Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.mft
File:                     31OmtxkZem51F1dNOYfzHrnp1Mk.mft (raw, json)
Hash identifier:          q7BrXXIv7t2GURQoaJE6XpTjj8XGEN5uiHG1NqrR7ZA=
Subject key identifier:   C4:86:0D:C3:B2:54:1D:F9:A0:A9:96:B4:6B:96:33:FD:D8:88:94:C5
Authority key identifier: DF:53:A6:B7:19:19:7A:6E:75:17:57:4D:39:87:F3:1E:B9:E9:D4:C9
Certificate issuer:       /CN=df53a6b719197a6e7517574d3987f31eb9e9d4c9
Certificate serial:       01A0C6D85CD01EA84C85F8B390F996D20B2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/31OmtxkZem51F1dNOYfzHrnp1Mk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.mft
Manifest number:          19F9
Signing time:             Tue 22 Sep 2026 02:01:03 +0000
Manifest this update:     Tue 22 Sep 2026 02:01:03 +0000
Manifest next update:     Wed 23 Sep 2026 02:01:03 +0000
Files and hashes:         1: 31OmtxkZem51F1dNOYfzHrnp1Mk.crl (hash: Ru+xZxXuQa5kIZnBgeOFbmdvAxcuMmXnGuZ0uHd8wBI=)
                          2: jRSx240EFvikEXOWUrVqRyU2b0s.roa (hash: bVFXm7wLR7zi83z8MQIWEvOELjneGFr/AACpBxvKs98=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/31OmtxkZem51F1dNOYfzHrnp1Mk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 02:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c6:d8:5c:d0:1e:a8:4c:85:f8:b3:90:f9:96:d2:0b:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df53a6b719197a6e7517574d3987f31eb9e9d4c9
        Validity
            Not Before: Sep 22 02:01:03 2026 GMT
            Not After : Sep 23 02:01:03 2026 GMT
        Subject: CN=c4860dc3b2541df9a0a996b46b9633fdd88894c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:69:e7:6a:6e:a5:f8:dd:b8:de:55:0d:11:0d:
                    a8:c5:0e:1b:24:a9:c1:2f:16:e8:93:4e:72:0b:9f:
                    9e:de:5a:96:19:a8:18:e3:4d:ff:02:43:2b:e0:b0:
                    3e:fa:33:86:90:88:be:5b:39:2d:32:f4:5a:f9:67:
                    17:d6:6b:c4:a2:88:69:5f:0e:c5:63:0e:67:36:9a:
                    c7:4d:51:d7:6a:fb:bb:05:94:06:6f:14:74:0b:e7:
                    1c:78:bd:45:0b:f9:3b:c6:97:4c:1e:c3:b5:78:8b:
                    24:d2:dc:bb:1a:5b:54:46:c1:4d:de:c8:34:a3:23:
                    ef:4a:a4:9b:98:28:f9:e8:59:23:a3:98:46:15:2b:
                    14:c2:1a:59:7d:89:8c:ba:68:12:e5:db:ff:fe:71:
                    94:88:5f:c6:f7:b0:9b:08:78:69:c2:17:1a:91:ec:
                    9f:29:58:c2:11:e4:ed:5e:e2:cf:4b:c3:60:ae:7e:
                    65:f8:7b:a2:71:da:fe:9b:75:76:ef:a8:80:af:d0:
                    1d:a4:4e:a1:1b:60:3d:51:15:9e:7d:47:c4:c0:2b:
                    df:f0:07:25:d4:01:1d:9b:ec:28:51:a3:91:ed:f5:
                    a4:db:ae:fd:9b:c7:ab:28:46:16:7e:5b:e5:18:8a:
                    48:d8:56:9a:94:f1:af:71:22:47:c2:b9:74:f0:a9:
                    ae:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:86:0D:C3:B2:54:1D:F9:A0:A9:96:B4:6B:96:33:FD:D8:88:94:C5
            X509v3 Authority Key Identifier:
                keyid:DF:53:A6:B7:19:19:7A:6E:75:17:57:4D:39:87:F3:1E:B9:E9:D4:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/31OmtxkZem51F1dNOYfzHrnp1Mk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:48:fc:b6:3c:fb:b3:f2:30:5e:66:32:c7:02:76:75:34:df:
         70:5f:7c:88:81:ba:f3:ce:8f:f1:25:c5:de:97:09:17:a2:ac:
         5c:e6:bc:c0:9b:8b:9e:aa:c6:bb:a3:97:db:d9:80:52:db:da:
         0c:3c:3b:8a:44:54:90:cb:b3:1e:78:9c:b5:ab:a1:78:d8:b2:
         bd:cd:54:f5:db:74:82:e1:27:53:a6:92:32:80:0d:47:a1:51:
         01:64:3f:cf:70:4e:2a:bf:69:14:7a:6a:1f:65:dc:e3:68:e6:
         87:ab:ee:47:62:35:86:0a:67:87:03:db:5a:a9:c9:ae:e0:ec:
         09:90:a4:30:45:1a:e2:ea:dd:32:19:21:74:91:ea:7d:57:eb:
         c4:74:b7:8f:a9:4b:e7:f0:e3:04:86:ed:9f:6e:43:2c:22:52:
         64:eb:df:6a:38:6b:5e:ea:40:c1:d1:f7:3b:cb:d8:39:a3:de:
         c7:60:df:c7:dc:15:66:4c:fb:7f:16:ec:7b:0a:2f:62:f9:24:
         cc:cb:a2:5d:a3:7b:7c:55:27:6a:dd:07:aa:9a:3a:7b:78:19:
         90:67:85:27:75:13:5b:24:53:ae:22:a2:0a:e8:b8:cf:6f:48:
         f7:e9:14:f4:d4:0c:1c:01:e1:f1:76:73:62:f0:11:9e:9c:53:
         0a:7f:75:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 09:14:51 2026 by rpki-client