Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.mft
File:                     dE3Tr9fM584AqerGfgvKmb63Kao.mft (raw, json)
Hash identifier:          TSDQ57FHWo9n9A5ASEYy6mCqa2YjcebPsgHRMekV6zY=
Subject key identifier:   21:CB:D8:A7:EC:A5:23:8F:C1:F9:08:BA:EE:11:AA:2F:7B:97:48:70
Authority key identifier: 74:4D:D3:AF:D7:CC:E7:CE:00:A9:EA:C6:7E:0B:CA:99:BE:B7:29:AA
Certificate issuer:       /CN=744dd3afd7cce7ce00a9eac67e0bca99beb729aa
Certificate serial:       01A0CFA432ED5D3643703E229BBFADBD3C2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dE3Tr9fM584AqerGfgvKmb63Kao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.mft
Manifest number:          1A6B
Signing time:             Wed 23 Sep 2026 19:00:39 +0000
Manifest this update:     Wed 23 Sep 2026 19:00:39 +0000
Manifest next update:     Thu 24 Sep 2026 19:00:39 +0000
Files and hashes:         1: dE3Tr9fM584AqerGfgvKmb63Kao.crl (hash: 06tGFZJ/k7mHV2wRI5wJHFu/u4GbLUWbgbnpEaIrtTw=)
                          2: jeUCTnllWBc2YjwSNbaBtlWcww4.roa (hash: A3urkixwNeWZh9C+aMoLes8n2HeLxR2S7cO9Wh2QMPQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dE3Tr9fM584AqerGfgvKmb63Kao.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 19:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cf:a4:32:ed:5d:36:43:70:3e:22:9b:bf:ad:bd:3c:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=744dd3afd7cce7ce00a9eac67e0bca99beb729aa
        Validity
            Not Before: Sep 23 19:00:39 2026 GMT
            Not After : Sep 24 19:00:39 2026 GMT
        Subject: CN=21cbd8a7eca5238fc1f908baee11aa2f7b974870
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:f6:fc:be:46:ad:d0:7b:ad:d7:95:43:b4:03:
                    9c:3c:91:68:a7:f2:0a:7e:43:6a:9d:cf:51:b9:78:
                    8c:47:10:31:0a:a9:68:07:57:23:fc:4d:0a:77:67:
                    ef:83:82:e7:95:64:dd:36:09:00:f2:e8:af:8a:7a:
                    02:3b:be:e1:e7:54:2b:5a:fb:ef:e1:99:3b:b8:84:
                    75:c4:42:74:e9:0b:24:54:2b:9b:b8:ca:a5:3f:0d:
                    3a:4a:61:d8:3d:14:89:dc:d9:e7:f2:3d:51:76:bb:
                    9c:91:61:5c:e9:fc:b3:86:1e:ad:e8:94:9f:3d:7d:
                    74:f4:cc:1b:aa:d7:9f:93:94:6c:49:5d:bb:86:19:
                    76:07:be:89:88:93:4d:4e:27:a6:c0:e8:39:fd:3e:
                    0c:67:b5:ec:50:82:41:ba:f8:91:d4:ab:e7:c2:37:
                    21:75:47:60:62:0e:40:49:a2:ba:a2:f7:1c:bc:f3:
                    ca:f2:e0:ed:44:84:2c:7c:70:52:19:1b:7f:22:56:
                    60:16:f6:be:05:d7:48:5e:e1:49:d1:3e:d9:81:c6:
                    8e:f3:1f:6b:3f:e9:6d:ab:fc:91:00:d5:98:eb:20:
                    cb:07:79:22:3d:d5:b7:66:ad:40:5a:20:b3:9d:20:
                    34:b9:d4:d3:c6:ac:a6:84:86:31:b0:21:ec:68:ba:
                    8c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:CB:D8:A7:EC:A5:23:8F:C1:F9:08:BA:EE:11:AA:2F:7B:97:48:70
            X509v3 Authority Key Identifier:
                keyid:74:4D:D3:AF:D7:CC:E7:CE:00:A9:EA:C6:7E:0B:CA:99:BE:B7:29:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dE3Tr9fM584AqerGfgvKmb63Kao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:4e:95:e2:1f:14:b9:b7:75:be:ed:a1:63:5a:e4:27:f6:eb:
         0d:8e:6b:c1:66:44:a0:5a:b2:3f:b3:2c:be:34:21:87:2c:56:
         53:1a:f7:95:41:39:a8:4a:79:18:34:c4:3f:20:1c:03:3d:a6:
         3f:e9:5e:b1:a1:be:96:7b:0d:33:e4:8b:82:3b:d2:4e:10:37:
         79:99:bd:c9:ea:c8:05:f6:c2:1b:bb:6b:3a:1c:38:24:5d:b3:
         f1:bd:c5:74:b6:e8:4a:cc:18:b3:d1:97:95:37:d8:ba:56:db:
         c9:6e:d9:1a:16:f5:6d:ce:18:74:6c:bd:63:78:05:02:95:ea:
         42:69:b0:21:7b:e1:8b:3e:46:b4:3a:5b:2a:75:66:bc:54:34:
         ea:57:74:80:85:4c:0e:a0:8e:64:57:9f:54:97:13:a3:b3:ed:
         dc:4a:19:4e:b8:d3:ba:d0:08:66:9a:e1:8c:e2:e2:ab:4a:67:
         8d:cd:d2:a9:d6:e9:1e:f3:d4:b7:ad:89:53:76:79:c0:12:28:
         9a:7b:11:ab:79:4f:3f:0e:67:a0:19:80:08:8d:7e:e4:54:44:
         8d:b9:eb:99:03:52:c0:99:e4:fb:b1:7f:52:c8:ff:b2:2d:5e:
         45:fe:31:9b:f2:4b:96:e3:56:c4:8e:82:9d:80:a3:c7:f2:8d:
         88:18:b9:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:41:45 2026 by rpki-client