Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft
File:                     CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft (raw, json)
Hash identifier:          iEch1uS3pY4L/KWtr9GZmgSqgBXNKddpuPxn6CI81tg=
Subject key identifier:   DD:E6:53:F5:AE:E4:54:10:86:92:B9:77:69:E3:AB:E0:4E:9A:FF:9F
Authority key identifier: 08:B3:EB:5F:B3:BA:76:56:E1:13:57:83:48:29:EE:CA:F4:41:21:2E
Certificate issuer:       /CN=08b3eb5fb3ba7656e11357834829eecaf441212e
Certificate serial:       01A0C66A787E4302531F8BC3A71E2FD7A33F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CLPrX7O6dlbhE1eDSCnuyvRBIS4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft
Manifest number:          06A8
Signing time:             Tue 22 Sep 2026 00:01:01 +0000
Manifest this update:     Tue 22 Sep 2026 00:01:01 +0000
Manifest next update:     Wed 23 Sep 2026 00:01:01 +0000
Files and hashes:         1: CLPrX7O6dlbhE1eDSCnuyvRBIS4.crl (hash: uP14MnC3iMgjaZfUPPhd5jdsCjT3GbHZyYgqcz6ktyM=)
                          2: aRuPqNH6CePYonZXCvJpNhdLTq4.roa (hash: sDab1uY8COS+SQpx2FBlz4C/BxfEX3Pxl+YkMtnLT5w=)
                          3: knrDAil7OO-Yx2NTo_oTE0lWvG0.roa (hash: EQdRod3nZJJQ0luHMt9XKGtHT/MSluOGADpnfRGbDAg=)
                          4: xHh-97Lta5LNVTnO8SR2JedTzJQ.roa (hash: YnOTNh9VfWJM3zMtcxSBKdQt1SEdIDNsrihIoA70J5s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CLPrX7O6dlbhE1eDSCnuyvRBIS4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 19:45:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c6:6a:78:7e:43:02:53:1f:8b:c3:a7:1e:2f:d7:a3:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08b3eb5fb3ba7656e11357834829eecaf441212e
        Validity
            Not Before: Sep 22 00:01:01 2026 GMT
            Not After : Sep 23 00:01:01 2026 GMT
        Subject: CN=dde653f5aee454108692b97769e3abe04e9aff9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:58:c0:9d:56:1b:d6:f5:11:e8:e9:b4:9b:78:
                    4d:03:76:ad:05:c7:ff:d5:aa:18:31:80:28:10:3a:
                    e9:02:10:eb:bb:3e:05:5e:9e:79:2c:92:98:65:a0:
                    7e:5e:db:28:a6:db:dd:5a:b0:ad:bc:de:45:22:8f:
                    0a:3e:a9:e5:dd:3c:1c:19:5c:14:6c:f5:6e:bf:f2:
                    ac:a4:9f:b3:6f:b3:9c:de:91:50:93:ec:2a:62:ee:
                    15:36:65:61:9e:49:f0:5e:65:96:f5:a3:7e:34:67:
                    62:80:21:0b:2c:e5:92:a9:69:e6:0c:a7:96:eb:b3:
                    b1:c1:17:3f:43:c8:83:eb:dd:d6:b9:77:35:bf:f5:
                    b9:ff:29:cf:bc:30:7f:7d:f8:7c:a2:63:7b:1c:59:
                    8e:f4:09:20:36:56:e5:1c:ff:37:11:50:c0:1d:be:
                    02:a1:af:11:e3:3d:43:b6:a7:b6:04:63:4b:aa:dc:
                    9b:bd:39:8a:3c:07:6f:c9:49:8d:c6:7c:de:67:84:
                    90:69:e4:67:af:92:cd:83:27:83:7e:a1:77:8b:5f:
                    54:b2:31:99:94:02:5b:ff:df:19:0a:9a:f7:72:46:
                    c9:f8:9a:be:63:e4:2f:5c:4c:52:df:3b:fd:6b:fe:
                    60:e3:04:00:65:a0:67:ae:34:90:d8:e8:77:f6:4e:
                    58:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:E6:53:F5:AE:E4:54:10:86:92:B9:77:69:E3:AB:E0:4E:9A:FF:9F
            X509v3 Authority Key Identifier:
                keyid:08:B3:EB:5F:B3:BA:76:56:E1:13:57:83:48:29:EE:CA:F4:41:21:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLPrX7O6dlbhE1eDSCnuyvRBIS4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:95:dd:e3:26:2c:ce:4c:83:27:64:dc:f9:37:fa:7f:93:c1:
         37:cd:6b:fe:1f:f4:9d:89:48:9f:f7:7a:2e:4e:5f:82:7e:91:
         27:f5:d4:36:5f:be:20:2f:6e:40:c8:b0:cd:ad:9f:7b:fb:c1:
         f6:c8:6c:b5:d5:ce:9b:28:e2:90:7d:ec:3a:e8:67:e9:08:0c:
         f6:f2:78:f1:18:07:ac:1f:61:45:00:92:5c:2c:e5:fd:af:a5:
         1a:a1:25:20:e6:25:33:e2:fe:41:72:b3:fb:25:c1:bc:3d:b7:
         a3:cc:3a:8d:b5:1f:d5:2f:d9:8f:4e:51:ac:94:52:50:ef:22:
         41:0c:92:4b:56:65:ae:cd:94:57:25:f0:dc:5c:97:75:14:e2:
         a2:f3:69:f0:4b:3d:21:a3:49:a8:06:1d:99:e8:22:a7:03:48:
         eb:ce:84:82:68:c5:67:b0:15:5b:7c:8b:3e:7f:a3:00:2d:3c:
         a5:2e:5f:05:db:92:97:3c:16:75:8e:64:5f:02:90:ea:98:13:
         3b:b5:19:63:91:b9:2b:72:93:b8:e4:3d:92:d3:f1:45:ea:89:
         e3:06:b4:94:a3:e2:cb:83:7b:9c:53:cb:b0:fb:18:47:30:89:
         69:36:cf:67:a6:b8:73:b7:19:55:ff:18:91:d7:0e:25:61:e4:
         33:1b:1c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:49:41 2026 by rpki-client