Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/0cc937-605c-4215-93e6-88af33cf5ac9/1/DeH7BAgcX3CAdrXdUHceLMxlaUU.mft
File:                     DeH7BAgcX3CAdrXdUHceLMxlaUU.mft (raw, json)
Hash identifier:          pzvlbeLROn0qy7jCHzC4XMvsNeVZp/qc065dffqFmtU=
Subject key identifier:   C7:13:53:07:44:D0:F8:7F:85:AC:23:4D:AC:FB:F4:F7:82:56:61:DF
Authority key identifier: 0D:E1:FB:04:08:1C:5F:70:80:76:B5:DD:50:77:1E:2C:CC:65:69:45
Certificate issuer:       /CN=0de1fb04081c5f708076b5dd50771e2ccc656945
Certificate serial:       01A10580A8A9550EFE69DC657CE74D97402B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DeH7BAgcX3CAdrXdUHceLMxlaUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/0cc937-605c-4215-93e6-88af33cf5ac9/1/DeH7BAgcX3CAdrXdUHceLMxlaUU.mft
Manifest number:          9F
Signing time:             Sun 04 Oct 2026 06:01:19 +0000
Manifest this update:     Sun 04 Oct 2026 06:01:19 +0000
Manifest next update:     Mon 05 Oct 2026 06:01:19 +0000
Files and hashes:         1: DeH7BAgcX3CAdrXdUHceLMxlaUU.crl (hash: FJDEaPZRgof0hlyBwx/Wce6KqLep5cimUdzxTQnOHNg=)
                          2: wI7UndC2M3BWU4VVyxjKuzxjr9A.roa (hash: Q4rnFLlrV4+tUIOjVRqfsksI79QiqJSMhbsO2L2+zVg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/0cc937-605c-4215-93e6-88af33cf5ac9/1/DeH7BAgcX3CAdrXdUHceLMxlaUU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/0cc937-605c-4215-93e6-88af33cf5ac9/1/DeH7BAgcX3CAdrXdUHceLMxlaUU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DeH7BAgcX3CAdrXdUHceLMxlaUU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 05:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:05:80:a8:a9:55:0e:fe:69:dc:65:7c:e7:4d:97:40:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0de1fb04081c5f708076b5dd50771e2ccc656945
        Validity
            Not Before: Oct  4 06:01:19 2026 GMT
            Not After : Oct  5 06:01:19 2026 GMT
        Subject: CN=c713530744d0f87f85ac234dacfbf4f7825661df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:19:d6:e5:5b:24:23:3d:16:f5:b4:2c:ce:ac:
                    cd:57:81:11:01:65:0e:1a:bd:c9:f1:63:00:3a:58:
                    19:39:d2:77:f1:53:99:af:b8:e7:6b:6f:4c:8e:75:
                    ad:64:49:8b:ad:ea:fe:a8:2d:e2:e0:77:0e:41:1e:
                    86:ab:5d:11:4f:ba:68:6e:43:93:ee:ff:b4:9a:2b:
                    e3:13:c6:96:31:56:78:76:e5:2b:69:b8:92:fd:43:
                    56:fa:d1:fa:23:ab:d5:18:61:ef:bc:5e:35:a1:ed:
                    77:5c:08:1b:1b:d7:4a:28:22:f6:03:44:28:d4:c2:
                    ee:1f:3d:f0:88:dd:92:d2:27:4c:5e:66:81:2d:a3:
                    76:9d:b6:cc:8c:62:79:0a:b9:9c:f2:ef:cd:25:07:
                    06:bd:ac:3d:d3:b3:40:2b:c2:f6:f5:c5:70:be:53:
                    ca:0d:62:e0:bc:c8:7b:64:b4:86:f9:23:7d:77:e7:
                    1c:86:1a:3c:02:9b:d7:19:ba:a7:f3:b7:4e:3b:62:
                    61:15:39:2e:91:03:e6:25:5a:80:2a:f6:22:7b:f6:
                    13:d2:e0:af:ba:b0:74:f3:f3:1e:07:20:34:e7:a6:
                    c0:af:ef:90:31:b3:ca:f6:8f:76:fe:17:c6:0b:88:
                    11:2b:c0:b9:9f:51:70:ce:27:04:36:76:68:29:75:
                    c4:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:13:53:07:44:D0:F8:7F:85:AC:23:4D:AC:FB:F4:F7:82:56:61:DF
            X509v3 Authority Key Identifier:
                keyid:0D:E1:FB:04:08:1C:5F:70:80:76:B5:DD:50:77:1E:2C:CC:65:69:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DeH7BAgcX3CAdrXdUHceLMxlaUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0cc937-605c-4215-93e6-88af33cf5ac9/1/DeH7BAgcX3CAdrXdUHceLMxlaUU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0cc937-605c-4215-93e6-88af33cf5ac9/1/DeH7BAgcX3CAdrXdUHceLMxlaUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:c3:c7:15:79:4f:60:e4:08:e9:db:c3:e1:82:6c:76:87:92:
         3f:cd:19:2f:21:d0:91:6a:a8:fc:fb:d4:d4:14:95:e2:48:0f:
         8c:9e:dc:27:e3:85:98:8c:21:7e:8a:63:ca:e8:c2:2b:e8:4d:
         30:84:a0:23:c3:38:be:9c:2c:64:81:f0:4a:b8:53:42:c9:99:
         05:c2:90:ec:08:96:a1:ed:46:97:9f:91:66:8a:a2:9d:4f:dc:
         0c:a0:aa:e8:58:86:c4:0e:69:d3:b1:cb:ae:56:dc:f2:1c:61:
         b9:9c:d4:0b:5d:61:50:15:fa:ff:44:4c:06:ac:e0:f8:37:7d:
         84:43:07:3e:6e:73:31:b9:e0:b1:6d:ae:d3:b9:56:d8:cf:ff:
         7f:bd:32:c4:54:a7:4e:26:ac:b9:c2:44:cb:83:45:99:e7:ea:
         79:c1:c4:a2:1d:11:49:76:4d:6f:4e:2a:b8:b1:f6:a5:45:3d:
         4e:b4:bd:c7:fd:05:24:28:38:30:f0:ef:c0:19:b8:94:3a:0c:
         e9:19:55:d7:0f:92:f3:a2:38:6e:8c:83:ae:29:08:4e:15:32:
         28:b6:89:8b:a1:35:18:a8:bd:12:aa:3f:8d:d5:6f:07:f4:ab:
         ab:4d:4c:90:62:ba:df:e8:05:5f:38:39:bf:f0:f6:c0:f0:a4:
         30:4a:61:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 12:58:41 2026 by rpki-client