Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.mft
File:                     dFtsPJq97bluse8_f3-nAFdSLH8.mft (raw, json)
Hash identifier:          dsE3DgsGsg7Sz/BCpbltxS0cXJgFlMqh8YFMbj5xEYI=
Subject key identifier:   A3:60:A5:61:9B:97:DB:09:94:4E:E3:4E:75:C3:D8:6E:D1:3E:BB:9B
Authority key identifier: 74:5B:6C:3C:9A:BD:ED:B9:6E:B1:EF:3F:7F:7F:A7:00:57:52:2C:7F
Certificate issuer:       /CN=745b6c3c9abdedb96eb1ef3f7f7fa70057522c7f
Certificate serial:       01A0CA7DD7F321A6481AC79D98CA9A0A2B50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dFtsPJq97bluse8_f3-nAFdSLH8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.mft
Manifest number:          1069
Signing time:             Tue 22 Sep 2026 19:00:39 +0000
Manifest this update:     Tue 22 Sep 2026 19:00:39 +0000
Manifest next update:     Wed 23 Sep 2026 19:00:39 +0000
Files and hashes:         1: dFtsPJq97bluse8_f3-nAFdSLH8.crl (hash: 1q8IjIcELpvv6s2+zimqBw7xC6GQjP0gk8SkBYdJFGw=)
                          2: vj0F4FgcNslWI5L8V7Dw0mIMfn0.roa (hash: j/Kb2HDxy8LEtTBE0A03kW5/ZkhjPjh8YBluaGzICqE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dFtsPJq97bluse8_f3-nAFdSLH8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 19:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ca:7d:d7:f3:21:a6:48:1a:c7:9d:98:ca:9a:0a:2b:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=745b6c3c9abdedb96eb1ef3f7f7fa70057522c7f
        Validity
            Not Before: Sep 22 19:00:39 2026 GMT
            Not After : Sep 23 19:00:39 2026 GMT
        Subject: CN=a360a5619b97db09944ee34e75c3d86ed13ebb9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9c:12:c3:a1:6a:db:47:ba:e0:7a:2d:4d:d8:
                    bb:76:27:8b:00:04:c1:9c:33:ab:ae:fc:3a:d0:f3:
                    e3:f8:9f:01:0e:eb:66:77:fe:16:54:e6:23:50:12:
                    10:fd:b3:37:46:5e:61:09:f4:89:a8:0c:9d:a7:ac:
                    42:13:a1:a5:23:93:a1:cd:ad:03:06:24:99:59:73:
                    51:73:7d:5c:ab:2c:be:b3:18:40:52:83:84:47:66:
                    32:a2:ec:b2:67:72:83:a2:73:91:f6:7b:24:83:14:
                    ef:61:7e:d8:87:44:2b:b5:67:89:51:b6:1a:a3:e8:
                    58:5d:74:81:8e:46:ab:15:29:10:6b:09:ee:31:d3:
                    a0:f8:38:5f:af:c5:aa:51:1a:0c:60:bd:02:28:76:
                    5a:bd:57:bc:44:a6:7d:3b:96:7f:b8:cf:4c:06:40:
                    bb:8d:5b:9b:16:dc:5f:91:7a:3c:87:d3:da:3f:2c:
                    f0:ee:77:61:4e:f2:c4:8a:40:65:62:0d:e7:ff:d4:
                    85:2c:60:6d:5f:dc:14:1e:10:b7:0c:03:3a:8e:8f:
                    f2:e7:93:f6:11:19:e8:53:18:c4:e0:7e:73:90:a0:
                    6e:28:c1:c9:55:4f:af:3f:2a:c6:f4:cd:fc:46:b4:
                    59:8d:df:ab:1e:72:0a:1b:48:e5:bf:cb:22:68:6d:
                    d9:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:60:A5:61:9B:97:DB:09:94:4E:E3:4E:75:C3:D8:6E:D1:3E:BB:9B
            X509v3 Authority Key Identifier:
                keyid:74:5B:6C:3C:9A:BD:ED:B9:6E:B1:EF:3F:7F:7F:A7:00:57:52:2C:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFtsPJq97bluse8_f3-nAFdSLH8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:ed:fb:66:24:05:f0:bf:03:25:7d:d7:a4:70:f6:72:eb:8c:
         e3:b8:9d:87:42:a2:32:4b:07:12:ab:7a:18:7c:5f:65:ab:50:
         1c:d6:75:c9:b4:62:03:3f:4f:e5:43:45:fd:5e:f1:4c:72:f8:
         f0:24:2e:8b:92:65:83:e6:4e:38:5e:2d:ce:32:b2:24:21:c7:
         66:eb:55:bd:42:25:5b:27:65:47:36:5a:bb:b4:87:e3:29:04:
         06:b8:bb:6e:21:db:a9:67:c8:b4:d2:0e:9b:7d:34:38:6a:4c:
         e2:d2:81:7d:48:4e:19:93:e6:a3:f8:2b:a8:2b:5e:ce:5a:6f:
         ed:fa:b4:e2:e8:c9:55:7e:20:54:7d:98:9c:bb:25:9c:f1:78:
         44:16:ca:af:cf:bb:9d:85:3d:ac:b0:5a:c8:34:d3:96:b9:76:
         90:a4:f4:ae:78:02:12:64:7c:da:e6:e5:7e:dc:99:89:59:ef:
         a0:03:b4:5d:10:e0:c2:e0:44:02:a0:7a:ba:80:87:ba:04:ef:
         ff:83:5d:f4:d2:64:24:cd:e3:f1:66:8a:a0:c6:e6:86:46:d6:
         5e:b6:99:42:76:08:f8:78:31:1c:04:1a:df:3b:74:2b:1b:cc:
         77:9a:b6:a3:cc:c8:eb:9b:a7:f5:81:e8:f4:7f:4c:4d:47:e4:
         86:22:23:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:40:57 2026 by rpki-client