Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.mft
File:                     hSC3fQNbkS_6QG393ynjopY-aQQ.mft (raw, json)
Hash identifier:          wnLMNh8B9fUovtM+FW02t2KY1kqyp1nAkzvMGtpORc0=
Subject key identifier:   3D:EE:6D:73:20:2E:63:D4:99:B8:F4:A3:0B:A1:01:4F:1A:09:1B:31
Authority key identifier: 85:20:B7:7D:03:5B:91:2F:FA:40:6D:FD:DF:29:E3:A2:96:3E:69:04
Certificate issuer:       /CN=8520b77d035b912ffa406dfddf29e3a2963e6904
Certificate serial:       01A0CA46A5588223346E4683A49C6172FA3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hSC3fQNbkS_6QG393ynjopY-aQQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.mft
Manifest number:          0C7F
Signing time:             Tue 22 Sep 2026 18:00:22 +0000
Manifest this update:     Tue 22 Sep 2026 18:00:22 +0000
Manifest next update:     Wed 23 Sep 2026 18:00:22 +0000
Files and hashes:         1: Sillb4nEsk9ouNCXzONZ9guaHgo.roa (hash: kbWq0G9OhRAUE6xI4of3xM29A3/8ukL1B/VOzXX1Z7E=)
                          2: W1-b2_39t40IJEIlY1fU30KPC7Y.roa (hash: DG8YwHrN9i6MKPRhk3te8aFn4nTPHySMexyk/ryRI0I=)
                          3: hSC3fQNbkS_6QG393ynjopY-aQQ.crl (hash: SXg9AmFF2/57O1L3P9ueet+PhThtU7vZtUo+vZ1+G9U=)
                          4: q3L-DLkESBWHiQCDrzrriCchSdo.asa (hash: J3JSTCDpkSsTV/MAnz+RFfxXP4Ryp2u8ZqcS0lN7eB0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hSC3fQNbkS_6QG393ynjopY-aQQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ca:46:a5:58:82:23:34:6e:46:83:a4:9c:61:72:fa:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8520b77d035b912ffa406dfddf29e3a2963e6904
        Validity
            Not Before: Sep 22 18:00:22 2026 GMT
            Not After : Sep 23 18:00:22 2026 GMT
        Subject: CN=3dee6d73202e63d499b8f4a30ba1014f1a091b31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9a:cb:4a:77:c2:bb:48:56:1a:b1:fe:66:7e:
                    e4:96:6b:80:24:b4:70:1d:2b:97:61:44:c8:37:dd:
                    69:34:75:78:25:7b:04:2e:81:91:64:e7:81:ca:f5:
                    47:6c:5d:e9:7c:3a:ea:ca:db:28:94:ce:52:7c:53:
                    e5:da:0f:ac:45:e4:dd:80:43:e3:44:2a:ad:db:0f:
                    34:98:e1:9a:45:14:dd:b1:ad:52:57:3d:7c:1c:70:
                    e2:14:56:b4:89:af:25:d3:b1:5e:a7:48:04:5b:61:
                    60:0f:01:44:03:a4:8e:17:7c:14:dd:57:82:e3:93:
                    f0:12:01:97:6b:3c:66:a9:10:23:f9:36:15:eb:03:
                    d9:01:3e:06:06:27:db:27:3c:b4:48:3f:36:48:d2:
                    3c:55:27:0b:8d:65:73:98:64:50:c4:46:2e:d1:f9:
                    4c:11:2f:80:92:eb:08:4a:f1:61:02:bc:91:5e:93:
                    26:7f:e3:22:31:57:bc:55:09:b5:28:bc:c6:95:c2:
                    ca:86:c1:93:18:18:b4:f4:49:0c:cc:fc:f2:57:7f:
                    59:0c:05:39:4f:1b:7e:db:30:c7:92:50:92:06:a9:
                    36:78:1b:fe:20:08:d7:3b:29:59:f4:0f:ff:a5:dd:
                    98:11:61:5d:57:6b:cc:8c:8d:b9:96:55:d3:8d:bd:
                    ff:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:EE:6D:73:20:2E:63:D4:99:B8:F4:A3:0B:A1:01:4F:1A:09:1B:31
            X509v3 Authority Key Identifier:
                keyid:85:20:B7:7D:03:5B:91:2F:FA:40:6D:FD:DF:29:E3:A2:96:3E:69:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hSC3fQNbkS_6QG393ynjopY-aQQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:04:22:75:37:94:7d:2b:1b:7b:6a:62:55:84:3f:4b:e8:00:
         a2:01:86:de:53:d4:99:fd:22:90:da:3f:b7:1e:4d:55:54:37:
         0b:6f:f1:03:a1:01:90:d3:7f:a7:51:bf:c7:5c:fd:4d:d3:7a:
         52:6d:76:57:e2:d4:4d:57:e0:97:14:7e:bf:95:0f:d9:22:76:
         64:50:46:cd:0e:b9:02:5d:5d:f1:31:7c:2b:44:73:97:dc:b9:
         57:5c:8c:85:57:51:62:8f:1b:d3:79:71:77:bf:54:ef:2b:b4:
         ec:e4:aa:81:27:92:76:99:b9:e2:4d:d5:9d:3c:87:c7:24:cd:
         16:b4:5f:b9:16:99:e2:89:93:0a:da:2f:b7:79:10:97:1d:37:
         53:2e:ed:59:a5:22:30:08:50:3e:50:a5:b6:04:25:47:95:91:
         c1:dd:d0:6e:66:bd:7f:8b:6c:14:65:19:3b:fc:3e:8f:89:fc:
         d0:26:d5:69:ff:78:34:97:1d:ab:23:57:25:18:82:f2:5b:87:
         68:43:c7:80:a0:f2:cd:10:34:9a:f5:c6:f7:3a:48:41:6a:ed:
         85:d9:34:bc:94:01:4a:b0:4f:b8:54:ca:fe:a2:ae:eb:3e:ea:
         a1:5e:6d:ce:8f:f7:f8:4c:40:6d:0d:da:1d:75:6c:8d:c2:88:
         6a:0d:68:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:28:10 2026 by rpki-client