Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft
File:                     MzIOLzxa2t8VOgdYvGALbqFPTu0.mft (raw, json)
Hash identifier:          c+zMJuHqYYMeBoneL8A0HxzJ5x4KvEkaM5Tw/LY3+ak=
Subject key identifier:   6C:82:89:17:3C:7B:D1:48:73:6D:C7:E8:C2:5E:06:27:22:38:22:DA
Authority key identifier: 33:32:0E:2F:3C:5A:DA:DF:15:3A:07:58:BC:60:0B:6E:A1:4F:4E:ED
Certificate issuer:       /CN=33320e2f3c5adadf153a0758bc600b6ea14f4eed
Certificate serial:       01A0BD9DCA2CF9F6FA12A6AC93CD4FA3F893
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MzIOLzxa2t8VOgdYvGALbqFPTu0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft
Manifest number:          1A62
Signing time:             Sun 20 Sep 2026 07:00:29 +0000
Manifest this update:     Sun 20 Sep 2026 07:00:29 +0000
Manifest next update:     Mon 21 Sep 2026 07:00:29 +0000
Files and hashes:         1: MzIOLzxa2t8VOgdYvGALbqFPTu0.crl (hash: 9NcUVpX6YMOYgS6VNqqaDwNXtP2Prh1OYYvJ7enK4RU=)
                          2: VAAvBVikKM6MuRJ-eG-iUB9XdRw.roa (hash: nQeQgdEmek61pzKMZx59WEmM1Ma+1ZD1llfXrlwOtbo=)
                          3: oyMYaWn1495tEV0rJtuup8PEegg.roa (hash: xG4lUtMIXDMmK0ptQSxWDryB1RVS07DU1EG3EYDXLQU=)
                          4: w7xEBHIfXi0BUtgUPP66rgihpG8.roa (hash: gDrcyd6ElWA3Fy0I7vbIWUDFdvKSba9LbEFcEbtavQA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MzIOLzxa2t8VOgdYvGALbqFPTu0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 07:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:bd:9d:ca:2c:f9:f6:fa:12:a6:ac:93:cd:4f:a3:f8:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33320e2f3c5adadf153a0758bc600b6ea14f4eed
        Validity
            Not Before: Sep 20 07:00:29 2026 GMT
            Not After : Sep 21 07:00:29 2026 GMT
        Subject: CN=6c8289173c7bd148736dc7e8c25e0627223822da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:92:96:14:c4:e5:dd:b8:86:ba:03:f4:85:fe:
                    57:c6:f2:6d:7e:1d:08:70:07:c6:84:e8:6c:97:0c:
                    38:92:43:dd:e8:4f:d7:2a:0e:7c:ab:8f:8f:9a:0f:
                    11:08:79:b4:9b:1b:c5:01:9f:ea:08:1f:d6:4c:1b:
                    d3:13:8f:d8:5f:41:16:c7:2a:0e:7f:6e:35:bc:92:
                    9d:14:69:19:8a:17:12:32:f8:cc:3c:9d:53:a9:84:
                    7f:cc:c8:5f:c2:31:64:e4:9c:d2:bd:95:2d:e0:27:
                    f4:f3:89:a9:88:dc:d2:18:ab:87:41:e6:17:c5:9e:
                    f7:61:d3:95:94:0e:3f:13:47:30:78:d0:66:aa:c4:
                    d9:b4:60:04:c4:5a:7a:52:dd:6b:86:68:0c:5f:09:
                    91:c0:94:5d:90:50:bf:79:88:a5:c9:6c:47:ba:9e:
                    7d:6d:99:43:66:43:90:3c:34:fa:5b:19:7b:be:fc:
                    ed:48:e7:a1:b4:24:67:9e:db:4e:af:0c:97:a5:e9:
                    f7:76:ba:20:8b:33:25:a4:42:a2:a3:f7:66:c6:b0:
                    cf:97:aa:b4:4c:e0:d8:ba:1d:9d:f2:5e:91:39:9e:
                    6a:48:ee:b7:3c:d5:87:52:5a:38:df:ae:b5:26:f1:
                    9c:e8:f9:68:19:fd:67:90:4e:b4:ee:f5:fa:bd:79:
                    10:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:82:89:17:3C:7B:D1:48:73:6D:C7:E8:C2:5E:06:27:22:38:22:DA
            X509v3 Authority Key Identifier:
                keyid:33:32:0E:2F:3C:5A:DA:DF:15:3A:07:58:BC:60:0B:6E:A1:4F:4E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzIOLzxa2t8VOgdYvGALbqFPTu0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:46:25:2e:aa:3d:e6:57:f3:6b:a1:31:e1:88:4b:8d:de:3a:
         6a:49:8d:aa:d1:15:be:e9:9a:f6:38:f7:4d:e6:39:d4:28:9d:
         f6:7f:51:8a:a6:b8:3a:da:9a:00:35:07:45:f1:4d:27:0c:7f:
         f7:3a:35:41:30:df:30:ef:4b:74:b0:ed:09:86:e1:89:3e:eb:
         ad:78:35:86:f6:e5:50:90:ca:2c:38:43:d3:b0:35:a3:84:ca:
         91:22:85:5d:ed:da:9e:e0:28:0f:63:8b:18:1b:f8:f0:d0:19:
         1b:4f:d3:a6:38:61:f1:a5:ff:76:8d:5f:61:0c:3f:9f:87:d9:
         67:fe:fd:b3:84:a4:37:d8:c9:29:91:dd:24:3e:44:26:d1:47:
         e6:17:e8:0a:0d:c0:4a:e9:1b:1a:5e:49:04:aa:3d:14:f4:11:
         dc:12:3c:6f:5e:ac:5c:77:4e:2d:28:a1:e1:8b:af:68:8d:89:
         b8:77:a4:09:19:55:31:bf:10:3f:51:f2:02:22:68:04:3e:5c:
         e6:8d:0d:ab:a0:c2:61:70:82:43:99:1b:04:50:87:19:c1:57:
         24:29:91:8e:a5:e3:6b:25:28:72:31:c7:d9:fc:cf:40:56:7e:
         0f:1b:5f:83:40:38:cb:f0:52:f4:53:f7:b9:ce:1b:61:19:a0:
         f2:cd:3c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 17:38:49 2026 by rpki-client