Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/dfb3ff-be3c-4185-9e08-9c7169b7a2e4/1/MLepUygLb5mPwRxHy-kbgmM2TrA.mft
File:                     MLepUygLb5mPwRxHy-kbgmM2TrA.mft (raw, json)
Hash identifier:          jYRxUTkKlk5JAh9yznUgkgAp4SafAVUyrd8iZWZZmis=
Subject key identifier:   71:F6:75:C3:AA:93:3E:0F:E6:20:22:9F:EB:47:9B:0F:8F:2A:F8:E0
Authority key identifier: 30:B7:A9:53:28:0B:6F:99:8F:C1:1C:47:CB:E9:1B:82:63:36:4E:B0
Certificate issuer:       /CN=30b7a953280b6f998fc11c47cbe91b8263364eb0
Certificate serial:       01A0C1436557BA82FABA96B55BAA33A4E235
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MLepUygLb5mPwRxHy-kbgmM2TrA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/dfb3ff-be3c-4185-9e08-9c7169b7a2e4/1/MLepUygLb5mPwRxHy-kbgmM2TrA.mft
Manifest number:          0941
Signing time:             Mon 21 Sep 2026 00:00:14 +0000
Manifest this update:     Mon 21 Sep 2026 00:00:14 +0000
Manifest next update:     Tue 22 Sep 2026 00:00:14 +0000
Files and hashes:         1: MLepUygLb5mPwRxHy-kbgmM2TrA.crl (hash: 5Tp0cMNM0oKCbhPnQ5ula+I7QKTGgH9ApcyBJTTuv7Q=)
                          2: VX50YHQNMqydPFFv_i2q16OC83o.asa (hash: qVGUxWoUNrKAJvK00yw9OUzR8/bN4gQHLCHE7l23LyY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/dfb3ff-be3c-4185-9e08-9c7169b7a2e4/1/MLepUygLb5mPwRxHy-kbgmM2TrA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/dfb3ff-be3c-4185-9e08-9c7169b7a2e4/1/MLepUygLb5mPwRxHy-kbgmM2TrA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MLepUygLb5mPwRxHy-kbgmM2TrA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c1:43:65:57:ba:82:fa:ba:96:b5:5b:aa:33:a4:e2:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30b7a953280b6f998fc11c47cbe91b8263364eb0
        Validity
            Not Before: Sep 21 00:00:14 2026 GMT
            Not After : Sep 22 00:00:14 2026 GMT
        Subject: CN=71f675c3aa933e0fe620229feb479b0f8f2af8e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d7:87:f6:5e:74:f1:f5:6a:26:d7:61:ad:0c:
                    bf:1a:86:04:1f:4b:0c:8c:0e:ac:f0:d8:2a:c2:c4:
                    12:dd:f6:7d:1c:b3:a7:a8:68:71:6e:31:7b:11:08:
                    6f:6c:72:62:b8:a5:92:1e:6e:03:4f:aa:ff:fb:df:
                    45:2d:89:7f:32:03:91:16:e1:6f:4a:e6:41:67:8a:
                    18:12:cd:0f:d1:1d:7e:73:d8:93:b0:34:d6:08:e3:
                    7b:b5:99:2b:27:9c:7a:93:4d:d7:bc:af:76:ff:72:
                    46:30:6e:ca:d7:e1:0d:57:b8:3e:93:1c:60:f4:3e:
                    39:65:77:41:87:d2:45:5c:20:0f:0a:c3:a8:df:88:
                    09:fa:4c:8b:dd:ce:0f:e9:74:bf:e3:f2:19:f1:e7:
                    3b:35:35:f6:78:7f:d2:6d:64:28:90:7a:a0:97:84:
                    3c:9f:bc:b6:f9:dc:97:82:09:62:6b:27:06:df:f0:
                    e7:76:49:52:77:53:50:c1:a5:b6:d8:0d:44:89:80:
                    70:e1:ea:79:57:7b:71:be:ab:fc:51:64:8e:8e:23:
                    ee:cc:a9:7a:77:05:95:c4:37:03:10:b9:5d:bb:41:
                    ba:87:9f:90:54:2a:9b:3c:fe:38:de:92:12:58:46:
                    54:08:f9:23:ae:7c:f4:15:2a:78:5e:1b:a3:39:be:
                    e6:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:F6:75:C3:AA:93:3E:0F:E6:20:22:9F:EB:47:9B:0F:8F:2A:F8:E0
            X509v3 Authority Key Identifier:
                keyid:30:B7:A9:53:28:0B:6F:99:8F:C1:1C:47:CB:E9:1B:82:63:36:4E:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MLepUygLb5mPwRxHy-kbgmM2TrA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dfb3ff-be3c-4185-9e08-9c7169b7a2e4/1/MLepUygLb5mPwRxHy-kbgmM2TrA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dfb3ff-be3c-4185-9e08-9c7169b7a2e4/1/MLepUygLb5mPwRxHy-kbgmM2TrA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:b0:cc:7e:71:d4:70:f8:9c:c9:81:56:4a:7f:6d:ff:fb:d1:
         24:0a:6c:05:c5:0e:04:f4:71:4a:07:c7:ce:0d:d9:fb:97:9c:
         fb:1c:dc:15:c3:a1:2d:b3:82:bb:9b:cc:f7:1b:62:16:c6:ea:
         2a:05:e4:c2:0e:59:f3:f9:42:22:ba:d9:6e:16:48:95:9c:55:
         1a:8d:d1:99:f5:2d:5f:d8:b2:4b:84:d6:76:76:46:bd:12:63:
         bd:6b:dd:ba:d8:7a:b0:9f:71:3d:06:30:6b:9b:5f:4c:7d:3c:
         32:3c:c9:6b:8f:e6:61:54:19:21:00:7b:c3:a8:38:6e:33:c8:
         a7:3b:b7:6d:52:4d:cb:2b:ff:6c:37:fd:5b:b9:a5:ef:f1:78:
         bd:fc:cf:fb:fe:8f:e1:f0:88:59:75:5c:b8:8e:bd:c9:42:12:
         8d:34:ec:ce:d7:6a:44:15:df:8d:28:0b:93:56:91:b8:5b:f8:
         a7:d7:f3:85:de:5f:3c:9f:fa:24:55:14:d8:ba:3e:cb:6c:da:
         f7:33:8e:83:85:7c:17:a9:ce:86:49:56:b6:46:ca:13:7a:3c:
         46:a8:da:f7:cd:e6:ea:2f:aa:07:7d:19:40:e7:b3:72:68:fc:
         5c:6c:ed:21:6c:a5:78:4c:d8:66:80:15:87:f8:d7:01:93:cc:
         e1:34:bf:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 11:09:34 2026 by rpki-client