Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.mft
File:                     K0ro4PiNDIw530T_pB4ywmJ8OhU.mft (raw, json)
Hash identifier:          AORmd6Jz4yGUOwibIf16rRYSKAOqZhSW2sZ7h8ER3ck=
Subject key identifier:   5D:F4:8F:6B:6C:9D:F1:7B:7D:56:EA:9B:5D:C5:FD:5C:42:E2:85:D8
Authority key identifier: 2B:4A:E8:E0:F8:8D:0C:8C:39:DF:44:FF:A4:1E:32:C2:62:7C:3A:15
Certificate issuer:       /CN=2b4ae8e0f88d0c8c39df44ffa41e32c2627c3a15
Certificate serial:       01A0D614BEB8FFFD5D1D3E2D89A33D26C36E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K0ro4PiNDIw530T_pB4ywmJ8OhU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.mft
Manifest number:          0788
Signing time:             Fri 25 Sep 2026 01:01:18 +0000
Manifest this update:     Fri 25 Sep 2026 01:01:18 +0000
Manifest next update:     Sat 26 Sep 2026 01:01:18 +0000
Files and hashes:         1: K0ro4PiNDIw530T_pB4ywmJ8OhU.crl (hash: CxpR2li187ZAbav9b6fAndlUaKQdCBO9nZaIUqIAJ98=)
                          2: z5dBX6odp12M_OB_gttLAeXRzfY.roa (hash: H0+1g03VSFVNjWI/Z7WGHpAKWuQ/lvaaEnN2kUyKA+Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K0ro4PiNDIw530T_pB4ywmJ8OhU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d6:14:be:b8:ff:fd:5d:1d:3e:2d:89:a3:3d:26:c3:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b4ae8e0f88d0c8c39df44ffa41e32c2627c3a15
        Validity
            Not Before: Sep 25 01:01:18 2026 GMT
            Not After : Sep 26 01:01:18 2026 GMT
        Subject: CN=5df48f6b6c9df17b7d56ea9b5dc5fd5c42e285d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d2:63:be:0c:d9:79:f8:71:24:0d:65:e2:ae:
                    d0:01:57:15:cf:d8:dc:e2:05:7f:23:0b:1a:a3:c5:
                    8d:33:5e:47:b6:99:b2:61:a2:90:69:f2:ab:a2:2b:
                    b1:08:f9:2e:ca:0b:6c:f0:f9:6c:7a:8f:2b:34:a1:
                    74:23:38:fd:bd:4c:ae:da:88:15:78:04:66:64:74:
                    e8:df:e3:b0:f2:91:b4:a2:8a:d2:d0:77:16:69:01:
                    c3:20:98:3d:d7:d9:24:45:09:84:13:ab:e0:12:af:
                    41:7e:52:0e:bf:61:18:13:97:d8:5f:79:24:15:b2:
                    ea:c7:8a:9a:b3:45:57:2d:ff:87:59:09:76:c9:a7:
                    d4:e4:78:02:a0:48:c9:c8:dd:fc:32:c0:6f:33:00:
                    3d:d9:6e:49:a9:dd:01:37:8e:70:5d:3e:73:b6:45:
                    dc:f8:fa:95:0a:90:b2:4f:5d:4b:31:b9:ee:3b:36:
                    f8:a6:dd:96:9d:84:2f:2b:99:f4:7f:8f:7c:aa:b3:
                    37:5e:32:fb:3f:2e:6a:56:f1:c0:bd:ed:79:09:7c:
                    d7:a9:ee:a9:c3:8a:0f:4e:2c:bf:3b:25:4e:b5:b3:
                    a6:2f:6f:18:c2:41:f3:30:b6:ac:d1:64:1e:c5:f7:
                    d5:d3:71:c4:14:1c:6d:44:8b:c1:88:84:34:47:20:
                    be:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:F4:8F:6B:6C:9D:F1:7B:7D:56:EA:9B:5D:C5:FD:5C:42:E2:85:D8
            X509v3 Authority Key Identifier:
                keyid:2B:4A:E8:E0:F8:8D:0C:8C:39:DF:44:FF:A4:1E:32:C2:62:7C:3A:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0ro4PiNDIw530T_pB4ywmJ8OhU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:af:f3:11:b9:4c:ba:2e:0b:ef:01:45:33:bc:c9:3f:90:10:
         09:42:7e:04:da:73:39:08:74:0d:60:32:f9:da:f8:62:2e:4a:
         3a:34:d1:df:86:3c:d5:45:11:20:a7:ef:cd:35:03:ae:af:6a:
         5b:f9:41:04:22:1b:ed:5d:e0:08:02:eb:31:6b:73:ef:b6:59:
         6f:89:5b:08:96:55:c4:8a:95:b9:77:33:0a:2e:55:8a:6a:9f:
         4f:63:b6:72:99:99:6b:fe:33:23:7b:4d:6b:d1:40:f8:62:07:
         9c:1e:6d:a3:c9:e0:ff:97:77:1f:c1:60:7b:98:3e:5e:e2:a7:
         07:23:f5:e1:9c:d5:dc:30:47:da:7e:5f:15:d0:8b:21:b2:2e:
         05:dc:b7:51:9b:44:2f:b2:33:15:eb:11:7d:b5:4c:7f:2d:fb:
         71:8c:f6:6f:64:94:b4:32:6b:cc:db:26:54:73:54:99:f0:9e:
         99:7f:69:87:8c:98:93:2b:05:7c:15:ce:9c:52:db:f4:60:6a:
         93:70:37:16:ae:12:59:d9:1c:0e:48:b5:c2:bd:28:01:c7:8c:
         eb:75:af:2c:ab:ad:10:39:21:ed:dd:36:42:68:f9:21:ed:d4:
         28:d5:69:cd:81:0c:a4:d1:f3:a1:87:33:28:e7:92:37:19:c5:
         27:f0:df:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:26:50 2026 by rpki-client