Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.mft
File:                     12Ir6Ipc6u-MMw1-lv_0NeggU7Q.mft (raw, json)
Hash identifier:          pFYqkR+EZuW+5iDU4yemjYlWWi2ndXR43+eR4BLdX20=
Subject key identifier:   94:4D:4B:1A:1E:4B:36:F8:A1:36:22:77:DF:12:A4:82:F9:F7:5F:AD
Authority key identifier: D7:62:2B:E8:8A:5C:EA:EF:8C:33:0D:7E:96:FF:F4:35:E8:20:53:B4
Certificate issuer:       /CN=d7622be88a5ceaef8c330d7e96fff435e82053b4
Certificate serial:       01A0C09F7AC6974AED0C8F82803064135E38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.mft
Manifest number:          0760
Signing time:             Sun 20 Sep 2026 21:01:12 +0000
Manifest this update:     Sun 20 Sep 2026 21:01:12 +0000
Manifest next update:     Mon 21 Sep 2026 21:01:12 +0000
Files and hashes:         1: 12Ir6Ipc6u-MMw1-lv_0NeggU7Q.crl (hash: yzcYBKkxaJJ14IvULKd4Sp1J7hEsDiTCqO0D7CPOEDg=)
                          2: FoEw3sSBgl3t0ttG82J0ACX5bo8.roa (hash: MuH9TiWx0hlkjcPkeOxwnOHNyUeFkmZNNs45DwxLq/w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 21:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c0:9f:7a:c6:97:4a:ed:0c:8f:82:80:30:64:13:5e:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7622be88a5ceaef8c330d7e96fff435e82053b4
        Validity
            Not Before: Sep 20 21:01:12 2026 GMT
            Not After : Sep 21 21:01:12 2026 GMT
        Subject: CN=944d4b1a1e4b36f8a1362277df12a482f9f75fad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:4d:81:f8:60:a5:90:68:bc:c6:8d:8e:82:58:
                    82:31:86:3c:00:e7:4a:33:27:78:c6:bd:04:7f:0c:
                    8f:dc:4e:06:3d:9c:df:f1:35:95:a5:47:fd:16:f9:
                    56:7f:08:84:9d:65:fe:2d:5c:36:c8:5b:13:8c:11:
                    de:77:ba:45:fa:47:a5:6a:54:23:0e:19:f3:cc:86:
                    ec:9c:38:2e:69:2a:a2:d4:58:a4:79:4c:6b:ef:d5:
                    7e:b6:df:6a:f2:0e:3d:8f:ae:74:a3:26:ca:3b:33:
                    dc:aa:63:aa:b3:93:b9:4d:4e:54:c7:e8:1b:59:b7:
                    ee:60:85:12:48:85:48:52:e9:b9:e1:b5:3f:84:59:
                    10:85:26:fe:19:df:d3:76:9d:d6:be:2b:e0:09:ac:
                    63:84:dc:d1:48:48:d1:be:4b:ac:0f:83:db:ba:9f:
                    e1:bb:59:83:11:53:e6:92:15:8e:c1:cb:cb:70:48:
                    87:a2:c3:64:c3:25:b7:dd:46:0a:6a:6e:37:9c:cb:
                    74:c8:b0:f7:ee:46:e5:90:c5:a4:cb:69:da:92:bc:
                    1f:cd:07:04:b1:33:28:97:be:08:d1:d9:1c:4f:86:
                    87:a0:4d:3d:64:4f:52:a7:be:ab:82:5e:ce:f8:d6:
                    0f:40:2d:84:96:42:56:61:0f:ee:e1:d2:e6:4d:f8:
                    c7:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:4D:4B:1A:1E:4B:36:F8:A1:36:22:77:DF:12:A4:82:F9:F7:5F:AD
            X509v3 Authority Key Identifier:
                keyid:D7:62:2B:E8:8A:5C:EA:EF:8C:33:0D:7E:96:FF:F4:35:E8:20:53:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:ac:6f:50:c4:2a:d7:cf:45:01:a0:0a:4f:b4:d3:ac:b1:90:
         18:0a:3c:ee:ac:45:97:99:34:5e:0b:87:38:9e:6b:55:9e:33:
         3e:8e:6e:44:a6:8e:20:8b:7c:56:b2:df:46:c1:b4:cb:6e:02:
         77:52:4a:5b:47:7f:a5:d5:bd:90:b8:33:4a:9f:45:27:6c:a8:
         17:7b:c7:e0:79:c9:8b:48:cd:fd:45:2a:eb:6e:36:94:e9:51:
         f1:d4:e8:5e:81:8c:43:32:d3:b5:37:3e:27:30:ab:4c:e3:08:
         10:39:da:06:17:0a:dc:ca:18:7a:fe:19:65:d6:af:11:b9:8a:
         ef:a7:74:13:5d:67:c1:ef:1f:3d:e7:c3:86:59:d8:27:cf:ac:
         58:6b:0a:67:28:22:7e:a4:be:5f:06:7e:e5:32:8d:8a:83:4a:
         a2:e4:03:e3:65:dd:9a:ac:13:a1:e8:35:2b:54:e3:a4:ad:cd:
         00:e1:2d:34:ea:fe:f0:b5:d9:e3:f4:44:d8:22:07:f2:15:d0:
         d6:86:12:0b:0e:7c:a5:89:d8:9a:1f:3b:b7:14:d7:34:d3:90:
         bb:d7:d1:40:1c:e9:6d:1b:0b:1e:ef:00:f3:20:11:c0:e5:1b:
         18:f8:21:0a:df:dc:8e:87:71:01:8a:7a:10:85:54:88:80:04:
         70:cb:f2:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:16:18 2026 by rpki-client