Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.mft
File:                     dUE1hHAyFWSttCp213OuPK57vVY.mft (raw, json)
Hash identifier:          v/Je2uO0E6zfoRVlDoDnQSaldwSKaGydQrnHserFeTE=
Subject key identifier:   12:AF:79:E5:65:B1:D6:50:70:04:C6:14:87:77:B9:58:AA:5E:7A:5E
Authority key identifier: 75:41:35:84:70:32:15:64:AD:B4:2A:76:D7:73:AE:3C:AE:7B:BD:56
Certificate issuer:       /CN=7541358470321564adb42a76d773ae3cae7bbd56
Certificate serial:       01A0CA0FF8898401DF5A3E5D0F1D4BC6B12D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dUE1hHAyFWSttCp213OuPK57vVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.mft
Manifest number:          08B4
Signing time:             Tue 22 Sep 2026 17:00:39 +0000
Manifest this update:     Tue 22 Sep 2026 17:00:39 +0000
Manifest next update:     Wed 23 Sep 2026 17:00:39 +0000
Files and hashes:         1: 2VmhrnY1R-y6rxXotPMotrQDcR8.asa (hash: Ap3BdSC63YcAczUKkEzGKumr15/KgLHB6Jp/DYCbOq4=)
                          2: dUE1hHAyFWSttCp213OuPK57vVY.crl (hash: 1SmZ8dW0X+lDGrP39zhRIAwWdlyzYgXvixJ2EDqIBYk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dUE1hHAyFWSttCp213OuPK57vVY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ca:0f:f8:89:84:01:df:5a:3e:5d:0f:1d:4b:c6:b1:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7541358470321564adb42a76d773ae3cae7bbd56
        Validity
            Not Before: Sep 22 17:00:39 2026 GMT
            Not After : Sep 23 17:00:39 2026 GMT
        Subject: CN=12af79e565b1d6507004c6148777b958aa5e7a5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:42:5c:79:98:e2:b2:88:c7:1d:44:6b:a8:86:
                    84:13:3e:c3:68:1d:93:e5:27:c4:45:0f:e2:7c:c7:
                    05:29:74:f2:af:1f:5f:b6:fa:e3:e2:64:f7:2b:d4:
                    c5:67:8c:60:00:5b:20:5e:fb:af:37:05:b1:4f:cf:
                    22:8d:c1:b7:01:06:be:e2:c9:e3:98:8f:e0:2e:1b:
                    f0:13:f7:4f:e7:ab:99:d6:c5:0e:f9:7a:a1:77:b8:
                    79:30:90:a3:cc:f6:e7:0a:56:cd:7c:e8:77:80:19:
                    e8:44:80:74:22:e6:c6:1d:00:f0:0d:6a:19:21:b4:
                    9d:71:78:56:4e:1d:c9:27:31:d8:ed:22:e4:0d:46:
                    ad:a1:49:e0:3b:b8:3d:30:2f:7b:22:e7:ef:9b:63:
                    79:c1:b7:90:a9:41:eb:55:eb:8d:19:cd:dd:63:e1:
                    ae:35:11:c5:7a:c8:4d:27:ed:09:e8:15:0f:00:b8:
                    01:45:1c:03:bb:aa:5a:3f:76:6c:3c:6d:e8:a7:23:
                    42:17:c8:2a:a5:0d:45:d6:d6:72:bd:59:2a:71:0e:
                    df:49:40:05:74:f1:bf:1f:bf:d4:b4:d7:28:cd:da:
                    86:f1:c2:00:3c:a4:6a:cf:0f:3a:87:fb:cf:bd:4f:
                    44:6c:f6:df:b7:bf:26:4e:14:e4:ba:5c:84:0a:19:
                    9c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:AF:79:E5:65:B1:D6:50:70:04:C6:14:87:77:B9:58:AA:5E:7A:5E
            X509v3 Authority Key Identifier:
                keyid:75:41:35:84:70:32:15:64:AD:B4:2A:76:D7:73:AE:3C:AE:7B:BD:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dUE1hHAyFWSttCp213OuPK57vVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:5e:af:80:d9:3b:3f:59:81:aa:a4:1f:a1:0b:59:e5:44:38:
         22:eb:3c:69:3b:a5:23:0f:64:b3:83:7c:c5:0d:ed:76:6f:fd:
         28:b9:b6:79:72:0d:0a:1c:fa:7f:f9:79:e7:2c:50:dd:51:f0:
         a4:16:ab:68:2e:90:4e:f4:11:08:42:ec:5e:5d:ce:47:4f:25:
         18:9c:f0:b1:9e:e8:2f:53:8d:94:43:10:e2:19:2a:db:43:19:
         6b:67:91:2c:6d:99:5b:c5:e8:a7:40:06:b9:e6:13:fc:39:3e:
         f3:3e:dd:07:7d:9f:ee:d7:ca:fa:1a:30:6a:14:0d:7d:10:e1:
         56:ea:c5:0b:b5:c3:22:1b:37:87:7e:bf:9d:3f:41:9a:53:fd:
         91:12:a6:a7:e7:9d:b3:04:84:43:db:89:78:62:ba:1b:df:20:
         3b:e4:7c:ac:87:47:20:2f:e4:90:cd:6f:a3:2e:3a:29:42:29:
         8e:7f:90:a7:9c:55:29:f7:7a:86:10:fd:b6:55:5a:51:19:1c:
         27:45:7d:45:ce:87:b7:20:f3:4c:b3:88:9a:fb:0b:45:c8:f0:
         6c:e5:0b:ba:a6:f2:ea:bc:f3:9f:ac:d5:c3:40:e8:08:86:71:
         3d:65:3f:19:66:75:bc:3b:eb:76:89:8b:bf:90:03:00:ff:25:
         97:8c:ee:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:05:39 2026 by rpki-client