Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/8020d8-0684-44f6-84d1-d1d0f96cad1e/1/E0vH5v379zjSP8XuXlrLUr77wFE.mft
File:                     E0vH5v379zjSP8XuXlrLUr77wFE.mft (raw, json)
Hash identifier:          NwhvBuJa4GL+gdjUpYt1ywU6rQfHhV+PrgkxGXYiODQ=
Subject key identifier:   F3:31:AE:A1:84:73:2A:9C:DD:C2:0E:38:41:D3:50:2A:9B:18:78:4A
Authority key identifier: 13:4B:C7:E6:FD:FB:F7:38:D2:3F:C5:EE:5E:5A:CB:52:BE:FB:C0:51
Certificate issuer:       /CN=134bc7e6fdfbf738d23fc5ee5e5acb52befbc051
Certificate serial:       01A0DF4EB855CFD37D5B644EB0AA61853F69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E0vH5v379zjSP8XuXlrLUr77wFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/8020d8-0684-44f6-84d1-d1d0f96cad1e/1/E0vH5v379zjSP8XuXlrLUr77wFE.mft
Manifest number:          19B7
Signing time:             Sat 26 Sep 2026 20:01:13 +0000
Manifest this update:     Sat 26 Sep 2026 20:01:13 +0000
Manifest next update:     Sun 27 Sep 2026 20:01:13 +0000
Files and hashes:         1: E0vH5v379zjSP8XuXlrLUr77wFE.crl (hash: mnQUtqgY/7kKrOQkXPxxuTItz6418xLI2EjY6Luvc9I=)
                          2: vy_8VDwLDdvgqOmtRCmEI1bn8fM.roa (hash: FU6gWknx4r9SNx85ldpTBO/Ox8NOWmKPGxQLrSXC4Ec=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/8020d8-0684-44f6-84d1-d1d0f96cad1e/1/E0vH5v379zjSP8XuXlrLUr77wFE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/8020d8-0684-44f6-84d1-d1d0f96cad1e/1/E0vH5v379zjSP8XuXlrLUr77wFE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E0vH5v379zjSP8XuXlrLUr77wFE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 19:30:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:df:4e:b8:55:cf:d3:7d:5b:64:4e:b0:aa:61:85:3f:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=134bc7e6fdfbf738d23fc5ee5e5acb52befbc051
        Validity
            Not Before: Sep 26 20:01:13 2026 GMT
            Not After : Sep 27 20:01:13 2026 GMT
        Subject: CN=f331aea184732a9cddc20e3841d3502a9b18784a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:99:45:38:53:8a:f6:d1:27:d0:d9:66:98:b6:
                    38:d8:a8:38:82:59:85:4c:3d:b3:a2:4d:f4:46:09:
                    dc:af:6d:64:e1:63:c3:c4:7b:9a:63:fc:de:b5:9c:
                    ef:1a:c8:e6:6e:db:a8:4f:f8:7f:31:c9:2f:95:9e:
                    1a:dd:a5:27:49:b7:32:07:93:b3:1a:cb:ff:bc:95:
                    7c:0f:87:f4:b1:0f:12:4b:59:25:64:d0:b5:db:b7:
                    c6:ec:30:31:29:d8:57:a5:36:89:b8:14:ba:c3:44:
                    7e:aa:73:1e:cb:fa:d5:ee:b0:42:3c:c0:7e:60:b8:
                    99:a2:04:a9:a1:05:e7:8e:17:8e:f6:43:3c:7e:23:
                    29:9b:7e:91:05:9a:92:8e:83:89:56:13:54:b5:77:
                    27:ba:af:56:ed:dc:70:68:c0:62:a8:ad:f9:b1:30:
                    db:2c:82:bb:b7:ae:e9:a2:ce:55:46:eb:3b:28:31:
                    7e:12:d9:94:8b:23:fb:1a:ba:a7:91:77:df:37:06:
                    3d:7b:d7:ec:d9:c6:1e:e1:e4:c6:25:b9:fc:bb:6a:
                    a8:15:39:2a:e5:cc:bc:2b:04:08:0e:84:d1:2f:2b:
                    07:d3:65:d5:a7:51:37:96:77:9c:73:01:80:ee:69:
                    84:49:63:a4:35:53:f1:dd:bd:75:38:ef:3b:1e:a5:
                    d4:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:31:AE:A1:84:73:2A:9C:DD:C2:0E:38:41:D3:50:2A:9B:18:78:4A
            X509v3 Authority Key Identifier:
                keyid:13:4B:C7:E6:FD:FB:F7:38:D2:3F:C5:EE:5E:5A:CB:52:BE:FB:C0:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E0vH5v379zjSP8XuXlrLUr77wFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8020d8-0684-44f6-84d1-d1d0f96cad1e/1/E0vH5v379zjSP8XuXlrLUr77wFE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8020d8-0684-44f6-84d1-d1d0f96cad1e/1/E0vH5v379zjSP8XuXlrLUr77wFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:d1:45:1d:7a:0c:17:f7:d0:c2:1a:c3:7b:c7:b4:0e:82:68:
         b5:2c:ec:2c:c2:02:58:dc:d5:29:97:3a:d7:21:1a:89:b6:60:
         d5:56:d9:53:9c:b4:7c:1a:f4:7b:e9:64:c1:4b:01:f7:c6:56:
         84:a0:d5:f1:44:92:ae:70:a5:2b:f6:46:0b:95:12:f1:a7:af:
         69:e0:91:9b:f4:67:d3:8a:f8:5a:f2:28:d9:fc:96:94:60:8c:
         2d:0a:b4:04:be:0f:dc:0e:80:79:27:3e:92:4e:f1:a3:90:1f:
         fe:ab:09:7e:80:c8:a4:11:d3:e6:33:eb:5e:4d:5c:34:7e:4f:
         30:54:3e:9f:c8:4a:e0:b1:ba:f1:c1:f1:1e:4c:56:88:8c:a6:
         78:63:89:c6:d8:86:e3:bd:8b:b2:a3:24:20:0c:01:7d:8f:3b:
         eb:04:53:91:aa:1f:a0:7b:9f:f2:8d:ec:96:05:f0:d1:59:d3:
         ad:3f:50:6d:60:54:15:e7:58:c0:01:89:83:d5:c9:7a:68:71:
         47:09:c8:4c:f1:8e:c5:05:dd:e3:1a:70:f4:66:28:ce:27:ae:
         04:cc:ff:3e:a0:a8:22:0a:60:72:da:ee:44:7d:06:ee:3f:8e:
         94:bd:80:a5:96:85:61:ac:c9:37:25:7b:4d:32:99:3e:5c:18:
         08:93:c0:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 22:38:12 2026 by rpki-client