Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/1uU17yFuvm9_xVz73DFTK5EtjmM.mft
File:                     1uU17yFuvm9_xVz73DFTK5EtjmM.mft (raw, json)
Hash identifier:          SABjn+NrACs8HCuJ80kHgf5AEvaUILLY2/BvTSUoEQk=
Subject key identifier:   82:2B:35:CD:38:3C:92:B8:8B:78:C2:77:F6:49:30:B8:2D:AC:EE:35
Authority key identifier: D6:E5:35:EF:21:6E:BE:6F:7F:C5:5C:FB:DC:31:53:2B:91:2D:8E:63
Certificate issuer:       /CN=d6e535ef216ebe6f7fc55cfbdc31532b912d8e63
Certificate serial:       01A0E1E223001DDEDBE81AC3A560AC07355F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1uU17yFuvm9_xVz73DFTK5EtjmM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/1uU17yFuvm9_xVz73DFTK5EtjmM.mft
Manifest number:          0F9F
Signing time:             Sun 27 Sep 2026 08:01:28 +0000
Manifest this update:     Sun 27 Sep 2026 08:01:28 +0000
Manifest next update:     Mon 28 Sep 2026 08:01:28 +0000
Files and hashes:         1: 1uU17yFuvm9_xVz73DFTK5EtjmM.crl (hash: xXfLGRhugBqtA2cXejWfjdEfOMgKG4W1JUMpQr6MuwA=)
                          2: KU8q2n2CMANYI0fRJo2s7p5G3KY.roa (hash: TGvZcgRzyrpwF/XoDD+tDWJMqg0cIvjLnDlG6w6JYqw=)
                          3: O6Raip0XpEJuTr4vqY0PE2h8BoU.roa (hash: rkN25N2D5fR585r7ltR6p+7tSt5GR6XgMCZ7nCaivnw=)
                          4: w0AIzL_yXPCHkJImPTgRwJJtTaU.roa (hash: sZxn5UqLt4mLh2cPzkHphFRVza6dN160+xYuKyv4YdI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/1uU17yFuvm9_xVz73DFTK5EtjmM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/1uU17yFuvm9_xVz73DFTK5EtjmM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1uU17yFuvm9_xVz73DFTK5EtjmM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 04:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e1:e2:23:00:1d:de:db:e8:1a:c3:a5:60:ac:07:35:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6e535ef216ebe6f7fc55cfbdc31532b912d8e63
        Validity
            Not Before: Sep 27 08:01:28 2026 GMT
            Not After : Sep 28 08:01:28 2026 GMT
        Subject: CN=822b35cd383c92b88b78c277f64930b82dacee35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:17:a8:e8:36:8e:54:9f:bf:91:01:c0:e5:1d:
                    4e:97:a5:5e:64:11:89:92:22:a4:d4:fa:eb:3f:18:
                    44:0e:ff:cc:8b:eb:d3:68:73:6c:be:8f:08:41:ab:
                    6f:ef:61:67:8e:d7:65:1d:11:cd:db:5c:64:a0:b0:
                    0b:0a:b6:eb:6d:ae:14:e3:d0:3b:df:ef:2a:88:e6:
                    a2:43:77:87:9a:c9:2c:a9:d8:b0:f8:2b:0d:67:02:
                    18:52:66:65:9a:e0:e1:7a:b0:e3:10:c2:57:78:f2:
                    31:61:1e:45:81:d8:0b:f1:39:92:39:ae:51:31:6b:
                    aa:ed:f9:31:ad:e4:d6:47:42:46:a6:e1:13:89:fe:
                    d3:67:18:b3:1b:19:61:23:85:17:bb:86:c9:75:77:
                    a7:a8:a2:3c:cb:07:9c:7e:bb:5f:97:e5:84:bb:ea:
                    c3:43:9e:87:ab:bc:60:5a:3b:ca:47:7e:c2:ff:91:
                    a9:f2:40:43:9c:7d:0f:e6:68:98:d8:53:02:2a:50:
                    f7:2e:14:f6:ed:83:67:dd:99:c9:13:f2:2e:f1:0c:
                    f5:46:27:4c:66:ea:7c:1a:1b:0c:0d:f5:91:15:05:
                    36:4b:23:1e:03:d2:5f:0a:18:e1:86:da:7f:da:a4:
                    30:fb:53:4c:88:2d:38:50:ec:1e:c5:be:c8:e2:1c:
                    8a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:2B:35:CD:38:3C:92:B8:8B:78:C2:77:F6:49:30:B8:2D:AC:EE:35
            X509v3 Authority Key Identifier:
                keyid:D6:E5:35:EF:21:6E:BE:6F:7F:C5:5C:FB:DC:31:53:2B:91:2D:8E:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1uU17yFuvm9_xVz73DFTK5EtjmM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/1uU17yFuvm9_xVz73DFTK5EtjmM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/1uU17yFuvm9_xVz73DFTK5EtjmM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:68:ae:70:22:3c:8f:c8:4f:97:5b:20:86:b9:ab:c1:f9:de:
         3f:e7:55:9d:87:31:68:a4:0d:b8:f8:ba:b8:59:99:37:e9:66:
         c0:69:22:7a:c1:71:1c:74:07:a6:e0:f3:09:ba:4a:5b:22:30:
         4e:c5:f3:70:52:46:7e:60:b2:72:c7:fb:d2:5a:aa:23:8e:cd:
         c9:28:50:a5:a1:e9:e1:22:5d:96:84:78:3c:bc:6c:16:6d:27:
         8b:58:c2:b3:32:b1:78:8f:0a:61:0d:93:87:66:f1:ef:a5:69:
         8a:e8:db:5d:1c:a9:d8:68:8a:df:f2:4d:99:4b:b4:0b:74:06:
         3c:c1:18:34:01:e3:c4:ef:0c:ca:44:1d:6d:ea:7f:05:b2:db:
         76:ef:02:eb:6a:2b:5c:f0:16:fd:2f:71:7f:ac:9a:28:b9:51:
         d0:0a:83:d2:31:e5:eb:70:94:d6:b9:2a:2b:f6:23:7b:3a:79:
         eb:fd:e3:d6:df:27:6b:ad:41:33:a0:0c:77:c8:2d:07:6e:42:
         06:cf:83:c7:29:9e:3e:f0:0c:52:f4:71:b6:0c:9b:c5:84:b9:
         e4:a2:0e:0d:af:ee:4a:e4:7a:73:88:15:e7:e0:b9:33:b7:b9:
         d2:2a:e9:5e:95:ab:7a:5f:a7:f6:12:e7:ae:be:fe:37:57:52:
         87:4f:be:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:26:38 2026 by rpki-client