Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.mft
File:                     0gVCphNVJBQhlMqnCOfbLMprTmM.mft (raw, json)
Hash identifier:          deAnD1YRu4b5KNQVUmknWvL0LcR/DnxlsIVoXzN1cbc=
Subject key identifier:   34:C4:D0:53:5C:25:11:AB:FB:75:AA:F7:5F:69:8F:04:2D:A3:5C:84
Authority key identifier: D2:05:42:A6:13:55:24:14:21:94:CA:A7:08:E7:DB:2C:CA:6B:4E:63
Certificate issuer:       /CN=d20542a6135524142194caa708e7db2cca6b4e63
Certificate serial:       01A0C8FD882FC3FA86FA263CDD955D6AA462
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0gVCphNVJBQhlMqnCOfbLMprTmM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.mft
Manifest number:          1340
Signing time:             Tue 22 Sep 2026 12:00:53 +0000
Manifest this update:     Tue 22 Sep 2026 12:00:53 +0000
Manifest next update:     Wed 23 Sep 2026 12:00:53 +0000
Files and hashes:         1: 0gVCphNVJBQhlMqnCOfbLMprTmM.crl (hash: jX5ofSJBNDdtsj0lG/dcHmjZQ3QeKL487xeiuMVy0S4=)
                          2: W-WGisgg-jdHv8TOeMHyK0ABKKM.roa (hash: AOrzg/e6GHv0wl5jj9rXhlmu6Xrpu+wHeWmnEnYMw/s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0gVCphNVJBQhlMqnCOfbLMprTmM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 12:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c8:fd:88:2f:c3:fa:86:fa:26:3c:dd:95:5d:6a:a4:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d20542a6135524142194caa708e7db2cca6b4e63
        Validity
            Not Before: Sep 22 12:00:53 2026 GMT
            Not After : Sep 23 12:00:53 2026 GMT
        Subject: CN=34c4d0535c2511abfb75aaf75f698f042da35c84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:4e:41:ca:76:6e:de:56:e7:60:e7:11:80:90:
                    b9:01:ca:ab:78:39:49:62:ab:76:9f:58:11:18:2a:
                    30:af:f7:24:43:26:86:a8:51:30:a4:3f:00:f9:4e:
                    45:25:b9:4e:a2:68:d4:44:bb:58:56:23:ac:5a:df:
                    75:5b:e6:56:50:da:b3:dc:c4:b0:91:fc:a9:57:e7:
                    f8:20:ef:66:9c:59:01:90:4b:65:7e:42:23:9d:e7:
                    0a:86:4f:73:f4:58:a3:26:b4:7c:5c:3e:f0:91:5e:
                    cb:6c:73:88:5d:0f:93:d0:1a:51:f5:f9:5b:89:21:
                    34:20:0d:63:f1:69:35:e6:ec:3d:4d:68:4c:80:ac:
                    39:6e:dc:bd:16:61:92:57:89:94:2f:82:d3:da:91:
                    b7:c7:0e:d0:52:0e:aa:fc:68:5b:f1:37:80:01:13:
                    c6:72:72:ba:87:3a:3f:e7:1e:42:ab:b4:05:fa:22:
                    e7:60:b2:fd:a4:1b:14:73:08:3f:2c:00:14:f3:ba:
                    63:ca:20:e8:af:10:b4:7b:c6:a7:6e:db:cc:2d:01:
                    65:44:1d:4b:88:1f:ac:f2:1b:de:22:fd:81:8e:1e:
                    b1:4e:45:27:1c:5b:e3:93:77:70:54:3c:69:cf:cd:
                    84:c8:31:b9:c6:42:5b:67:a2:30:45:df:f6:40:d6:
                    03:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:C4:D0:53:5C:25:11:AB:FB:75:AA:F7:5F:69:8F:04:2D:A3:5C:84
            X509v3 Authority Key Identifier:
                keyid:D2:05:42:A6:13:55:24:14:21:94:CA:A7:08:E7:DB:2C:CA:6B:4E:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0gVCphNVJBQhlMqnCOfbLMprTmM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:54:6e:b9:86:d0:ec:37:21:5d:d7:c3:63:a6:6c:3b:4e:0d:
         a7:53:52:37:0c:16:26:6e:11:ea:cf:00:6e:31:bb:a6:88:7d:
         1c:f4:be:8b:a5:47:b2:97:6a:85:ff:13:6b:af:a9:c8:25:86:
         c4:70:08:58:28:d9:6c:d2:71:c6:da:c7:2f:38:da:64:4c:ed:
         f7:80:bb:2b:a7:1b:cb:e5:67:2c:8e:bf:58:81:6d:43:a8:1b:
         b4:2f:93:be:e8:20:44:e7:e2:40:97:2d:91:89:6e:f5:d3:5c:
         f8:11:b7:d0:d9:76:16:b3:ea:a7:4a:f6:fe:88:4f:2c:b8:f0:
         7d:a6:6e:33:e2:8b:9e:57:b6:7d:ac:9f:0a:ec:29:09:67:9a:
         21:32:a6:b3:4e:92:0d:86:e8:c5:3f:bc:a3:27:91:4f:ce:d3:
         d5:81:89:0a:6a:72:ec:fa:f7:11:e7:6e:a3:93:26:9e:6f:2c:
         64:d7:65:2f:fc:65:00:78:5e:7c:9d:5d:cb:91:ee:4f:9e:a2:
         af:8f:d0:62:e8:7d:69:10:89:bb:10:fc:ff:1e:cf:14:64:a4:
         0d:e4:45:84:d9:5f:9e:82:3e:18:f8:ec:4a:6f:19:ba:8d:49:
         6c:16:0f:40:b3:87:82:c3:f0:d3:fa:7c:4b:ee:b2:76:d9:d4:
         0d:45:72:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:54:21 2026 by rpki-client