Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6e/9bed26-18fb-4ecf-a2a2-e4a31e79c9ce/1/pWGJNurjnydAQKDTMnz4gQLITG8.mft
File:                     pWGJNurjnydAQKDTMnz4gQLITG8.mft (raw, json)
Hash identifier:          dRAHE6V5+l3UFhMVnItnDTuGnv/+B7lQOf/EOpfUpnU=
Subject key identifier:   BC:58:77:6B:62:33:A4:AA:C4:9F:71:30:8B:06:7C:97:C9:6D:2E:AB
Authority key identifier: A5:61:89:36:EA:E3:9F:27:40:40:A0:D3:32:7C:F8:81:02:C8:4C:6F
Certificate issuer:       /CN=a5618936eae39f274040a0d3327cf88102c84c6f
Certificate serial:       01A0C2C47447B1485012968652B6635DCE62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pWGJNurjnydAQKDTMnz4gQLITG8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/9bed26-18fb-4ecf-a2a2-e4a31e79c9ce/1/pWGJNurjnydAQKDTMnz4gQLITG8.mft
Manifest number:          027C
Signing time:             Mon 21 Sep 2026 07:00:49 +0000
Manifest this update:     Mon 21 Sep 2026 07:00:49 +0000
Manifest next update:     Tue 22 Sep 2026 07:00:49 +0000
Files and hashes:         1: pWGJNurjnydAQKDTMnz4gQLITG8.crl (hash: qnPUpwVHrSHwJ2dKXHUbtsD9VhWuohQ5dAv7TFMohUU=)
                          2: vc4rQV1btws3GoUjJ72MXPBLjsA.roa (hash: vJx5UKv6BgNsvAF5bCtGkQAa0ljtx4RqY02ta/bz2CY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/9bed26-18fb-4ecf-a2a2-e4a31e79c9ce/1/pWGJNurjnydAQKDTMnz4gQLITG8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/9bed26-18fb-4ecf-a2a2-e4a31e79c9ce/1/pWGJNurjnydAQKDTMnz4gQLITG8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pWGJNurjnydAQKDTMnz4gQLITG8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 07:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c2:c4:74:47:b1:48:50:12:96:86:52:b6:63:5d:ce:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5618936eae39f274040a0d3327cf88102c84c6f
        Validity
            Not Before: Sep 21 07:00:49 2026 GMT
            Not After : Sep 22 07:00:49 2026 GMT
        Subject: CN=bc58776b6233a4aac49f71308b067c97c96d2eab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:42:10:33:a9:cc:de:0b:a6:5f:62:d1:08:1a:
                    74:6e:55:8c:df:f7:e1:79:79:06:7b:ca:37:98:fd:
                    85:b4:c8:9f:13:6c:33:3f:58:d7:95:56:3c:58:be:
                    7d:6d:fb:2d:ac:87:81:09:dd:94:8d:81:54:7e:75:
                    2a:fa:67:f8:54:72:be:46:42:ed:1e:45:78:49:1f:
                    db:ea:1e:29:32:c6:90:7e:3a:6b:9d:2e:a0:6a:b6:
                    d1:61:d5:d3:c0:a1:c5:58:6d:cb:f4:77:77:93:7b:
                    89:9b:15:89:f6:6d:8d:81:5c:c1:e9:6d:5a:91:c7:
                    49:41:ca:21:51:80:91:95:d8:66:94:ea:4d:5b:f6:
                    74:5b:e4:75:eb:78:1a:6b:51:7d:c4:87:c5:aa:35:
                    f6:5d:6c:5b:3b:c1:52:69:2f:72:a2:2a:57:3e:6f:
                    88:0b:8b:a0:0f:4e:49:e6:fa:e3:12:b9:4e:10:95:
                    ef:69:74:b2:73:49:e5:21:79:fd:d1:03:a4:64:af:
                    6e:cf:63:84:6f:d1:a0:fb:46:35:d4:c1:f1:16:87:
                    09:e4:04:13:ca:f2:c1:75:ff:e1:ac:49:b8:cd:fd:
                    6a:9b:62:6b:be:40:c0:c2:db:df:0e:bc:53:c2:68:
                    80:dd:79:70:f1:34:55:48:32:05:b0:2f:cf:d4:17:
                    00:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:58:77:6B:62:33:A4:AA:C4:9F:71:30:8B:06:7C:97:C9:6D:2E:AB
            X509v3 Authority Key Identifier:
                keyid:A5:61:89:36:EA:E3:9F:27:40:40:A0:D3:32:7C:F8:81:02:C8:4C:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pWGJNurjnydAQKDTMnz4gQLITG8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9bed26-18fb-4ecf-a2a2-e4a31e79c9ce/1/pWGJNurjnydAQKDTMnz4gQLITG8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9bed26-18fb-4ecf-a2a2-e4a31e79c9ce/1/pWGJNurjnydAQKDTMnz4gQLITG8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:40:70:9d:63:2b:7b:ea:c7:4c:2e:ac:99:fb:6e:d4:7b:12:
         6c:f9:e9:52:2b:0d:5f:bb:48:0e:85:8e:5d:6d:96:be:c9:c8:
         fb:50:91:6a:75:e1:12:cd:2c:70:da:c1:f4:29:f8:d0:d9:b7:
         7b:95:4b:00:47:f3:31:a6:58:22:7d:75:c1:bf:03:e2:01:e2:
         85:86:ae:e4:0f:7d:d6:71:11:7d:5c:20:37:ba:d2:51:0e:7e:
         5d:6d:91:a5:80:82:45:bd:3e:67:24:79:75:df:3a:df:a4:a7:
         78:66:de:83:f9:2c:ed:82:52:cb:13:fd:86:a3:7c:76:19:4f:
         88:6d:73:ec:34:00:e5:41:df:61:52:18:4d:42:90:93:13:ec:
         2a:e6:cf:78:1a:c2:61:17:8b:13:8b:fc:c2:dd:09:96:61:7e:
         9d:46:d3:8c:c4:d1:1c:f8:6a:7c:d2:23:99:d7:f8:b9:c6:6e:
         83:4f:33:36:f8:cb:d1:05:82:a1:9f:29:57:8c:35:4b:2c:1c:
         47:cb:08:f6:2d:a7:2c:36:2c:ca:67:55:24:f4:94:c8:82:18:
         a1:03:17:1a:73:1f:46:3d:63:dc:80:88:bb:c9:9b:1a:27:d9:
         40:5d:b7:20:dd:1c:31:9a:4c:a1:3e:70:06:5b:71:3c:19:70:
         15:01:64:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 15:31:54 2026 by rpki-client