Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.mft
File:                     ASBXSFLGu5I_yzgEJcT9PtXAupM.mft (raw, json)
Hash identifier:          6/AwD391gzc9TwE00g6aZ3UQpaGUnZ5uipT+997H4KI=
Subject key identifier:   D3:0D:C3:0A:27:3C:52:55:70:9D:1E:4D:8A:3B:95:4D:93:68:CD:BF
Authority key identifier: 01:20:57:48:52:C6:BB:92:3F:CB:38:04:25:C4:FD:3E:D5:C0:BA:93
Certificate issuer:       /CN=0120574852c6bb923fcb380425c4fd3ed5c0ba93
Certificate serial:       01A0DEE0E5CC52814D905D25E3DE6D96DEDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ASBXSFLGu5I_yzgEJcT9PtXAupM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.mft
Manifest number:          10E8
Signing time:             Sat 26 Sep 2026 18:01:15 +0000
Manifest this update:     Sat 26 Sep 2026 18:01:15 +0000
Manifest next update:     Sun 27 Sep 2026 18:01:15 +0000
Files and hashes:         1: ASBXSFLGu5I_yzgEJcT9PtXAupM.crl (hash: mYZoQhPgOcDtWQU6DY4Y81kDXcRtLAHnG9CEYSvGV8o=)
                          2: FzlkTAFVrFiVAlrg5k9O8RgqTRo.roa (hash: di2JSUIti459RqFlcovjuYG5N7iQ8p7FOakkzalMmcI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ASBXSFLGu5I_yzgEJcT9PtXAupM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 18:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:de:e0:e5:cc:52:81:4d:90:5d:25:e3:de:6d:96:de:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0120574852c6bb923fcb380425c4fd3ed5c0ba93
        Validity
            Not Before: Sep 26 18:01:15 2026 GMT
            Not After : Sep 27 18:01:15 2026 GMT
        Subject: CN=d30dc30a273c5255709d1e4d8a3b954d9368cdbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:44:ce:be:46:36:fa:b1:78:cf:41:a3:95:42:
                    cd:08:0c:6c:f2:09:de:13:35:bb:b9:f5:e1:2c:8a:
                    73:a3:9f:21:9b:37:9e:84:74:37:c8:51:4a:79:7d:
                    66:00:cc:59:c1:3a:5a:67:01:11:bd:01:1e:3d:0e:
                    a4:18:2e:b5:dc:f3:1c:97:0d:7b:d6:a9:df:21:64:
                    58:78:08:09:ef:9a:30:72:29:94:21:7c:ea:e4:f5:
                    ca:41:e3:fc:f0:99:02:e1:3b:80:c4:26:b6:d4:95:
                    2a:82:76:1b:ec:64:a8:35:04:c1:af:e8:d2:07:a7:
                    54:6d:c2:a7:9a:43:c7:dd:6d:33:32:ff:75:52:de:
                    93:3d:91:67:43:b9:e3:5b:78:55:26:91:13:07:e1:
                    6f:c5:dd:42:22:16:f5:4a:ca:77:89:4e:c4:06:98:
                    7b:cb:09:8e:ce:98:71:bd:f3:b7:27:93:12:ff:7d:
                    69:a0:69:33:4a:e9:84:d3:cf:a2:dd:f2:da:35:f2:
                    51:3b:2c:d1:15:7d:1e:b6:f6:0e:d1:ea:91:79:f5:
                    27:21:61:24:84:dd:4a:ee:11:9b:37:97:2c:6d:a1:
                    07:66:e6:40:f6:b5:64:9e:6e:e0:29:ee:95:8d:ee:
                    78:c3:73:a6:b4:04:0b:8a:33:02:85:a2:79:05:26:
                    1f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:0D:C3:0A:27:3C:52:55:70:9D:1E:4D:8A:3B:95:4D:93:68:CD:BF
            X509v3 Authority Key Identifier:
                keyid:01:20:57:48:52:C6:BB:92:3F:CB:38:04:25:C4:FD:3E:D5:C0:BA:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ASBXSFLGu5I_yzgEJcT9PtXAupM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:cc:fc:8c:03:2a:9c:ac:91:a9:ec:94:e7:0b:98:dd:63:8f:
         ef:76:ad:28:a4:77:98:94:35:3f:e3:5a:3c:31:2f:b6:76:d0:
         96:d1:19:ca:ee:f5:b0:5f:65:2b:f6:2b:d8:e1:82:e7:86:4e:
         95:01:65:02:4d:59:96:62:fa:72:87:1c:f8:40:d5:89:06:48:
         fc:ee:7a:29:f3:92:e3:d7:ef:a5:05:ec:00:1a:70:f6:d4:10:
         f6:93:14:20:2e:5c:54:14:8c:f1:83:4d:4e:71:46:74:ae:f3:
         41:a3:9d:fd:82:06:2d:8f:65:a9:0e:e6:76:1b:2c:96:97:53:
         90:9b:96:32:b0:ea:28:0f:7f:45:93:a2:b6:75:c2:93:29:56:
         bb:3a:44:c8:0c:14:4b:23:92:5e:ff:4b:bd:e1:8f:47:4b:19:
         5c:35:a5:c8:93:97:69:2f:e0:aa:12:5c:2e:f6:19:32:df:e5:
         0f:bd:07:d4:40:48:cc:18:2b:5e:3e:40:ac:24:e5:78:52:28:
         f9:7a:83:c6:ee:3f:30:bb:c2:1b:fb:01:17:a1:bb:16:44:91:
         3c:c9:51:e4:c0:e9:41:a1:71:c1:7c:df:1f:dc:55:16:96:01:
         ac:9c:57:8b:a2:44:64:41:16:04:11:98:da:04:37:c5:71:5f:
         c2:18:cc:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 22:39:28 2026 by rpki-client