: oEAHc+ME/kqvyMk5/XEfj2dfmqMnEFmUxB/K5tYipUQ=)
                          2: Yaq2yQABZup3SrIC9V3Vg03XQQ4.roa (hash: 7fM1bUhYaUT+C1cim42k75J0aN9dJ78xVp4HTMLxEag=)
                          3: tlRAf5EiqUlqBJcvLJfhmJFN9vI.roa (hash: fKYdczyGnrIDmFu9ZA4jTUe3SM7U43almigmqc8ux9c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/468b75-5994-48fb-a85d-4a5eed1ee5bc/1/63g1imqX0ZsvWv_xz8eT-7Tq_J0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/468b75-5994-48fb-a85d-4a5eed1ee5bc/1/63g1imqX0ZsvWv_xz8eT-7Tq_J0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/63g1imqX0ZsvWv_xz8eT-7Tq_J0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 17:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:da:28:ac:bb:db:c1:67:16:83:13:2e:7e:be:88:01:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb78358a6a97d19b2f5afff1cfc793fbb4eafc9d
        Validity
            Not Before: Sep 25 20:01:33 2026 GMT
            Not After : Sep 26 20:01:33 2026 GMT
        Subject: CN=3800a28b6805670571959a9a4d2c9c73ae7b321d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:17:28:45:10:73:27:5c:63:1c:8e:f8:a7:a3:
                    ee:c3:ec:20:48:51:43:2e:d4:a8:3d:9e:2a:03:b4:
                    51:a5:44:b2:46:59:d7:e2:ef:4b:30:71:51:e7:2d:
                    9a:27:bf:da:66:42:35:db:a4:f2:86:7c:50:57:d6:
                    aa:99:f0:f2:c9:66:5b:f7:f4:72:fa:be:c1:6b:64:
                    16:31:8f:fc:04:99:02:ec:a7:cf:f6:4d:cb:85:40:
                    55:d5:f0:7f:95:3a:36:b8:2f:47:3f:0f:07:86:6d:
                    ea:9a:ed:02:bb:ef:c1:34:f2:b7:84:51:12:47:93:
                    6b:fa:30:40:00:4a:18:af:d9:99:d6:cb:b9:12:7e:
                    e0:df:f5:74:ab:5e:e9:50:97:84:5d:48:0e:2e:8e:
                    c6:5f:ed:64:5c:ed:b3:35:b8:ab:a9:4e:b6:95:07:
                    f8:c2:f8:b7:21:13:19:ed:54:5b:b6:fd:96:2e:2e:
                    8c:cd:b0:9f:ec:11:c6:de:ea:9c:43:2d:6c:18:c7:
                    15:bd:cf:29:34:67:d5:91:33:c4:7f:95:7b:27:52:
                    b2:16:b0:36:a8:38:40:31:59:a7:42:5b:d7:2f:bb:
                    b5:db:cb:d7:4c:00:95:17:ef:79:00:a6:94:e5:98:
                    b6:a1:ae:c4:32:c1:e6:d5:e8:a6:e2:4d:87:5e:bb:
                    0b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:00:A2:8B:68:05:67:05:71:95:9A:9A:4D:2C:9C:73:AE:7B:32:1D
            X509v3 Authority Key Identifier:
                keyid:EB:78:35:8A:6A:97:D1:9B:2F:5A:FF:F1:CF:C7:93:FB:B4:EA:FC:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63g1imqX0ZsvWv_xz8eT-7Tq_J0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/468b75-5994-48fb-a85d-4a5eed1ee5bc/1/63g1imqX0ZsvWv_xz8eT-7Tq_J0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/468b75-5994-48fb-a85d-4a5eed1ee5bc/1/63g1imqX0ZsvWv_xz8eT-7Tq_J0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:10:2a:3d:35:d8:6e:b4:d9:4f:1b:d8:99:8b:56:e3:85:d7:
         e6:1e:e5:ce:fd:65:36:c5:59:3a:92:fc:36:8f:7a:ce:8f:a5:
         59:c1:36:60:9e:0a:e4:1e:68:de:8f:07:a6:77:09:cd:75:e8:
         68:f1:38:ca:4b:2b:d8:00:38:19:a6:1a:9b:e3:0e:f9:01:74:
         d1:aa:de:32:87:8a:c7:ee:c7:2d:42:78:21:48:36:f9:bd:7f:
         9b:3d:d2:c9:af:94:d2:c5:7a:7a:a8:b8:40:0e:de:81:c7:b5:
         6c:81:fd:9c:a8:8a:2b:78:51:0f:9b:23:13:6f:e9:0f:f8:11:
         8c:a1:b6:0d:1c:57:c0:38:cc:99:ef:2b:2d:c4:ea:1f:fb:82:
         1a:24:92:95:70:b2:4f:c0:95:0d:eb:df:e0:f7:bd:8b:1b:99:
         87:87:a3:df:a2:88:d8:c1:91:4a:0e:14:0a:f3:f1:8d:cd:2b:
         7c:72:30:84:99:a1:d8:39:c6:9d:61:fa:36:20:e3:c0:d7:0a:
         67:57:9c:20:b8:03:06:62:80:e5:47:0a:ac:82:8a:ff:93:6b:
         30:bc:d3:d3:35:17:57:f8:0e:8d:02:63:8e:f3:6d:8a:cb:62:
         b3:e7:63:d3:99:82:06:b4:34:05:c7:07:70:be:77:76:1e:2c:
         d0:d6:27:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:52:08 2026 by rpki-client