Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/000d6b-0ffc-46de-a2a6-fac16ed10a4a/1/28kgJa2zaMuVMgmJhgdwebAcFlU.mft
File:                     28kgJa2zaMuVMgmJhgdwebAcFlU.mft (raw, json)
Hash identifier:          vz4sY5h6uKOe2n+7bXzuJBLRJsK1gIkardabBw56kGk=
Subject key identifier:   C8:0E:DD:6F:D7:95:C4:87:D8:2E:16:C8:D0:78:9C:2E:E5:1E:1B:C1
Authority key identifier: DB:C9:20:25:AD:B3:68:CB:95:32:09:89:86:07:70:79:B0:1C:16:55
Certificate issuer:       /CN=dbc92025adb368cb9532098986077079b01c1655
Certificate serial:       01A0C5C50A6A814250F75DAE8FD1D1279A86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/28kgJa2zaMuVMgmJhgdwebAcFlU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/000d6b-0ffc-46de-a2a6-fac16ed10a4a/1/28kgJa2zaMuVMgmJhgdwebAcFlU.mft
Manifest number:          023B
Signing time:             Mon 21 Sep 2026 21:00:19 +0000
Manifest this update:     Mon 21 Sep 2026 21:00:19 +0000
Manifest next update:     Tue 22 Sep 2026 21:00:19 +0000
Files and hashes:         1: 28kgJa2zaMuVMgmJhgdwebAcFlU.crl (hash: JJ4ava32YypmIw4GEsR8+ZJtGEBMMEIJvv4e0cdWpQQ=)
                          2: HcZu53ikNbm6E6nULbzZ5BaC4s8.asa (hash: aZUh5JSJtmadcsFgBZ/s+52L71m5F6dmNv0c812Q2Cc=)
                          3: UNeNooSVFPm5iZtAUwJFPNT3eCE.roa (hash: rYwIwy4zW2sUGidEjwd4jHr8jHUjbde9qMuvf9HTOnQ=)
                          4: YmpUQsKRqD4AX2JDKXONqEy4OUc.roa (hash: CUbgFiyC5v44xgVPVpw5zZbv2WHebTNf1FSrJBghQuE=)
                          5: atcPnoh5T8KOdOi3deCvWkqUy-k.asa (hash: LdBBxBTgr2OX/cP1E0OPxVrVAk6jJMcVk9Wps9UoWQw=)
                          6: rReuKYKAVqr3CoKH5UO-1aSW-mc.roa (hash: fGoH+yub0teNtoDmdJ6CIXMKMtZMJfMpSQSYdG/VkrY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/000d6b-0ffc-46de-a2a6-fac16ed10a4a/1/28kgJa2zaMuVMgmJhgdwebAcFlU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/000d6b-0ffc-46de-a2a6-fac16ed10a4a/1/28kgJa2zaMuVMgmJhgdwebAcFlU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/28kgJa2zaMuVMgmJhgdwebAcFlU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c5:c5:0a:6a:81:42:50:f7:5d:ae:8f:d1:d1:27:9a:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbc92025adb368cb9532098986077079b01c1655
        Validity
            Not Before: Sep 21 21:00:19 2026 GMT
            Not After : Sep 22 21:00:19 2026 GMT
        Subject: CN=c80edd6fd795c487d82e16c8d0789c2ee51e1bc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:08:44:dc:46:97:58:c4:20:01:9d:fb:c6:3c:
                    21:73:fb:8b:7c:8d:30:31:23:15:90:4f:0b:ea:d3:
                    ae:8f:ae:13:82:e3:f6:0a:e1:01:57:05:2d:a7:25:
                    28:95:a7:42:53:2a:ae:9f:dd:b0:27:d8:2d:51:50:
                    17:39:4c:43:b7:96:c6:61:47:aa:db:8e:98:20:df:
                    51:e6:df:ea:58:e0:89:5a:93:aa:3a:42:77:ac:b9:
                    85:79:96:52:15:cb:0b:48:cc:29:49:41:c8:31:22:
                    b7:83:9d:0a:fe:83:e9:af:9d:8a:e2:57:e8:d2:21:
                    8e:d0:b4:f1:40:2c:a6:3f:41:e4:0d:38:92:09:d8:
                    d9:c9:f7:4c:8c:91:fc:e0:af:d8:53:d6:f2:61:d6:
                    bb:cb:37:06:9c:09:b0:5e:ce:57:83:31:b8:5a:aa:
                    66:c3:91:8a:8d:70:56:4c:04:2a:9b:5a:b9:a1:42:
                    d8:81:2b:ee:c3:ff:e8:90:1f:af:54:73:88:75:97:
                    d0:a6:02:fa:75:b0:16:0a:7e:dd:50:44:8e:56:78:
                    0e:e7:a2:17:80:84:c5:92:e1:05:eb:44:a4:b2:4d:
                    83:8b:03:43:67:b7:1c:30:6d:17:af:98:99:b9:63:
                    0b:c4:bf:c3:73:8f:c0:57:ba:75:92:83:f6:7a:d1:
                    67:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:0E:DD:6F:D7:95:C4:87:D8:2E:16:C8:D0:78:9C:2E:E5:1E:1B:C1
            X509v3 Authority Key Identifier:
                keyid:DB:C9:20:25:AD:B3:68:CB:95:32:09:89:86:07:70:79:B0:1C:16:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28kgJa2zaMuVMgmJhgdwebAcFlU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/000d6b-0ffc-46de-a2a6-fac16ed10a4a/1/28kgJa2zaMuVMgmJhgdwebAcFlU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/000d6b-0ffc-46de-a2a6-fac16ed10a4a/1/28kgJa2zaMuVMgmJhgdwebAcFlU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:5c:71:df:de:00:f1:d8:e0:94:a1:6e:03:92:d3:1b:a9:87:
         0b:9f:97:87:a4:b3:b0:d2:cf:cb:e9:3c:76:64:2d:63:77:d7:
         38:f8:34:7e:38:a4:a8:a6:95:de:0c:95:52:a0:76:cd:48:0f:
         af:73:f0:dc:e8:19:ec:17:c9:87:ba:48:91:55:44:7b:44:c9:
         bb:90:6e:0c:0a:59:ab:10:f5:55:17:62:56:c9:bc:a8:e4:cd:
         1e:df:9b:d7:e4:00:7f:5c:9b:6e:90:6b:97:27:d8:52:18:b3:
         4a:a1:91:4e:cf:2d:56:80:6f:f3:cf:cd:fb:8c:86:fa:7b:af:
         20:ee:e5:2d:b9:44:3a:56:15:88:a7:54:c6:84:88:eb:74:dd:
         0f:21:65:08:9f:8b:43:4b:a2:c8:45:c0:e0:8a:5b:5e:1f:a5:
         37:eb:58:db:2a:c2:be:e8:54:de:36:c3:dc:0c:86:16:d3:3e:
         6f:94:79:2e:92:c4:bc:17:50:3a:2c:23:4d:9b:0b:3c:3b:a3:
         99:22:0a:16:37:b0:6e:87:e7:95:a5:13:6d:c1:1a:2b:53:ed:
         a5:ed:ce:2a:e1:5e:36:52:74:60:b4:f2:cf:06:47:8e:ce:dd:
         6a:61:74:38:98:5d:cf:cf:af:ac:5a:db:c4:5e:67:c0:02:04:
         d0:8c:20:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:07:00 2026 by rpki-client