Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.mft
File:                     97NANTBJjYJfLniKB2UDvJ3OFXQ.mft (raw, json)
Hash identifier:          gOv7bwq74QFlZCy5QjJxuBnwm4uJNGEN+KBoXQDW2IM=
Subject key identifier:   35:23:C7:7E:27:A6:98:D7:9A:43:CD:AB:1F:C7:41:48:19:E1:C8:CF
Authority key identifier: F7:B3:40:35:30:49:8D:82:5F:2E:78:8A:07:65:03:BC:9D:CE:15:74
Certificate issuer:       /CN=f7b3403530498d825f2e788a076503bc9dce1574
Certificate serial:       01A10F9607526906DB60161B3123D06752F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/97NANTBJjYJfLniKB2UDvJ3OFXQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.mft
Manifest number:          0B60
Signing time:             Tue 06 Oct 2026 05:00:52 +0000
Manifest this update:     Tue 06 Oct 2026 05:00:52 +0000
Manifest next update:     Wed 07 Oct 2026 05:00:52 +0000
Files and hashes:         1: 97NANTBJjYJfLniKB2UDvJ3OFXQ.crl (hash: pVam0yPeFQiq3myUaGpO1+85BV1Bhtn8p7bZixi5Rho=)
                          2: EED8jCb4VbJslWOq8UPr8tNr3aA.roa (hash: yjwTF+aBKLvAeYWU6/tZkP3sQTuj3m2XXZAbp7NHWxI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/97NANTBJjYJfLniKB2UDvJ3OFXQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Oct 2026 05:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:0f:96:07:52:69:06:db:60:16:1b:31:23:d0:67:52:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7b3403530498d825f2e788a076503bc9dce1574
        Validity
            Not Before: Oct  6 05:00:52 2026 GMT
            Not After : Oct  7 05:00:52 2026 GMT
        Subject: CN=3523c77e27a698d79a43cdab1fc7414819e1c8cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:bd:45:1d:a0:43:73:c8:60:00:a3:da:1a:e6:
                    8d:a5:fa:57:16:07:1e:36:cb:99:77:cc:66:ad:ef:
                    47:86:bf:07:a1:8d:9d:ba:2f:44:74:da:7b:23:c2:
                    71:ef:4c:97:97:71:63:c2:cb:3b:06:a3:09:0c:56:
                    8f:88:80:92:ec:3e:09:09:d1:46:1f:6a:e1:ef:1d:
                    90:67:71:46:54:fe:2e:d5:cb:92:8e:ce:17:3d:93:
                    ec:98:3d:66:5f:29:46:d4:ef:22:01:d9:ee:b9:59:
                    27:e3:89:bc:80:fd:e5:92:7a:e4:83:dd:7a:ed:62:
                    40:4b:92:b3:cc:dc:2f:76:2a:ed:da:52:c6:61:3f:
                    2c:22:ed:a7:bb:c9:cb:7b:86:9f:aa:64:e1:1c:46:
                    c7:70:c2:e4:2e:86:8c:eb:d3:3a:c9:ea:db:9b:9a:
                    fe:f5:26:79:4b:6b:0e:7c:eb:70:0c:34:be:c9:19:
                    26:e2:89:57:79:f7:ab:3f:a1:39:ba:22:0c:7b:8c:
                    72:1d:01:60:ba:35:a7:7f:dc:67:08:6d:da:bf:b6:
                    94:ca:98:81:ca:b1:fa:ee:c3:98:9e:45:7d:25:33:
                    d7:2c:3a:22:7c:3f:7f:82:a4:7f:91:ce:63:39:de:
                    4e:32:b4:85:0d:2a:b2:e0:74:56:dc:c3:74:ef:3d:
                    6d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:23:C7:7E:27:A6:98:D7:9A:43:CD:AB:1F:C7:41:48:19:E1:C8:CF
            X509v3 Authority Key Identifier:
                keyid:F7:B3:40:35:30:49:8D:82:5F:2E:78:8A:07:65:03:BC:9D:CE:15:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97NANTBJjYJfLniKB2UDvJ3OFXQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:6d:f5:a5:e3:7b:07:a0:59:d8:f3:57:a3:f7:90:a2:77:b3:
         ae:bf:71:76:4f:23:93:89:42:90:6d:ac:27:37:41:8d:21:a7:
         fd:3f:36:e4:08:4a:70:12:e5:6e:28:92:46:8e:24:08:bf:4e:
         8f:9e:08:fb:91:76:25:3e:95:73:cc:38:ca:75:0a:5c:0e:96:
         9b:6e:86:93:77:19:9d:e5:2c:93:aa:2c:dc:5d:14:93:3f:62:
         c5:c2:43:ac:e1:a4:3e:f2:ba:72:1e:b2:d2:02:da:65:84:ac:
         f6:9e:78:c4:19:bc:06:7d:75:eb:56:96:9d:8a:1c:e2:c6:a0:
         1c:02:d9:86:39:c8:d1:fb:7e:6b:49:04:cf:d3:f6:1e:d1:99:
         0d:c1:b9:de:aa:6a:ac:d0:cd:5e:86:db:39:44:6b:f4:69:b7:
         63:f1:6c:38:4a:3c:d2:72:45:53:30:42:90:45:90:eb:90:19:
         45:ba:be:15:4b:5c:73:93:ff:5f:fc:c8:bb:12:ba:28:9e:92:
         7a:27:0b:ab:c8:2f:ed:f6:6f:b5:fa:a2:5b:08:9b:5e:2e:37:
         68:34:8e:1f:99:d5:f5:c0:7d:74:a1:6d:83:91:58:e2:8c:7c:
         e0:c4:5d:4f:21:b1:f4:7b:7d:30:5f:09:89:1f:ec:6d:c6:76:
         ec:63:e8:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 12:31:05 2026 by rpki-client