Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft
File:                     34laPuIhG27i33IC8JpCZoDWYmk.mft (raw, json)
Hash identifier:          dIpzrrpC6dskU+o7KB2YpM/58aBLh/Eu/s3HKvoyXGA=
Subject key identifier:   99:4F:FD:8A:F2:76:6D:5F:B2:23:ED:43:9F:D9:93:C7:C1:3F:13:66
Authority key identifier: DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69
Certificate issuer:       /CN=df895a3ee2211b6ee2df7202f09a426680d66269
Certificate serial:       01A0F11E42257D5C091A2E7C7250F26F4F9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft
Manifest number:          0972
Signing time:             Wed 30 Sep 2026 07:01:27 +0000
Manifest this update:     Wed 30 Sep 2026 07:01:27 +0000
Manifest next update:     Thu 01 Oct 2026 07:01:27 +0000
Files and hashes:         1: 34laPuIhG27i33IC8JpCZoDWYmk.crl (hash: 2ioq6aSBEsgyru0D+ZPEH1F/eoPudxQJC9msE8WV54o=)
                          2: Dq_PeQEX9w9AZ7hhB8jGjaPXdek.roa (hash: x2vJKbCmJ/r1uDEib+Z5d15/ZK6XfDckYPBmz+6pfec=)
                          3: JbC08AZZ4yXpMlH-fCQSdJypEsk.roa (hash: dv25QT/BTHr/Vmlb0AXRPmd0ZYYxQm5AHmzhJRYqsHI=)
                          4: aDmk7bmr7GaG3aSI9qiX-uXwSWg.roa (hash: PRIIqS3HIlOlOVEL7UW8zij6bOh1J2Z1Qs2Esv77scQ=)
                          5: cw-KXeWioyTYbIA1vAnNwGD9GhY.roa (hash: EbcWuoOspeZih7eQTLeYWoRHq4YiGEsO0VMZUGNEFB0=)
                          6: e5CgRNX8DO6ZSqQ9MJH71FE7_jc.roa (hash: V4ZA2YkMaTT1slmusEGl0z9gt2912EuUoJMbm9ZyTsM=)
                          7: j-PFBiL03S6WRSrBU8S47xwyndA.roa (hash: K7P+QUsdp4yG+ErvjouO0SB+AUJcFrNu/1BLrwwoCmk=)
                          8: mHlUc70rNMbtkPfKuvhCKEylgkY.roa (hash: h1dT3/iB5II0F3sw3D3rAshjNyDRMEmfsyBcGUSBbMs=)
                          9: tDWgVsxN09kg7oAdG68IGAVT8Zg.roa (hash: 92PHhhSbJSKdw93N+YcB/DCcsP8fP/+3+zAHfz750FA=)
                          10: wNRTB3A2q9f-yV1rTSijUO5gEB8.roa (hash: Mvkmn5/K4C/vX+W0bmirSKlojMyVfTuv4C+eRU2oTlU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 Oct 2026 02:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f1:1e:42:25:7d:5c:09:1a:2e:7c:72:50:f2:6f:4f:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df895a3ee2211b6ee2df7202f09a426680d66269
        Validity
            Not Before: Sep 30 07:01:27 2026 GMT
            Not After : Oct  1 07:01:27 2026 GMT
        Subject: CN=994ffd8af2766d5fb223ed439fd993c7c13f1366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:b3:f9:f5:4b:15:3a:c4:44:0d:4e:38:f3:ed:
                    8a:48:8a:05:40:5e:5a:e3:28:15:c1:d2:5a:15:62:
                    f9:7f:84:a7:91:75:bd:a1:b0:bc:08:0d:f6:24:ae:
                    26:bb:53:04:02:b3:18:f8:47:40:18:7a:42:21:41:
                    f7:b5:47:a3:fc:28:c2:0d:b9:49:b6:ed:1d:d6:bd:
                    12:03:3a:2b:60:1a:54:b7:65:3d:eb:fd:c1:00:c7:
                    0f:2a:6d:a2:b6:8a:b4:6f:8e:23:44:9b:66:98:1c:
                    d4:83:ce:70:bd:9e:5d:74:35:c7:06:8d:13:3a:d0:
                    48:90:2f:a1:10:b4:4a:d0:5f:d7:31:e1:df:56:83:
                    fc:fd:ee:32:e4:0e:34:f3:1a:c1:6a:55:f8:dc:72:
                    06:c7:fe:af:70:d0:9b:55:45:30:81:24:a4:3b:1f:
                    0c:5a:d9:3e:c8:b3:29:48:65:c5:65:6e:7f:51:f2:
                    48:dd:40:a2:80:0e:db:f6:25:86:88:76:6f:8f:bb:
                    45:7d:10:e2:23:0b:f8:98:f2:3f:b6:95:9f:a7:1c:
                    f5:f2:b1:c4:9f:cf:db:ef:f7:ec:98:87:0e:55:c8:
                    d0:92:66:66:4f:41:52:14:ec:cd:b7:b4:a2:ea:e0:
                    08:1d:3b:b0:a9:6e:93:03:c8:07:f7:fe:5f:63:65:
                    6a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:4F:FD:8A:F2:76:6D:5F:B2:23:ED:43:9F:D9:93:C7:C1:3F:13:66
            X509v3 Authority Key Identifier:
                keyid:DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:fc:9c:53:85:ee:c4:7b:80:6f:8a:cc:5f:ee:ad:ea:aa:f7:
         2a:1e:6a:2a:c9:a6:f9:96:19:96:d5:a8:11:0a:81:b4:9e:e4:
         3e:a7:d1:cd:68:66:ba:18:88:cf:ac:36:39:57:43:24:87:df:
         ab:cf:ad:ce:8f:e9:a5:40:f5:47:c2:0d:dc:e4:3f:6e:92:c0:
         e0:ff:a2:37:47:55:9b:f6:b0:b3:cb:91:ab:fa:8c:67:2e:fa:
         22:ff:45:73:cb:a6:28:4b:61:9b:9a:ec:03:70:6d:25:19:1f:
         e7:bc:2c:1b:7c:11:27:4a:2f:32:b6:e3:7f:af:3b:0e:8f:2b:
         0b:46:11:ee:fb:1a:23:2c:f2:a5:d1:45:60:bb:dd:ce:b5:30:
         10:57:fd:9d:33:17:1c:cd:10:ef:ef:e0:eb:78:86:78:64:9e:
         73:4d:98:38:cd:bb:80:28:d4:99:df:d9:2a:77:90:38:96:e0:
         99:99:95:4b:92:48:05:ad:4c:7a:3e:1e:36:09:d0:2b:28:2b:
         7a:48:e5:84:85:29:fd:3a:4b:34:2d:61:5c:00:c2:f2:ed:58:
         a9:ff:57:fe:88:0e:b9:db:b0:eb:45:a3:43:61:0d:b0:81:9c:
         e9:c5:0f:d1:fd:e2:dd:6c:8e:af:bb:23:a5:11:30:ce:d0:b8:
         26:7d:28:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 11:28:30 2026 by rpki-client