Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/336084-d2cf-4346-a720-c4236465a10b/1/tGZGB9tMTT48FWLyjSDPuSMkGBA.mft
File:                     tGZGB9tMTT48FWLyjSDPuSMkGBA.mft (raw, json)
Hash identifier:          Vd8aV68nlC54bJzQbDGC7CxGjla01DyU3bV2STIfET0=
Subject key identifier:   F3:48:92:5B:9B:B4:2F:17:A4:F7:86:1F:0F:47:18:12:55:EB:C8:C7
Authority key identifier: B4:66:46:07:DB:4C:4D:3E:3C:15:62:F2:8D:20:CF:B9:23:24:18:10
Certificate issuer:       /CN=b4664607db4c4d3e3c1562f28d20cfb923241810
Certificate serial:       01A0D494A85C5698121B28637FED2921909B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tGZGB9tMTT48FWLyjSDPuSMkGBA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/336084-d2cf-4346-a720-c4236465a10b/1/tGZGB9tMTT48FWLyjSDPuSMkGBA.mft
Manifest number:          010E
Signing time:             Thu 24 Sep 2026 18:01:47 +0000
Manifest this update:     Thu 24 Sep 2026 18:01:47 +0000
Manifest next update:     Fri 25 Sep 2026 18:01:47 +0000
Files and hashes:         1: tGZGB9tMTT48FWLyjSDPuSMkGBA.crl (hash: haS9YBLZRuVYRpxfEqtDnvF2g2tgGLmIUGqlkmt3GMw=)
                          2: ziWW6n1B_UZcXiD6pfKzphrsK3A.roa (hash: hLVr8gy4usgiH3/VrSF1XURRYPhpaPisnOC7F4Eq2L8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/336084-d2cf-4346-a720-c4236465a10b/1/tGZGB9tMTT48FWLyjSDPuSMkGBA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/336084-d2cf-4346-a720-c4236465a10b/1/tGZGB9tMTT48FWLyjSDPuSMkGBA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tGZGB9tMTT48FWLyjSDPuSMkGBA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 14:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d4:94:a8:5c:56:98:12:1b:28:63:7f:ed:29:21:90:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4664607db4c4d3e3c1562f28d20cfb923241810
        Validity
            Not Before: Sep 24 18:01:47 2026 GMT
            Not After : Sep 25 18:01:47 2026 GMT
        Subject: CN=f348925b9bb42f17a4f7861f0f47181255ebc8c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:0d:33:7a:db:fb:bb:f3:25:3e:9e:f0:22:a3:
                    90:cd:04:8f:a0:6d:8f:09:c9:70:47:fd:02:cd:f5:
                    6e:b0:7a:f6:3c:28:c9:ee:a1:54:b8:45:fd:26:d6:
                    c7:13:8a:7e:46:95:8f:2c:cd:c7:c3:b4:4f:ce:55:
                    de:b7:0b:65:36:bc:6f:2b:ab:c5:23:21:74:aa:7f:
                    3f:f9:91:17:b0:8e:5f:d7:dd:21:b9:7b:89:fc:31:
                    c3:f6:50:61:50:e7:79:25:c4:33:5d:30:28:13:8c:
                    52:3c:62:d4:1d:b5:1c:99:65:2e:0a:f5:1e:05:ec:
                    19:48:d9:d0:0e:2e:be:70:60:21:61:30:7c:4f:07:
                    66:d3:ad:37:cb:9d:03:70:64:a8:3e:ad:38:da:ab:
                    52:1e:36:e5:e6:ba:43:bf:b8:bb:8b:cd:89:07:1e:
                    d6:0d:f6:c3:0f:ec:f9:3e:25:71:bd:c5:f2:c4:44:
                    1d:47:43:45:51:96:ce:89:05:ef:83:5e:01:78:17:
                    4c:7d:83:a8:f9:23:a1:3c:f0:51:af:22:a4:97:0a:
                    2b:ae:6c:4a:ef:ad:db:18:4d:31:7b:c6:1d:46:48:
                    e7:5f:d5:3f:8a:22:4e:c1:10:3a:97:5d:ff:d7:67:
                    50:61:42:d4:61:3f:28:42:7c:26:36:2f:ce:a6:53:
                    f8:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:48:92:5B:9B:B4:2F:17:A4:F7:86:1F:0F:47:18:12:55:EB:C8:C7
            X509v3 Authority Key Identifier:
                keyid:B4:66:46:07:DB:4C:4D:3E:3C:15:62:F2:8D:20:CF:B9:23:24:18:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGZGB9tMTT48FWLyjSDPuSMkGBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/336084-d2cf-4346-a720-c4236465a10b/1/tGZGB9tMTT48FWLyjSDPuSMkGBA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/336084-d2cf-4346-a720-c4236465a10b/1/tGZGB9tMTT48FWLyjSDPuSMkGBA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:6f:1d:22:f3:b7:db:ce:8a:b3:b8:d5:d4:2a:1e:05:61:ae:
         fe:0a:a1:93:28:f0:31:ea:a5:47:be:a5:48:5f:91:e3:47:85:
         13:e7:c5:1b:72:7e:50:cc:c3:76:33:ce:74:23:c9:56:2b:43:
         c3:3d:28:b0:16:8d:01:48:83:f7:b3:42:43:00:22:bb:d3:a5:
         1b:49:7a:99:9b:5d:64:bc:92:00:83:5c:c3:47:e3:2e:a4:20:
         6f:bf:34:24:12:7a:67:9f:3d:d3:11:0a:7d:0f:c4:fd:95:1e:
         48:01:8a:d7:af:32:f3:03:ae:39:24:40:fe:d7:ea:75:b9:c6:
         d3:ee:a7:d7:64:8c:f2:c0:5c:7e:31:43:4e:6c:39:73:ef:ac:
         f3:0d:12:2c:db:dc:a4:98:4d:17:63:ef:1c:0a:b2:a4:be:48:
         ea:f6:a9:f3:1b:ec:f8:95:fe:2c:38:0a:22:08:3b:2f:3e:1a:
         ef:56:84:22:22:33:06:b4:75:8b:1b:c1:3d:1f:03:0d:a1:3e:
         9a:e9:d0:fc:53:ff:2c:e8:96:5d:a4:91:b9:aa:a8:ea:8d:38:
         9e:c6:71:52:05:d6:55:7b:55:a6:50:26:3b:0b:06:c3:c4:79:
         20:27:b8:37:b2:b6:cd:c8:4b:92:86:3a:29:f1:5e:75:2e:d2:
         38:7f:83:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:20:08 2026 by rpki-client