Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.mft
File:                     V2cFtVe4IwhralMjJL-7o2mVyxw.mft (raw, json)
Hash identifier:          GvV1DD3K72aJ4RKAacxHUTuHJVggaz1uUH2Fgkdbljk=
Subject key identifier:   53:E3:0A:8A:3E:90:F4:B7:4B:65:C8:F6:5F:67:67:51:23:B1:FA:92
Authority key identifier: 57:67:05:B5:57:B8:23:08:6B:6A:53:23:24:BF:BB:A3:69:95:CB:1C
Certificate issuer:       /CN=576705b557b823086b6a532324bfbba36995cb1c
Certificate serial:       01A0C2FB546739DD07D3A19E4F9C0F0829D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V2cFtVe4IwhralMjJL-7o2mVyxw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.mft
Manifest number:          0792
Signing time:             Mon 21 Sep 2026 08:00:46 +0000
Manifest this update:     Mon 21 Sep 2026 08:00:46 +0000
Manifest next update:     Tue 22 Sep 2026 08:00:46 +0000
Files and hashes:         1: V2cFtVe4IwhralMjJL-7o2mVyxw.crl (hash: WkG4f/NDxubuYCk3+Epu5PxVVrTX7YGUctHf47Xg6o0=)
                          2: iz1NumDDEP4HEocZooUpzgUrWuA.roa (hash: Xh3SqqlYQ0WusNga4Qj1Gif5nRzkl+/fhOngglLEBZs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V2cFtVe4IwhralMjJL-7o2mVyxw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 08:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c2:fb:54:67:39:dd:07:d3:a1:9e:4f:9c:0f:08:29:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=576705b557b823086b6a532324bfbba36995cb1c
        Validity
            Not Before: Sep 21 08:00:46 2026 GMT
            Not After : Sep 22 08:00:46 2026 GMT
        Subject: CN=53e30a8a3e90f4b74b65c8f65f67675123b1fa92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:fc:d1:c9:f1:c5:86:31:c1:c8:4b:e4:9e:a0:
                    fc:73:d9:9b:8b:a3:e8:20:4a:6f:57:c2:ed:7f:a3:
                    95:94:06:7b:69:98:39:25:a6:92:20:56:e1:b2:2e:
                    a9:f6:e5:40:09:b7:8b:b5:76:84:46:82:ef:8f:b1:
                    2c:d6:37:03:30:c0:fd:96:4b:68:c4:91:1b:c9:d6:
                    2d:71:ff:62:23:de:13:f1:f3:42:49:99:3c:f1:e3:
                    1c:fb:51:77:66:b6:44:bb:a1:53:ad:29:7e:84:bd:
                    b4:15:f9:b8:83:76:53:84:5e:c2:62:08:80:ae:1d:
                    14:8f:be:70:90:88:d8:52:30:9f:59:38:64:e5:ab:
                    e2:a3:a6:fa:81:86:66:8b:c7:23:a2:64:af:f2:a2:
                    22:11:90:15:26:54:3c:5b:41:75:7a:06:ec:c8:1e:
                    c3:89:c9:cb:91:8b:03:00:c2:48:6b:4f:f9:07:07:
                    86:3f:22:0d:84:d3:2a:6f:88:cb:2c:ed:5a:9f:ef:
                    39:bf:87:47:88:f1:30:c2:4b:33:05:82:a4:84:f4:
                    a5:fc:27:6d:94:e7:ba:fe:3c:f6:df:01:f1:a1:db:
                    02:28:70:41:29:f3:69:63:9f:e9:2c:50:17:e5:4f:
                    0e:65:86:d8:15:4a:41:b3:bf:88:70:4c:b7:51:c8:
                    58:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:E3:0A:8A:3E:90:F4:B7:4B:65:C8:F6:5F:67:67:51:23:B1:FA:92
            X509v3 Authority Key Identifier:
                keyid:57:67:05:B5:57:B8:23:08:6B:6A:53:23:24:BF:BB:A3:69:95:CB:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V2cFtVe4IwhralMjJL-7o2mVyxw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:b2:03:89:0f:53:67:5d:5c:f8:1c:9c:de:2f:6d:2b:91:8e:
         a5:88:a0:93:eb:fb:46:c1:6f:f6:7d:fd:12:c5:3c:da:96:b7:
         c4:a5:88:f5:1d:74:41:9d:91:e8:96:82:04:4a:e4:e0:0e:a1:
         2a:2f:ed:43:0c:d4:aa:9e:f2:a6:8a:c7:52:55:13:a1:f0:50:
         93:7e:a1:5b:79:27:d1:f6:90:72:c5:f5:73:22:91:3f:3f:03:
         25:83:49:21:a9:2b:7a:8c:76:c5:5f:95:6c:ad:b9:4e:b9:ac:
         4e:52:62:53:40:0c:12:69:68:e8:8a:dd:d7:61:77:30:4d:50:
         d0:94:99:e3:30:5e:7a:b8:74:3d:2a:28:63:ba:65:87:b8:7f:
         e2:3c:71:27:b6:20:0f:3b:79:8a:74:60:7a:f1:7b:5a:fb:65:
         61:1c:f9:3a:ce:39:b0:9f:3a:79:d0:01:16:d7:6b:ad:c1:40:
         a7:5d:d6:24:1c:5e:c0:05:ca:4c:d5:45:ee:ec:3a:ac:d9:5f:
         67:1b:56:20:bc:3d:86:2d:ce:c1:c3:31:4a:e9:c1:b2:86:e8:
         0b:3b:8d:b0:45:18:3c:08:12:f4:73:a3:62:85:d8:03:3b:b5:
         68:be:5d:76:51:5c:68:8a:12:d2:17:be:8d:0e:92:39:02:d4:
         3a:4a:6b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:49:07 2026 by rpki-client