Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/ca1cf4-acac-4555-bc40-e4322c9dde9c/1/55b_u99E78Ho4QIA1J2o7tCjtx4.mft
File:                     55b_u99E78Ho4QIA1J2o7tCjtx4.mft (raw, json)
Hash identifier:          TkU3yPE+z4bvzDJiaxVixxrRiu4XJy+l3TpJy5rY2Kk=
Subject key identifier:   D1:4F:03:31:C7:86:BC:76:6F:59:70:FE:54:BD:9E:B6:E8:78:94:1A
Authority key identifier: E7:96:FF:BB:DF:44:EF:C1:E8:E1:02:00:D4:9D:A8:EE:D0:A3:B7:1E
Certificate issuer:       /CN=e796ffbbdf44efc1e8e10200d49da8eed0a3b71e
Certificate serial:       01A0C445238FFD282378074D5EB0C509A5FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/55b_u99E78Ho4QIA1J2o7tCjtx4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/ca1cf4-acac-4555-bc40-e4322c9dde9c/1/55b_u99E78Ho4QIA1J2o7tCjtx4.mft
Manifest number:          1A69
Signing time:             Mon 21 Sep 2026 14:01:00 +0000
Manifest this update:     Mon 21 Sep 2026 14:01:00 +0000
Manifest next update:     Tue 22 Sep 2026 14:01:00 +0000
Files and hashes:         1: 55b_u99E78Ho4QIA1J2o7tCjtx4.crl (hash: Q+z8/wZ0Z80buozFKnFCm/6oeY3So/95GPDv6LwFbSw=)
                          2: 6_7eZf24isCNW4I6xx_t7mR7qHQ.roa (hash: K+RrpBJZJgRykfH3os4A5wEvK1ISeCA14xU5M4pO5jk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/ca1cf4-acac-4555-bc40-e4322c9dde9c/1/55b_u99E78Ho4QIA1J2o7tCjtx4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/ca1cf4-acac-4555-bc40-e4322c9dde9c/1/55b_u99E78Ho4QIA1J2o7tCjtx4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/55b_u99E78Ho4QIA1J2o7tCjtx4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c4:45:23:8f:fd:28:23:78:07:4d:5e:b0:c5:09:a5:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e796ffbbdf44efc1e8e10200d49da8eed0a3b71e
        Validity
            Not Before: Sep 21 14:01:00 2026 GMT
            Not After : Sep 22 14:01:00 2026 GMT
        Subject: CN=d14f0331c786bc766f5970fe54bd9eb6e878941a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:92:a5:52:52:c7:82:8e:44:c6:30:b7:d5:d0:
                    7c:28:6c:c2:1c:34:ff:2d:fb:51:ba:90:08:9a:50:
                    af:61:a0:c5:85:9c:9f:a0:de:af:ca:f3:99:94:57:
                    ec:4e:63:e0:bd:49:7b:93:69:e9:ff:d9:85:1f:50:
                    09:79:24:72:a9:57:38:0b:88:36:8c:a4:f1:cf:c0:
                    59:b8:b3:a6:fb:a9:c9:70:85:9e:f6:98:41:e5:5a:
                    84:fe:4f:46:a7:8e:2a:d9:7c:1b:45:cb:40:44:ff:
                    f5:9b:db:eb:e8:fc:ce:d3:19:1b:33:14:bb:dc:68:
                    7f:37:e8:df:19:27:49:20:3a:2e:d5:5f:ac:fc:d3:
                    7f:d6:df:cf:dd:69:fe:52:1d:4a:6b:87:bb:ad:2f:
                    7b:0e:41:10:dd:80:8e:91:7e:3b:44:f4:cc:67:86:
                    37:08:30:55:50:45:10:d7:a7:dc:cc:ed:f9:0a:fb:
                    69:8e:51:a8:39:e9:72:6d:ad:21:d0:16:09:9e:1e:
                    05:9c:14:b3:7b:be:aa:cb:9d:43:7e:94:68:8c:13:
                    61:98:d1:1b:9e:8d:3c:82:69:eb:56:99:5e:9e:24:
                    6f:e5:a8:e5:26:43:a4:e2:a5:46:7f:4e:bc:63:f5:
                    e0:c7:49:ba:9d:a3:8b:d2:f7:f5:1f:56:52:e4:b3:
                    18:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:4F:03:31:C7:86:BC:76:6F:59:70:FE:54:BD:9E:B6:E8:78:94:1A
            X509v3 Authority Key Identifier:
                keyid:E7:96:FF:BB:DF:44:EF:C1:E8:E1:02:00:D4:9D:A8:EE:D0:A3:B7:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/55b_u99E78Ho4QIA1J2o7tCjtx4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/ca1cf4-acac-4555-bc40-e4322c9dde9c/1/55b_u99E78Ho4QIA1J2o7tCjtx4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/ca1cf4-acac-4555-bc40-e4322c9dde9c/1/55b_u99E78Ho4QIA1J2o7tCjtx4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:76:4f:85:02:a9:a2:e3:98:32:e0:9f:f7:2a:06:1f:c5:75:
         c6:3e:9d:fa:de:f9:bb:c0:17:e1:5e:34:66:23:46:b6:65:3d:
         32:32:38:08:03:8f:4a:fa:9d:87:ad:6b:f5:bd:1a:d6:9c:0f:
         f3:0b:28:5a:37:03:b6:da:a6:38:95:41:2e:1b:9a:fe:5d:d8:
         70:bc:4a:3a:4b:cf:f8:eb:65:79:af:1e:08:64:86:b7:de:b1:
         8d:e8:6f:d2:15:59:f5:d1:3b:04:15:9c:1d:89:8b:ee:b2:64:
         be:8b:eb:cd:47:3e:b8:90:a5:8f:56:2b:87:ad:bf:b4:d4:c6:
         7d:a9:7b:64:ae:a6:47:11:16:49:a8:3d:dc:de:b5:00:0f:79:
         79:39:ef:6d:e0:07:56:37:d0:a7:b2:92:7a:77:f2:55:8e:bf:
         23:07:6b:1a:d7:6d:55:55:e2:32:f4:7b:91:00:de:09:44:90:
         0d:63:fb:fa:ab:c0:ab:40:be:56:43:d1:1d:0d:64:8b:2b:90:
         7e:54:8e:21:81:6e:79:b4:ae:1e:ed:a7:1f:4f:55:2e:65:94:
         18:9c:4b:fc:bb:5b:69:52:97:ef:29:14:00:5b:21:18:a1:85:
         a7:6f:98:4f:0a:a0:58:17:70:85:7a:ee:3a:17:c9:ce:25:1f:
         29:1c:0c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:03:09 2026 by rpki-client