Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.mft
File:                     C_TOA4nPk-LVfggvG-xh2oJy__E.mft (raw, json)
Hash identifier:          n7iUwELB8rvtk1LehrscYVcAVw29ib1w23+smOCApyw=
Subject key identifier:   FE:36:11:F9:A9:F9:DB:A7:19:49:0D:BD:23:66:31:33:06:EF:FA:B7
Authority key identifier: 0B:F4:CE:03:89:CF:93:E2:D5:7E:08:2F:1B:EC:61:DA:82:72:FF:F1
Certificate issuer:       /CN=0bf4ce0389cf93e2d57e082f1bec61da8272fff1
Certificate serial:       01A0C2FB3EEC8A5C93D2132287E7A3EC8AB0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C_TOA4nPk-LVfggvG-xh2oJy__E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.mft
Manifest number:          1332
Signing time:             Mon 21 Sep 2026 08:00:40 +0000
Manifest this update:     Mon 21 Sep 2026 08:00:40 +0000
Manifest next update:     Tue 22 Sep 2026 08:00:40 +0000
Files and hashes:         1: C_TOA4nPk-LVfggvG-xh2oJy__E.crl (hash: PwJ46iiDrcI2bmVsRiRQex/lsrDijf7zPj5IgtWp/Qs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C_TOA4nPk-LVfggvG-xh2oJy__E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 08:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c2:fb:3e:ec:8a:5c:93:d2:13:22:87:e7:a3:ec:8a:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bf4ce0389cf93e2d57e082f1bec61da8272fff1
        Validity
            Not Before: Sep 21 08:00:40 2026 GMT
            Not After : Sep 22 08:00:40 2026 GMT
        Subject: CN=fe3611f9a9f9dba719490dbd2366313306effab7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:64:aa:d8:ef:f9:79:55:00:1d:f8:29:3e:cb:
                    5a:32:74:b8:ac:59:c8:af:81:a9:bc:9a:36:29:77:
                    3b:d6:ea:12:17:79:cb:98:4e:87:58:73:8f:cc:52:
                    38:8b:db:c1:ea:fb:a4:1a:e4:76:06:4b:f6:74:bf:
                    c4:35:96:18:bf:97:71:57:bc:1a:1c:fd:af:d6:ca:
                    65:9b:19:24:a1:a0:71:24:e1:92:65:f0:90:fd:9a:
                    90:81:bf:bf:36:be:81:aa:3b:b3:29:99:fb:2b:6e:
                    44:20:bf:ce:f2:60:eb:e8:4e:81:08:fe:99:ec:f7:
                    56:e6:94:be:84:d0:8f:c6:16:34:84:b9:7d:ae:98:
                    25:fd:85:c1:33:fc:45:f0:d8:4b:9f:0b:49:aa:0f:
                    10:e0:ca:6f:8d:f0:a9:93:41:9d:9e:2f:f7:00:31:
                    18:19:06:19:f8:ff:06:5d:24:45:6f:00:a6:70:03:
                    8f:eb:ea:5f:16:8d:77:9b:92:c6:66:b8:c8:e5:b9:
                    ec:ff:03:3d:73:5e:3b:18:8a:32:43:0e:d1:03:aa:
                    d6:13:e2:c4:50:31:8d:0f:9e:46:d3:73:e2:4c:a8:
                    16:6e:f0:32:06:80:ae:5c:38:f5:65:63:1d:d6:13:
                    9f:36:2f:76:12:a5:3b:64:9d:bf:2a:34:d3:8e:49:
                    1d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:36:11:F9:A9:F9:DB:A7:19:49:0D:BD:23:66:31:33:06:EF:FA:B7
            X509v3 Authority Key Identifier:
                keyid:0B:F4:CE:03:89:CF:93:E2:D5:7E:08:2F:1B:EC:61:DA:82:72:FF:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_TOA4nPk-LVfggvG-xh2oJy__E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:c2:12:33:1d:58:06:bb:32:ae:34:7e:f4:c3:d1:fc:03:9d:
         53:5f:29:b9:8d:13:2d:c4:62:9f:72:68:68:56:32:4d:b2:fb:
         9e:cb:bc:1b:0c:f3:7f:05:d0:50:36:e2:99:65:8a:80:ba:ff:
         06:4f:6b:7d:04:c8:13:8a:6e:2a:82:be:55:dd:09:40:32:c9:
         fe:52:c3:68:1c:55:f5:4f:27:85:60:4a:13:35:ba:7c:4e:58:
         1f:18:18:d2:35:81:c5:dc:8d:b4:46:c0:0d:b1:a7:3b:87:53:
         18:89:f1:f5:04:bf:91:5d:52:73:7f:5d:38:a2:52:d1:d5:c2:
         41:dd:09:e9:b3:32:5a:09:66:b7:8d:63:8e:29:10:09:73:88:
         79:b2:08:98:8f:d9:f1:bd:d9:0c:ad:f2:50:df:59:7b:d3:f6:
         52:73:02:9e:38:93:ab:87:56:f2:59:ce:39:e6:56:41:01:a0:
         f2:b3:3e:6b:97:e5:2a:f5:47:c9:20:c9:a3:73:38:38:74:ba:
         9e:35:15:d5:36:6f:b5:e1:4c:73:0c:96:85:7d:d5:57:f6:e5:
         42:e7:76:3b:91:c0:d8:ae:a4:e7:39:f7:8f:1f:51:e2:a9:19:
         fa:9f:57:9c:f2:78:68:ec:2e:d6:60:a3:ba:33:d2:47:ad:f0:
         5c:d0:a2:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:30:30 2026 by rpki-client