Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/d2b0aa-2636-4eec-a1e3-714d1958b77b/1/V3EfIIg6YrwGORunslgs5ys_6Rw.mft
File:                     V3EfIIg6YrwGORunslgs5ys_6Rw.mft (raw, json)
Hash identifier:          Jz+B58pw45/yVtmsVq6Zn+Yp4n6laOKIUFZoTwNsx+o=
Subject key identifier:   DB:1C:DF:8B:6A:24:6F:C1:28:35:F5:52:15:94:21:0E:59:F3:57:73
Authority key identifier: 57:71:1F:20:88:3A:62:BC:06:39:1B:A7:B2:58:2C:E7:2B:3F:E9:1C
Certificate issuer:       /CN=57711f20883a62bc06391ba7b2582ce72b3fe91c
Certificate serial:       01A0C3D6D6C33F915CBA0FEFD9FB8DB8FA4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V3EfIIg6YrwGORunslgs5ys_6Rw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/d2b0aa-2636-4eec-a1e3-714d1958b77b/1/V3EfIIg6YrwGORunslgs5ys_6Rw.mft
Manifest number:          164C
Signing time:             Mon 21 Sep 2026 12:00:31 +0000
Manifest this update:     Mon 21 Sep 2026 12:00:31 +0000
Manifest next update:     Tue 22 Sep 2026 12:00:31 +0000
Files and hashes:         1: FYrxidhhtPiG6AB9OzYcqk5p8Aw.roa (hash: mzI1U2535anRJzFg3sJ4dHBKcfZC4WY6B6B0DzwBsDM=)
                          2: V3EfIIg6YrwGORunslgs5ys_6Rw.crl (hash: +PzNIyY4QpDD1QQZqjIRBGOIlXWzNuYKvZsF+injqyI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/d2b0aa-2636-4eec-a1e3-714d1958b77b/1/V3EfIIg6YrwGORunslgs5ys_6Rw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/d2b0aa-2636-4eec-a1e3-714d1958b77b/1/V3EfIIg6YrwGORunslgs5ys_6Rw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V3EfIIg6YrwGORunslgs5ys_6Rw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 12:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c3:d6:d6:c3:3f:91:5c:ba:0f:ef:d9:fb:8d:b8:fa:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57711f20883a62bc06391ba7b2582ce72b3fe91c
        Validity
            Not Before: Sep 21 12:00:31 2026 GMT
            Not After : Sep 22 12:00:31 2026 GMT
        Subject: CN=db1cdf8b6a246fc12835f5521594210e59f35773
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e8:dc:14:ed:7a:52:a9:59:a4:ac:7e:7a:27:
                    dc:09:10:b3:e9:00:b6:a5:c2:59:1a:87:eb:ab:d8:
                    a1:37:cc:49:71:16:29:2c:7c:50:6a:a5:25:4f:5f:
                    6f:a4:96:53:13:f8:fe:c1:e0:ed:3e:1a:7a:98:37:
                    60:ef:28:98:0e:35:a4:32:cf:9d:cc:4a:7e:b7:43:
                    47:72:d7:87:16:33:a9:f1:c2:8c:83:34:0d:68:c1:
                    c8:f8:aa:97:67:7d:38:95:c6:02:93:a3:ed:b2:51:
                    5a:32:65:a1:cc:88:f4:3f:4b:24:8c:0c:9a:e4:1d:
                    c7:b6:25:15:86:74:57:52:41:12:68:3a:24:02:09:
                    f0:bd:95:db:4a:30:1d:09:21:aa:bc:71:5c:3a:6d:
                    fc:9e:71:c3:78:94:cc:1b:bc:3b:8b:34:5d:de:57:
                    b5:28:08:de:47:4b:77:c6:c5:d2:f3:83:ec:68:fb:
                    9b:3a:49:53:e4:60:72:b7:10:be:7b:87:ff:76:12:
                    28:fe:60:42:18:52:d4:e3:d5:d6:a6:c1:da:e2:fb:
                    54:24:c7:aa:27:f3:3b:3f:9c:b3:b0:f1:47:e1:fc:
                    b1:a6:ae:81:a1:4f:34:33:57:49:2d:ac:ea:88:3e:
                    85:33:3b:ed:11:22:4f:f2:3e:c4:a4:be:77:38:dc:
                    86:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:1C:DF:8B:6A:24:6F:C1:28:35:F5:52:15:94:21:0E:59:F3:57:73
            X509v3 Authority Key Identifier:
                keyid:57:71:1F:20:88:3A:62:BC:06:39:1B:A7:B2:58:2C:E7:2B:3F:E9:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3EfIIg6YrwGORunslgs5ys_6Rw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d2b0aa-2636-4eec-a1e3-714d1958b77b/1/V3EfIIg6YrwGORunslgs5ys_6Rw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d2b0aa-2636-4eec-a1e3-714d1958b77b/1/V3EfIIg6YrwGORunslgs5ys_6Rw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:15:cc:b6:9d:54:94:2f:07:61:d4:5f:a4:6a:3e:ea:c7:51:
         c2:4b:5b:5f:dc:9e:8c:f6:8a:87:a8:b1:cb:36:90:ad:9c:03:
         8c:4b:b6:59:bb:99:fa:e1:28:3f:a1:39:53:d4:41:91:aa:4b:
         42:bc:be:50:60:51:6e:07:21:19:84:b1:ba:93:67:60:1a:27:
         cc:09:f9:79:74:ff:4c:c7:14:48:b7:d2:4a:db:24:da:a2:05:
         5c:4c:6e:1f:f1:a1:c1:b9:7c:c5:3e:22:6c:4a:61:d9:02:41:
         dc:44:5e:fa:ff:98:79:bc:4d:7d:41:3b:27:2d:61:8d:6e:67:
         1d:2e:1e:74:14:4f:ba:93:e9:e0:b8:3a:76:0c:a6:fa:2b:6d:
         f4:04:b6:3b:97:16:ef:8a:e1:09:e2:a1:94:19:76:d8:80:5e:
         80:a6:8d:9d:26:e9:2f:e9:7b:b3:62:ac:78:82:b6:f4:a7:b1:
         ae:c7:b5:55:ed:c3:fc:00:1b:09:03:72:f4:2b:5b:01:b7:d4:
         65:b8:f2:c5:92:8b:5d:ca:d9:bb:30:8d:fd:4d:da:32:76:36:
         e1:1f:8c:2b:73:ad:fb:84:30:f4:5c:6f:bf:54:05:69:d6:a1:
         57:36:52:21:2d:b7:d1:91:d2:32:48:1b:b3:f1:55:d5:9c:eb:
         55:fd:c3:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:12:49 2026 by rpki-client