Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.mft
File:                     84LLE93hJljNrBjKyukfu_XFgJA.mft (raw, json)
Hash identifier:          RaXjyIUIThAv0Oifp0bR+/e/r8ewnlGqLJcwcFW9TvY=
Subject key identifier:   A1:D3:C0:0D:2E:DE:9B:8B:C6:9E:2E:D0:AF:53:E4:29:C0:81:9F:13
Authority key identifier: F3:82:CB:13:DD:E1:26:58:CD:AC:18:CA:CA:E9:1F:BB:F5:C5:80:90
Certificate issuer:       /CN=f382cb13dde12658cdac18cacae91fbbf5c58090
Certificate serial:       01A0C88FEF4A4B8836BFA2370C03FA17BE91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/84LLE93hJljNrBjKyukfu_XFgJA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.mft
Manifest number:          1A79
Signing time:             Tue 22 Sep 2026 10:01:11 +0000
Manifest this update:     Tue 22 Sep 2026 10:01:11 +0000
Manifest next update:     Wed 23 Sep 2026 10:01:11 +0000
Files and hashes:         1: 84LLE93hJljNrBjKyukfu_XFgJA.crl (hash: ltXgIHfNzEMLppK1mfHCKOAODOClNH/pbAX60mteiyc=)
                          2: A3Wm_w660o-WOKx14Qzsk48w80w.roa (hash: bbx1tQ0RBrPD7hgRhmK+PhPzre/duloLQugMlYybsho=)
                          3: R3vUElIMqfT3vzJXMUzIubVzmLQ.roa (hash: 44Gpc3/VsnWSrTFrLhn2IhmQD8M15ksHH0oPjm/pzxE=)
                          4: U1oh_8Ho8r1k2j-nGFoU_RDlNoE.roa (hash: NZ8sSZ9siHhWGPZhK1C3U7mz9zhYVNPsOY9uQbWP0to=)
                          5: Wi9gkeR1iKqKbqZI-0MAYDsf4BQ.roa (hash: fLvaMM59aDROgiWjnfSZl5l0LhCb2/kteh3fgXY7l5M=)
                          6: baXaAX1rxYa_2y57T1wari4SNRQ.roa (hash: Zn5x85hGWjwOTzCti/LCEZHhyAwdPWfVjbdllVnVtH0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/84LLE93hJljNrBjKyukfu_XFgJA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 10:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c8:8f:ef:4a:4b:88:36:bf:a2:37:0c:03:fa:17:be:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f382cb13dde12658cdac18cacae91fbbf5c58090
        Validity
            Not Before: Sep 22 10:01:11 2026 GMT
            Not After : Sep 23 10:01:11 2026 GMT
        Subject: CN=a1d3c00d2ede9b8bc69e2ed0af53e429c0819f13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a6:31:1f:b3:c6:27:6e:69:84:da:c1:ee:71:
                    0b:41:61:8a:a4:52:63:eb:12:07:ff:81:13:30:77:
                    d1:e0:8e:01:de:c2:d6:2f:34:c5:12:d7:15:2b:fb:
                    5f:8c:b7:6f:e8:37:6d:c3:9f:3d:00:8f:3c:47:25:
                    95:ec:00:9d:e0:a4:12:34:e8:21:a1:5b:a8:20:43:
                    92:f6:5c:dd:e1:41:74:ac:a8:b6:17:1f:11:f1:17:
                    17:60:63:fb:7c:54:f3:18:e5:ba:91:fc:40:7e:46:
                    83:8a:d0:98:a6:c6:71:f3:a6:0f:ca:e1:ec:29:ff:
                    91:60:c7:b8:c4:35:88:5f:cf:59:96:66:f3:25:44:
                    db:6d:fb:ee:e8:25:fb:4c:e7:5c:f3:92:df:dd:7a:
                    26:33:26:fa:f4:5c:7e:42:56:60:e9:3d:cc:f3:e4:
                    d2:79:d9:56:77:e2:98:27:c5:81:0c:06:3b:10:c7:
                    a3:a9:9a:7a:63:fa:0b:de:db:65:1b:b8:8b:fd:55:
                    5e:a7:41:f9:f5:a6:ee:90:0f:3b:f5:c8:b8:50:bb:
                    32:d4:fd:e3:3d:7e:90:be:4f:22:13:d1:26:c5:08:
                    07:25:f1:a6:f0:fa:45:c5:d0:1f:02:86:45:50:14:
                    54:7f:2a:fe:02:96:52:d4:d7:97:52:fa:39:8f:88:
                    da:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:D3:C0:0D:2E:DE:9B:8B:C6:9E:2E:D0:AF:53:E4:29:C0:81:9F:13
            X509v3 Authority Key Identifier:
                keyid:F3:82:CB:13:DD:E1:26:58:CD:AC:18:CA:CA:E9:1F:BB:F5:C5:80:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/84LLE93hJljNrBjKyukfu_XFgJA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:19:c1:d8:5f:56:64:e0:f6:a6:52:bb:7a:c1:3d:47:ee:9f:
         1f:32:3d:f1:ae:76:cf:cc:20:d7:fb:c1:32:ea:e9:3f:14:eb:
         07:99:92:3a:7a:b9:f5:e9:2c:37:23:23:6c:95:53:05:ee:00:
         fe:6a:6a:53:97:7c:13:57:f5:6e:6f:d1:4e:0f:9f:b9:df:e1:
         8f:53:4e:e4:d7:d8:9e:8e:b1:e2:19:84:43:9e:af:76:2c:01:
         f4:a2:00:39:35:c7:6f:9f:28:b4:e5:dd:b1:2c:97:e2:ca:4c:
         52:aa:eb:5b:48:44:88:08:9e:d1:b9:07:e3:75:a0:04:30:b2:
         4e:1f:f7:9c:55:d6:bb:09:50:7c:a1:2c:6e:cf:52:1c:ac:2a:
         96:e4:86:e0:bd:e8:8b:1d:57:17:56:cb:90:9f:08:d1:7a:a8:
         e8:d3:e0:a5:65:d1:51:bd:bc:74:c4:07:1d:17:63:29:f0:e7:
         f1:19:0d:93:02:5b:02:3a:55:b5:24:d3:1b:f0:a0:9f:c0:a5:
         c1:76:52:e1:ab:bb:62:fb:79:1b:a4:1d:a9:e4:11:76:24:93:
         9e:60:d8:d8:6f:87:36:0d:61:7d:ed:4a:00:db:e3:3e:0e:89:
         59:04:5c:77:fe:17:69:1d:85:58:82:e6:d9:94:1d:07:fb:d2:
         1c:f9:eb:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:09:17 2026 by rpki-client