Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/3dcc4b-9352-411d-925a-cc7d463c820b/1/dygVWFa4zk2F-NpPbTWwVbMNvTw.mft
File:                     dygVWFa4zk2F-NpPbTWwVbMNvTw.mft (raw, json)
Hash identifier:          USFOU5cvyd1t/vQVcUObOhqbngKXxWhhgdvgpJFldWA=
Subject key identifier:   F2:84:8B:3F:A9:EE:15:0D:5F:C5:D9:7F:9B:86:9E:CB:2C:6E:0A:8D
Authority key identifier: 77:28:15:58:56:B8:CE:4D:85:F8:DA:4F:6D:35:B0:55:B3:0D:BD:3C
Certificate issuer:       /CN=7728155856b8ce4d85f8da4f6d35b055b30dbd3c
Certificate serial:       01A0C4B2764EA79E2996FAA6308DA626BC79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dygVWFa4zk2F-NpPbTWwVbMNvTw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/3dcc4b-9352-411d-925a-cc7d463c820b/1/dygVWFa4zk2F-NpPbTWwVbMNvTw.mft
Manifest number:          0311
Signing time:             Mon 21 Sep 2026 16:00:25 +0000
Manifest this update:     Mon 21 Sep 2026 16:00:25 +0000
Manifest next update:     Tue 22 Sep 2026 16:00:25 +0000
Files and hashes:         1: IUXK5owGJRJBQqIOmgn7bKscCRQ.roa (hash: 3cmce/T6z+IA9rzyeoaTbVrr0D6UCYaIjKkeAxLWn1c=)
                          2: SiTbwMGtFl7yz90TOcACIfl_jbM.roa (hash: bZN6RaXx0CwbNISBjFsu0G8tFXjESLVVXcSOexStvD8=)
                          3: dygVWFa4zk2F-NpPbTWwVbMNvTw.crl (hash: tK24Vv5jlNgHwg3mzd2DWHGL7Bm0ZJdpMF2ELLagMF0=)
                          4: ymLzZ-VhmhqNEGONzE9KW-m04rM.roa (hash: RinsNGJ2DGv43ndnKRTv8Ja4sLQDd8GhBHpIm7eFfCc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/3dcc4b-9352-411d-925a-cc7d463c820b/1/dygVWFa4zk2F-NpPbTWwVbMNvTw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/3dcc4b-9352-411d-925a-cc7d463c820b/1/dygVWFa4zk2F-NpPbTWwVbMNvTw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dygVWFa4zk2F-NpPbTWwVbMNvTw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 16:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c4:b2:76:4e:a7:9e:29:96:fa:a6:30:8d:a6:26:bc:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7728155856b8ce4d85f8da4f6d35b055b30dbd3c
        Validity
            Not Before: Sep 21 16:00:25 2026 GMT
            Not After : Sep 22 16:00:25 2026 GMT
        Subject: CN=f2848b3fa9ee150d5fc5d97f9b869ecb2c6e0a8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e3:3f:7b:5a:86:7d:e7:6f:bb:c6:87:0a:8b:
                    4e:46:7c:4c:79:c7:89:8b:38:7f:26:8f:e4:4c:54:
                    93:36:41:58:0b:2f:00:3c:0e:10:49:da:34:a3:0d:
                    e2:6c:11:bf:1f:2a:8d:ac:b7:95:54:bc:0f:93:af:
                    dd:20:31:56:25:b5:29:4c:4e:e0:8b:e9:98:50:3b:
                    b2:e4:75:cc:88:e4:49:16:44:49:8f:e7:2d:34:92:
                    fb:a2:90:62:de:47:3d:51:e8:37:d9:fa:01:0c:6c:
                    e8:98:82:b7:18:44:be:25:8e:13:db:3a:7a:78:0c:
                    c2:93:8a:84:4b:6a:15:23:b6:22:cc:ea:d8:33:6c:
                    e6:48:cd:d9:fb:12:27:97:d1:6f:1e:d2:a3:9d:20:
                    28:5a:dc:5b:a4:71:a2:e6:93:75:71:fb:54:e2:d6:
                    b6:35:4c:46:0c:ad:3e:e9:30:f4:8a:f4:7e:e1:f2:
                    f5:5d:b9:58:90:eb:8c:6c:6f:a8:ce:31:88:8c:a6:
                    b5:48:e2:d1:2f:03:9e:c7:97:90:4e:63:fd:5c:e3:
                    6b:29:46:10:ea:2e:0a:2f:38:a2:6a:ff:19:70:9d:
                    71:f3:3b:d7:2f:a6:0e:61:e1:7f:de:d6:1f:d1:01:
                    98:8d:4c:c6:17:77:66:29:52:f3:9f:c9:ed:e4:a5:
                    0c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:84:8B:3F:A9:EE:15:0D:5F:C5:D9:7F:9B:86:9E:CB:2C:6E:0A:8D
            X509v3 Authority Key Identifier:
                keyid:77:28:15:58:56:B8:CE:4D:85:F8:DA:4F:6D:35:B0:55:B3:0D:BD:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dygVWFa4zk2F-NpPbTWwVbMNvTw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3dcc4b-9352-411d-925a-cc7d463c820b/1/dygVWFa4zk2F-NpPbTWwVbMNvTw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3dcc4b-9352-411d-925a-cc7d463c820b/1/dygVWFa4zk2F-NpPbTWwVbMNvTw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:94:8c:ba:db:b4:f7:dc:fe:f1:de:32:2d:58:09:6a:74:2a:
         e6:f1:c6:9c:bc:68:e6:b5:19:dc:b5:7d:48:24:2f:a3:05:88:
         9d:6b:e2:d2:76:f2:4e:ae:9b:59:93:35:d7:07:1d:e5:7a:83:
         e5:d5:ee:f9:3e:df:83:15:ab:46:af:16:81:09:ff:d3:e5:9f:
         01:a1:e4:01:1b:82:84:30:ea:30:7c:70:bd:a8:4a:a0:ea:b6:
         1e:89:7c:ee:69:94:26:6f:19:80:e6:f2:ce:c6:62:41:d2:cb:
         64:d9:a9:1a:dd:c7:28:5a:4a:e4:90:21:6f:17:a2:51:7b:f4:
         c3:56:16:5f:0f:b7:1f:05:9e:ea:42:77:bd:28:48:52:7f:36:
         0a:40:24:1a:48:ee:e8:c3:d4:e1:9e:9b:f7:f1:a0:90:37:d6:
         ac:70:cb:a8:3a:01:77:9f:14:a1:78:ff:a6:da:89:4e:3b:a1:
         6b:49:fd:42:6c:ae:a6:4d:2b:92:c3:2d:bf:1d:c0:a6:08:5c:
         24:77:ce:fa:af:6a:b5:83:5a:f1:16:b4:72:28:c0:00:8b:6b:
         10:e2:37:80:36:5c:0a:c6:15:10:56:0c:b4:d1:32:19:41:ab:
         ff:f3:97:de:80:af:bb:0c:b4:6d:b5:4c:3b:67:8d:fb:44:7f:
         97:a7:44:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:09:59 2026 by rpki-client