Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/0355f6-270c-42b8-b264-b0d7117d794f/1/T1VxCj6EBcGv2mxj6edzZu_GHnw.mft
File:                     T1VxCj6EBcGv2mxj6edzZu_GHnw.mft (raw, json)
Hash identifier:          o7mYSz0D7dNpA6tlQu5wazO5YelJe+PUqEI4o+uQYKM=
Subject key identifier:   7D:13:CE:94:E0:1F:16:C0:BD:D1:3F:65:7F:3D:7C:DC:F0:2C:48:8A
Authority key identifier: 4F:55:71:0A:3E:84:05:C1:AF:DA:6C:63:E9:E7:73:66:EF:C6:1E:7C
Certificate issuer:       /CN=4f55710a3e8405c1afda6c63e9e77366efc61e7c
Certificate serial:       01A0E7E3B23EDF0E25CD63588ECD90E9D671
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T1VxCj6EBcGv2mxj6edzZu_GHnw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/0355f6-270c-42b8-b264-b0d7117d794f/1/T1VxCj6EBcGv2mxj6edzZu_GHnw.mft
Manifest number:          067C
Signing time:             Mon 28 Sep 2026 12:00:54 +0000
Manifest this update:     Mon 28 Sep 2026 12:00:54 +0000
Manifest next update:     Tue 29 Sep 2026 12:00:54 +0000
Files and hashes:         1: T1VxCj6EBcGv2mxj6edzZu_GHnw.crl (hash: ZqHCHR569wWUNdOmd5JL/cdsijlf/mKHYi/1zaKsUnQ=)
                          2: W5VWeCgeMH31LiSdes2U3Q6aIIY.asa (hash: wKeoYtqhAcqu4A/KO7i8oY8n2kNsBWSJA7RAqOZK0vU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/0355f6-270c-42b8-b264-b0d7117d794f/1/T1VxCj6EBcGv2mxj6edzZu_GHnw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/0355f6-270c-42b8-b264-b0d7117d794f/1/T1VxCj6EBcGv2mxj6edzZu_GHnw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T1VxCj6EBcGv2mxj6edzZu_GHnw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 12:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e7:e3:b2:3e:df:0e:25:cd:63:58:8e:cd:90:e9:d6:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f55710a3e8405c1afda6c63e9e77366efc61e7c
        Validity
            Not Before: Sep 28 12:00:54 2026 GMT
            Not After : Sep 29 12:00:54 2026 GMT
        Subject: CN=7d13ce94e01f16c0bdd13f657f3d7cdcf02c488a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:1e:d2:5a:1f:93:ee:81:46:4a:69:b4:4a:d5:
                    f0:e3:de:dc:9c:9a:68:90:f2:7b:66:3a:04:73:b7:
                    57:17:c3:df:22:e2:aa:0d:4f:ed:76:11:de:c5:bb:
                    b6:3c:36:ec:3f:44:30:cf:5b:26:fa:23:02:0d:2d:
                    03:d1:1c:42:16:64:a5:a9:c3:48:b5:58:2c:72:96:
                    11:6e:81:d1:03:fc:0c:f2:30:9c:b3:24:c5:c6:0a:
                    61:4e:7c:7f:88:66:d4:b2:0c:a0:90:1d:0a:cb:bf:
                    98:17:8a:79:3a:d4:0c:de:b2:bb:34:44:ca:5d:08:
                    09:6b:04:17:09:29:53:3e:af:ed:0d:29:35:57:a5:
                    6e:65:95:56:55:bd:d7:b9:82:7f:51:aa:22:2b:78:
                    cd:50:bf:74:0a:11:79:68:b0:ea:1c:28:33:83:af:
                    0a:16:18:b3:c6:c7:9f:d3:52:ed:f9:f5:88:7c:04:
                    a6:1c:2b:d8:cf:d8:b6:0b:4b:57:ce:c9:a9:aa:4e:
                    f4:e5:76:1d:36:e7:6f:16:af:2c:3a:71:91:2b:58:
                    d7:c4:ad:40:2a:18:1f:49:82:46:c8:3a:98:b1:fb:
                    98:e2:c1:da:af:34:ff:49:ad:db:37:4c:60:d7:9d:
                    ab:16:50:2d:0c:f5:cd:26:9b:c6:36:ac:86:f5:43:
                    98:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:13:CE:94:E0:1F:16:C0:BD:D1:3F:65:7F:3D:7C:DC:F0:2C:48:8A
            X509v3 Authority Key Identifier:
                keyid:4F:55:71:0A:3E:84:05:C1:AF:DA:6C:63:E9:E7:73:66:EF:C6:1E:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T1VxCj6EBcGv2mxj6edzZu_GHnw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0355f6-270c-42b8-b264-b0d7117d794f/1/T1VxCj6EBcGv2mxj6edzZu_GHnw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0355f6-270c-42b8-b264-b0d7117d794f/1/T1VxCj6EBcGv2mxj6edzZu_GHnw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:56:b1:ab:eb:b0:f0:04:7e:e0:71:25:68:4e:59:d0:1a:8e:
         fe:da:c3:b8:79:ee:ba:8a:68:6f:b4:fa:5f:38:3e:78:8f:09:
         e1:f4:c8:c4:a1:ea:12:23:f5:b9:95:4b:a2:f7:3c:0b:08:45:
         6c:8a:91:57:0c:24:bf:a1:c5:db:e9:f4:7a:37:d2:13:e3:ce:
         d9:c6:2d:cc:18:f2:90:65:01:d6:ba:e9:2e:1c:96:45:c7:7c:
         31:d6:96:99:75:1c:d5:a7:45:ba:0b:34:6e:bf:cb:51:84:12:
         71:74:a3:97:ad:51:27:fe:99:e9:07:5f:fc:15:8a:6e:96:3b:
         9b:4a:92:d4:b4:c6:1c:a5:37:e8:d1:85:2b:f2:c9:6e:43:b7:
         cd:a9:04:c7:de:60:54:aa:aa:d9:60:0d:a2:b0:c5:2c:88:ee:
         af:c3:c9:06:91:0c:d0:55:bc:c6:82:52:39:f6:71:4c:f0:f2:
         d2:2c:bb:78:08:c7:aa:0d:ab:fc:6f:35:9b:ec:8c:59:fc:d6:
         ca:64:5f:99:a0:c5:f2:ba:cb:52:56:08:e8:25:71:98:be:aa:
         64:14:3f:71:8f:2e:b3:d3:92:f2:1b:c5:0a:c4:86:b7:02:d4:
         a9:36:51:22:66:3e:aa:72:6c:51:4a:0a:4c:ff:c2:a4:8f:46:
         dc:8c:3c:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:21:25 2026 by rpki-client