Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.mft
File:                     01GoxXA90UCJWao1WSVY_1GiQ-k.mft (raw, json)
Hash identifier:          hPD6y/+GldxpPrY/ZzEuBOAT6HVUGqpPiPfByX72otY=
Subject key identifier:   C8:B9:67:3D:75:DF:4F:C3:9B:66:C2:D5:E3:26:7D:3E:57:54:42:0D
Authority key identifier: D3:51:A8:C5:70:3D:D1:40:89:59:AA:35:59:25:58:FF:51:A2:43:E9
Certificate issuer:       /CN=d351a8c5703dd1408959aa35592558ff51a243e9
Certificate serial:       01A0E8889C1AA9F90869E15AEA8616760758
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/01GoxXA90UCJWao1WSVY_1GiQ-k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.mft
Manifest number:          0698
Signing time:             Mon 28 Sep 2026 15:01:01 +0000
Manifest this update:     Mon 28 Sep 2026 15:01:01 +0000
Manifest next update:     Tue 29 Sep 2026 15:01:01 +0000
Files and hashes:         1: 01GoxXA90UCJWao1WSVY_1GiQ-k.crl (hash: +TtgkNGd3NFTQEUkW6+/m5FrXUjmqb45BVF/nOtROFM=)
                          2: 9QlF0IX_u34_i50MZFQglOV4b78.roa (hash: FaOLBQU7OKAasfBGnRJ98t12gmWw6oMThOw0VH/q8mI=)
                          3: K3ua2RrqGcbdB2SIo8hldBAl3_E.roa (hash: 3r2KWl0kTZ/mtXETApfCg3qAcK7g4mRubdUIUTx0FZU=)
                          4: NcSh_-Ffauem6ez7_yno8PhT3YA.roa (hash: x+fdD0W14LGnfLhl1bXQbaRHap4bSB42pwGqiN2+NHI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/01GoxXA90UCJWao1WSVY_1GiQ-k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 14:02:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e8:88:9c:1a:a9:f9:08:69:e1:5a:ea:86:16:76:07:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d351a8c5703dd1408959aa35592558ff51a243e9
        Validity
            Not Before: Sep 28 15:01:01 2026 GMT
            Not After : Sep 29 15:01:01 2026 GMT
        Subject: CN=c8b9673d75df4fc39b66c2d5e3267d3e5754420d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:06:a8:67:07:c3:2a:70:21:fb:fc:ff:7f:a0:
                    80:72:f1:ef:1a:d3:3a:63:fc:a5:25:db:a4:88:f7:
                    d0:a4:ba:53:c2:5f:c7:da:21:e0:ab:6e:4a:5e:f5:
                    bd:c5:67:f5:40:53:59:34:d7:60:cb:8c:5b:c7:54:
                    d7:7b:49:f1:2c:80:32:ee:d4:34:a7:76:e5:00:ac:
                    09:e5:5e:fe:b4:a7:dc:c2:57:21:b7:25:98:ae:dc:
                    6f:86:70:89:c2:ad:c9:4b:71:51:22:a0:3f:85:2b:
                    46:a1:5a:2e:f9:d4:74:07:44:d6:b5:01:5a:9a:83:
                    f5:60:b8:c0:fd:8a:4d:6a:78:31:84:01:86:59:42:
                    01:a5:0d:eb:f8:f8:7a:31:2a:48:8c:3e:50:2d:5b:
                    d3:fd:b4:d3:c8:8c:bd:5c:88:54:c0:3e:be:e9:b3:
                    df:18:99:e5:1e:b6:ac:f6:c7:14:15:2b:9a:03:20:
                    c5:a9:e7:66:9a:9e:68:f1:96:5c:4e:ea:7d:52:d5:
                    02:49:61:19:ff:be:f5:b1:73:34:08:d4:0e:bf:02:
                    4d:c7:70:c2:1c:b7:49:28:50:fe:32:ff:06:85:c2:
                    67:a1:4d:e4:c9:10:25:2e:78:c6:44:05:fa:03:36:
                    ee:ab:b1:09:ad:e4:a3:1d:25:a0:ea:2c:86:38:65:
                    c1:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:B9:67:3D:75:DF:4F:C3:9B:66:C2:D5:E3:26:7D:3E:57:54:42:0D
            X509v3 Authority Key Identifier:
                keyid:D3:51:A8:C5:70:3D:D1:40:89:59:AA:35:59:25:58:FF:51:A2:43:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01GoxXA90UCJWao1WSVY_1GiQ-k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:06:85:3e:48:d8:54:0d:3c:d4:2a:7c:dd:f7:62:99:a1:32:
         f4:42:6f:bd:45:48:98:0e:2c:78:8f:57:40:b8:41:ee:83:e4:
         bc:87:c0:e8:1d:b7:d2:70:17:88:d7:48:65:51:b4:49:8a:c9:
         48:ec:4e:3a:2d:55:c4:38:ba:44:9e:f8:d2:f1:3b:d2:f2:31:
         ca:ac:d7:25:e3:02:2b:e1:12:6e:d0:06:98:72:6d:81:23:0a:
         c0:b2:2e:eb:ef:7d:db:cd:2a:08:5f:ba:ed:bf:67:f6:e4:18:
         4d:87:28:e9:06:5a:a7:d2:75:cb:55:e5:d4:a9:da:32:d8:9c:
         97:aa:7b:7b:60:3d:e7:7e:c1:c6:22:0d:44:8f:06:3a:47:4b:
         e2:2c:63:b2:b6:7d:3b:16:9f:8a:99:60:b7:74:3b:ef:19:aa:
         f6:9c:44:b0:57:06:ce:82:a6:f1:92:ca:3b:a4:da:c1:d2:88:
         b2:96:95:0b:71:93:74:3f:68:e9:24:8a:eb:3d:a3:da:e5:c6:
         5b:bf:97:1d:c0:3e:f5:61:af:5d:d3:0a:a5:83:25:90:ca:a4:
         00:92:56:7d:a8:ff:39:0c:29:5a:d7:99:f2:ba:98:b0:36:26:
         0b:3b:08:f8:93:a4:9b:c7:ed:c8:7b:44:06:4b:3f:61:fe:23:
         e7:db:30:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----