Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/540929-ba5e-4316-a138-bd0dee844047/1/g6PKzqjF0dmJsH6m4JdKANoDako.mft
File:                     g6PKzqjF0dmJsH6m4JdKANoDako.mft (raw, json)
Hash identifier:          s1z6pohSf1nJrEet5LvyP5yQgYN8QFWlrneqqaOqvHs=
Subject key identifier:   65:52:92:AD:1E:75:9E:81:17:B9:5F:F6:70:18:C0:C8:40:AA:47:FD
Authority key identifier: 83:A3:CA:CE:A8:C5:D1:D9:89:B0:7E:A6:E0:97:4A:00:DA:03:6A:4A
Certificate issuer:       /CN=83a3cacea8c5d1d989b07ea6e0974a00da036a4a
Certificate serial:       01A0C77CB03F7738A330B635CA79E0FDB084
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g6PKzqjF0dmJsH6m4JdKANoDako.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/540929-ba5e-4316-a138-bd0dee844047/1/g6PKzqjF0dmJsH6m4JdKANoDako.mft
Manifest number:          031C
Signing time:             Tue 22 Sep 2026 05:00:32 +0000
Manifest this update:     Tue 22 Sep 2026 05:00:32 +0000
Manifest next update:     Wed 23 Sep 2026 05:00:32 +0000
Files and hashes:         1: g6PKzqjF0dmJsH6m4JdKANoDako.crl (hash: FHP7iEwdDvR9zKt66rj9jR8zhcmcusD2LwMuCk8NUBI=)
                          2: zWz2EQyWVwiMIMfp3Hy3g3Hk0CU.asa (hash: oDeUBRJakpIHsQrPONNeQWxCczJYr0zVwIZOh3InMp4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/540929-ba5e-4316-a138-bd0dee844047/1/g6PKzqjF0dmJsH6m4JdKANoDako.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/540929-ba5e-4316-a138-bd0dee844047/1/g6PKzqjF0dmJsH6m4JdKANoDako.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g6PKzqjF0dmJsH6m4JdKANoDako.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 05:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c7:7c:b0:3f:77:38:a3:30:b6:35:ca:79:e0:fd:b0:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83a3cacea8c5d1d989b07ea6e0974a00da036a4a
        Validity
            Not Before: Sep 22 05:00:32 2026 GMT
            Not After : Sep 23 05:00:32 2026 GMT
        Subject: CN=655292ad1e759e8117b95ff67018c0c840aa47fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0f:93:cb:87:db:c5:26:4e:cf:13:ac:67:d3:
                    0f:ad:19:95:76:2a:c7:3f:51:b6:14:10:df:f0:a2:
                    ed:99:80:9b:53:e8:27:07:e3:07:55:df:48:f6:f0:
                    ff:db:d8:0f:d3:3b:20:46:12:c1:f2:dd:27:0f:f9:
                    c5:8b:b4:fa:8b:2e:0b:5d:f8:21:3d:c5:a6:80:70:
                    49:e4:90:d0:8f:fb:f3:57:bf:82:d1:90:ef:ff:21:
                    b1:55:36:f7:f1:9a:98:85:5c:66:f1:94:94:4a:95:
                    4b:51:52:90:8f:4c:7a:15:da:7d:a8:f2:65:8d:94:
                    c3:93:e2:72:a7:14:b8:be:9b:a9:a0:d3:6d:e2:4c:
                    a2:45:83:3b:cd:c4:de:d1:9c:7b:67:4c:00:65:57:
                    93:c5:79:c5:12:71:18:7e:6e:f4:8d:89:eb:80:f5:
                    e8:bb:da:1b:6d:e0:40:e0:41:43:29:c3:b2:e7:cc:
                    b5:4e:90:f9:81:97:53:2a:e4:de:4c:43:af:87:7f:
                    4a:ae:e2:ab:77:92:98:f6:ca:13:a5:92:6e:d3:e2:
                    55:1a:3b:69:1c:e9:2a:d9:b7:9a:3e:b9:dc:9d:ee:
                    cb:58:ed:39:d8:c1:8a:75:b6:8d:b1:bf:0b:2d:2c:
                    50:72:92:44:d2:b6:28:be:1a:03:66:6f:74:2f:be:
                    70:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:52:92:AD:1E:75:9E:81:17:B9:5F:F6:70:18:C0:C8:40:AA:47:FD
            X509v3 Authority Key Identifier:
                keyid:83:A3:CA:CE:A8:C5:D1:D9:89:B0:7E:A6:E0:97:4A:00:DA:03:6A:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g6PKzqjF0dmJsH6m4JdKANoDako.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/540929-ba5e-4316-a138-bd0dee844047/1/g6PKzqjF0dmJsH6m4JdKANoDako.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/540929-ba5e-4316-a138-bd0dee844047/1/g6PKzqjF0dmJsH6m4JdKANoDako.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:d2:b0:94:38:34:04:19:97:c6:93:aa:0c:30:e2:76:4f:72:
         6b:24:01:8c:38:42:2f:1d:7c:d9:4d:ac:45:0b:85:cd:f6:a7:
         f0:a6:e5:ce:b7:4c:03:4c:70:46:d3:ac:0c:09:cc:21:0d:43:
         da:1f:d6:90:4f:ba:68:82:e6:fe:9b:36:19:ba:e9:7b:9d:69:
         bf:e1:b7:f5:62:97:86:0d:ee:9a:a6:16:27:fe:5c:a8:b4:82:
         33:83:e8:07:61:02:64:21:b8:73:2a:e7:a6:1e:b4:55:1c:47:
         76:b7:69:00:c3:29:82:f8:40:49:8d:bc:01:ea:d2:97:5f:27:
         7e:ef:3a:0b:6e:2a:b8:63:c2:29:46:55:7d:f3:df:9d:8c:30:
         93:8e:f2:d6:aa:47:f2:97:13:36:20:46:c8:bc:5d:bb:09:8a:
         6a:db:c2:03:12:0c:12:89:9d:d8:5a:f7:3c:d5:45:32:5b:55:
         f8:b2:60:d3:d2:06:92:cf:88:06:c8:af:97:79:fb:ff:17:3c:
         f5:f4:07:ad:86:5f:65:1f:bc:38:4c:d5:c6:ea:98:1a:39:3d:
         8b:aa:c9:63:40:9a:fd:21:93:47:ab:f6:7f:ba:04:fa:b9:0c:
         7e:49:ac:88:71:35:60:a1:c7:bb:c3:f4:f8:1c:da:15:9a:f2:
         3d:3a:a9:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:38:28 2026 by rpki-client