Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/a06325-8915-4778-bd0b-e499abf2b9a8/1/t117sKuToIYWkQen4ubKOCYZ5_Q.mft
File:                     t117sKuToIYWkQen4ubKOCYZ5_Q.mft (raw, json)
Hash identifier:          1BS/5qqj1Ka1B6AfEf8wO1neXHyntUAWA3S2034JzwE=
Subject key identifier:   EB:13:6D:0B:D1:AC:7D:E8:08:1E:EF:90:A3:11:08:C3:F2:A3:0D:A2
Authority key identifier: B7:5D:7B:B0:AB:93:A0:86:16:91:07:A7:E2:E6:CA:38:26:19:E7:F4
Certificate issuer:       /CN=b75d7bb0ab93a086169107a7e2e6ca382619e7f4
Certificate serial:       01A0D64C57ADBC8558D382927D25127B52F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t117sKuToIYWkQen4ubKOCYZ5_Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/a06325-8915-4778-bd0b-e499abf2b9a8/1/t117sKuToIYWkQen4ubKOCYZ5_Q.mft
Manifest number:          BE
Signing time:             Fri 25 Sep 2026 02:02:02 +0000
Manifest this update:     Fri 25 Sep 2026 02:02:02 +0000
Manifest next update:     Sat 26 Sep 2026 02:02:02 +0000
Files and hashes:         1: t117sKuToIYWkQen4ubKOCYZ5_Q.crl (hash: krFf/OPPvzI1C4UcjII5KET8RW3xIgBs9SRqSw9WMHE=)
                          2: ySPvKfV_aWMJHJvsDTSVOAVpx9Y.roa (hash: yQfb3ZLV9S1QRrvHBaPCBs3YoUagPeU3hc7wS3zLy1A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/a06325-8915-4778-bd0b-e499abf2b9a8/1/t117sKuToIYWkQen4ubKOCYZ5_Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/a06325-8915-4778-bd0b-e499abf2b9a8/1/t117sKuToIYWkQen4ubKOCYZ5_Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t117sKuToIYWkQen4ubKOCYZ5_Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 02:02:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d6:4c:57:ad:bc:85:58:d3:82:92:7d:25:12:7b:52:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b75d7bb0ab93a086169107a7e2e6ca382619e7f4
        Validity
            Not Before: Sep 25 02:02:02 2026 GMT
            Not After : Sep 26 02:02:02 2026 GMT
        Subject: CN=eb136d0bd1ac7de8081eef90a31108c3f2a30da2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:af:51:a2:6e:60:41:7c:7b:36:a1:aa:dc:5f:
                    16:f2:15:e2:2a:55:71:f7:73:d9:25:7f:96:e9:a2:
                    a4:36:28:0b:95:66:02:0f:37:60:13:f5:c6:d2:4d:
                    29:34:67:01:e8:97:57:5b:fa:87:77:61:98:df:44:
                    f9:79:f4:d0:78:bf:fa:a2:34:18:14:6d:58:3a:28:
                    49:70:fc:74:52:53:da:09:08:af:c8:83:8a:97:94:
                    bd:30:a1:3e:06:46:31:1c:04:43:7e:a5:4a:40:61:
                    e6:9f:8f:92:f0:3b:09:32:7c:91:54:aa:ca:c6:d8:
                    e1:15:bf:6f:4c:52:a5:f6:f3:af:50:cc:16:28:b2:
                    e8:31:e9:b2:84:27:e5:87:57:c1:c4:32:b7:0a:d3:
                    6d:1a:9e:bd:ed:84:4c:12:90:a9:32:0b:b0:e0:e1:
                    01:de:bc:09:56:58:50:81:9f:9f:c9:c3:ce:51:cb:
                    b5:04:da:38:62:70:ee:13:25:16:a3:c1:99:b4:a4:
                    ad:90:5c:3a:f7:49:c0:6a:5f:63:ea:14:9b:00:f9:
                    ef:4d:9e:79:38:9a:17:17:89:8d:41:72:06:56:3c:
                    ac:e7:04:5a:53:2b:da:84:4f:15:30:18:f1:87:ed:
                    0a:11:e2:1c:6d:b6:55:19:74:05:cc:44:cf:8c:fb:
                    d4:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:13:6D:0B:D1:AC:7D:E8:08:1E:EF:90:A3:11:08:C3:F2:A3:0D:A2
            X509v3 Authority Key Identifier:
                keyid:B7:5D:7B:B0:AB:93:A0:86:16:91:07:A7:E2:E6:CA:38:26:19:E7:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t117sKuToIYWkQen4ubKOCYZ5_Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a06325-8915-4778-bd0b-e499abf2b9a8/1/t117sKuToIYWkQen4ubKOCYZ5_Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a06325-8915-4778-bd0b-e499abf2b9a8/1/t117sKuToIYWkQen4ubKOCYZ5_Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:b1:59:e4:65:b5:9d:c5:f8:ae:40:db:c0:60:d2:80:14:3c:
         40:26:7d:60:ba:85:9e:13:69:ca:e1:82:6d:7c:5c:4e:7e:cc:
         64:e7:66:6a:f5:3d:2c:f9:a4:cb:93:f6:84:0d:14:12:d6:b9:
         74:66:6a:9d:b6:85:94:a3:86:fe:75:90:f9:e4:8d:93:6f:39:
         7d:4f:84:2c:5c:62:e7:1a:b1:14:f9:f6:a7:45:65:00:fa:55:
         66:a9:b5:2b:f6:60:19:b7:4e:40:ec:88:3c:ff:de:69:ff:e8:
         db:56:a3:1e:f6:bd:47:0f:3e:6a:43:6e:f7:be:35:73:50:52:
         75:d1:b1:6a:3c:b2:64:08:82:4c:93:1a:fa:f8:3c:50:70:c2:
         fe:9b:e7:e0:55:34:02:30:39:3a:0c:a8:a6:fe:21:0a:9b:ed:
         24:06:dc:43:27:17:df:4e:a0:28:fb:ed:ae:90:47:71:e5:fb:
         b4:ed:5b:61:0a:b8:1b:f3:37:97:0d:82:35:01:5c:fd:de:fe:
         4a:44:a8:ab:d9:78:30:11:20:c1:8f:5c:c7:68:e2:ec:77:98:
         e7:8e:3d:af:71:3d:0f:83:d3:bc:f4:2d:6f:2c:d4:85:77:88:
         1c:3b:f0:43:4f:fd:90:78:0e:08:97:5f:1c:cd:fb:06:92:d2:
         2a:45:ee:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:52:00 2026 by rpki-client