Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.mft
File:                     DibUX9VpIdNGnRnEdXLydfnVUkI.mft (raw, json)
Hash identifier:          O4O+VZp82tcuz6/yRsZoOtBBUxi7xvnGGez4fNEDy1g=
Subject key identifier:   AE:63:F8:FB:2B:9E:AD:65:7D:1B:3A:67:D6:EE:35:D5:94:CD:02:BA
Authority key identifier: 0E:26:D4:5F:D5:69:21:D3:46:9D:19:C4:75:72:F2:75:F9:D5:52:42
Certificate issuer:       /CN=0e26d45fd56921d3469d19c47572f275f9d55242
Certificate serial:       01A0C5C545B4FD9EBAA6DC22B54F7F7D2299
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DibUX9VpIdNGnRnEdXLydfnVUkI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.mft
Manifest number:          0CB4
Signing time:             Mon 21 Sep 2026 21:00:35 +0000
Manifest this update:     Mon 21 Sep 2026 21:00:35 +0000
Manifest next update:     Tue 22 Sep 2026 21:00:35 +0000
Files and hashes:         1: DibUX9VpIdNGnRnEdXLydfnVUkI.crl (hash: JiLEMU8F+Y3+CVX1/c1x+ZPQ1o2yIpKj0TbZ+72LgUE=)
                          2: E5N49IFOZzcUudGH8Hfr0F0ywvk.roa (hash: qu/cDpuHW9hVmNW832+M9NPLYicyAqIzhTV6hHRmh3Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DibUX9VpIdNGnRnEdXLydfnVUkI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 21:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c5:c5:45:b4:fd:9e:ba:a6:dc:22:b5:4f:7f:7d:22:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e26d45fd56921d3469d19c47572f275f9d55242
        Validity
            Not Before: Sep 21 21:00:35 2026 GMT
            Not After : Sep 22 21:00:35 2026 GMT
        Subject: CN=ae63f8fb2b9ead657d1b3a67d6ee35d594cd02ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a1:3c:09:7d:c0:5d:80:de:b8:d3:59:37:c6:
                    8e:e0:03:7c:62:cd:f8:40:d9:d5:29:cd:e1:aa:9e:
                    7c:39:53:a1:dc:5f:49:f2:62:96:d4:ce:05:c4:30:
                    77:25:61:18:2b:6a:37:4f:a6:26:7c:94:07:12:e2:
                    7e:d9:83:24:db:9c:11:c9:ff:96:36:3c:42:12:73:
                    ec:5c:e8:3c:53:0b:03:ff:fc:70:5a:7a:28:8f:18:
                    d0:ae:03:96:4a:72:c0:b4:1e:69:11:9a:93:37:c5:
                    73:b3:33:a9:09:ae:75:13:ab:0c:da:10:2c:a4:86:
                    69:91:27:13:b1:bd:c8:38:90:13:e9:51:48:15:e0:
                    f5:16:b4:dd:e9:62:ed:71:bc:96:8f:30:d6:9c:95:
                    38:3b:76:e4:04:ce:44:ce:55:d0:71:30:ae:6f:09:
                    4c:da:45:6f:97:04:c7:42:f1:c3:34:1d:74:8e:98:
                    14:5a:ed:3d:4c:f0:96:44:23:26:c2:b8:a5:e8:f9:
                    50:5d:7e:27:2a:57:88:12:8c:d9:4c:88:00:67:80:
                    57:f5:23:c9:0e:4f:98:a7:26:83:61:dc:01:8c:02:
                    2c:89:92:99:82:50:4d:db:48:ec:4b:a5:45:06:64:
                    eb:03:86:c2:a5:a7:64:fa:d0:6f:f0:13:72:55:61:
                    d8:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:63:F8:FB:2B:9E:AD:65:7D:1B:3A:67:D6:EE:35:D5:94:CD:02:BA
            X509v3 Authority Key Identifier:
                keyid:0E:26:D4:5F:D5:69:21:D3:46:9D:19:C4:75:72:F2:75:F9:D5:52:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DibUX9VpIdNGnRnEdXLydfnVUkI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:a3:8c:6b:a0:50:96:4d:44:23:72:c1:f0:a3:51:32:47:0a:
         80:73:05:04:ff:be:ea:71:9d:ea:a3:ae:37:22:e9:8c:5e:48:
         9a:95:16:12:25:10:bc:23:6a:4b:3b:a6:03:86:6e:bd:1a:1a:
         b7:4e:96:f5:e6:ca:d4:08:47:49:e2:94:49:57:86:f4:66:95:
         88:4a:b5:40:a3:12:46:7e:4d:c0:dc:8b:d2:24:7d:81:2d:ee:
         34:46:cf:91:76:89:ff:59:92:ed:92:75:be:6a:d4:cd:65:55:
         b5:4a:9f:fc:82:f4:75:60:e5:8e:5e:2d:e5:9d:fa:d7:48:0c:
         91:ad:3e:9a:a1:be:49:23:d5:35:fd:f1:88:ac:1f:50:54:88:
         bf:c2:3a:f1:26:ef:b3:e0:36:24:9e:fe:85:76:88:c9:6b:34:
         89:6c:77:9e:2a:b3:cf:3f:1d:32:fa:c0:5e:82:3e:72:e0:6e:
         e6:0f:10:08:a8:e4:0a:55:20:2a:f3:da:ad:a2:10:1a:40:a3:
         a8:d3:63:a1:2f:34:87:34:c1:fe:cd:6d:8a:8e:9d:a9:28:97:
         08:56:61:4a:5a:18:7f:d8:cb:d3:5d:86:bc:12:81:0b:fe:5c:
         ed:ca:89:80:42:7b:85:b5:05:0e:7b:50:d4:6e:12:93:bd:2c:
         9c:1c:0f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:21:16 2026 by rpki-client