Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/adf329-09c5-4bb8-af6c-d95ab99fb0c5/1/82-cuv9lO2ATS0aqcOeRFwmKfGQ.mft
File:                     82-cuv9lO2ATS0aqcOeRFwmKfGQ.mft (raw, json)
Hash identifier:          0d7Wx3WKFTxu6p4RSGDT2wL25Dsh6jP6wFaxTII29KI=
Subject key identifier:   D5:36:E8:FC:6C:28:36:92:A6:83:A6:48:02:C0:F4:70:0A:71:4E:C1
Authority key identifier: F3:6F:9C:BA:FF:65:3B:60:13:4B:46:AA:70:E7:91:17:09:8A:7C:64
Certificate issuer:       /CN=f36f9cbaff653b60134b46aa70e79117098a7c64
Certificate serial:       01A0C66A316F3683880C14A7D04C800D76F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/82-cuv9lO2ATS0aqcOeRFwmKfGQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/adf329-09c5-4bb8-af6c-d95ab99fb0c5/1/82-cuv9lO2ATS0aqcOeRFwmKfGQ.mft
Manifest number:          156D
Signing time:             Tue 22 Sep 2026 00:00:43 +0000
Manifest this update:     Tue 22 Sep 2026 00:00:43 +0000
Manifest next update:     Wed 23 Sep 2026 00:00:43 +0000
Files and hashes:         1: 82-cuv9lO2ATS0aqcOeRFwmKfGQ.crl (hash: MVpdqwn+eoY+sJgvOn/Mri14VGLf12M1YUTZnW93Gik=)
                          2: AWrvYFZRzBwoKUoD2RTwopn0ahg.roa (hash: FIrRNnU7H4yL3fRTOTjvqaEhwxiYCua1DMnPIKZ4Wpk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/adf329-09c5-4bb8-af6c-d95ab99fb0c5/1/82-cuv9lO2ATS0aqcOeRFwmKfGQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/adf329-09c5-4bb8-af6c-d95ab99fb0c5/1/82-cuv9lO2ATS0aqcOeRFwmKfGQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/82-cuv9lO2ATS0aqcOeRFwmKfGQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 00:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c6:6a:31:6f:36:83:88:0c:14:a7:d0:4c:80:0d:76:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f36f9cbaff653b60134b46aa70e79117098a7c64
        Validity
            Not Before: Sep 22 00:00:43 2026 GMT
            Not After : Sep 23 00:00:43 2026 GMT
        Subject: CN=d536e8fc6c283692a683a64802c0f4700a714ec1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:04:e7:f0:35:31:8d:ab:3d:a0:f1:f9:49:d5:
                    8f:80:f8:6b:f7:4b:69:2f:49:86:04:5b:71:14:e3:
                    98:ec:57:da:38:a7:85:fc:c5:ff:07:d5:4a:16:5d:
                    b4:cf:c6:d2:d5:4b:1d:46:23:65:3b:0d:b5:46:c1:
                    54:a2:ae:46:e0:41:8e:96:9e:a3:f8:b6:5e:27:56:
                    fc:c2:a0:3c:9c:47:b9:b7:38:a0:14:68:9f:af:c5:
                    21:24:6a:ff:e6:31:d9:0e:2e:38:2b:95:94:be:9b:
                    11:91:02:99:6c:43:45:46:4b:ec:92:53:3d:cf:ad:
                    bc:e8:89:9d:5a:69:85:dc:45:e2:e7:b2:6d:d6:b1:
                    d9:8f:b3:98:6f:b6:54:ad:e9:2b:cc:cb:54:63:10:
                    ad:3d:26:6f:45:e1:72:b6:04:c7:ce:74:58:12:5c:
                    9f:fc:4c:27:ef:df:55:96:7e:6c:76:bf:d3:59:1d:
                    99:73:d7:ea:17:04:1f:58:a1:d1:6c:03:d6:52:6f:
                    bf:45:23:9b:4e:ec:68:21:e7:e2:cd:f8:25:61:7e:
                    bd:b7:c5:b9:34:1a:6e:dc:61:ff:74:81:df:b2:c8:
                    e8:b3:3b:70:fc:4c:81:e8:ea:a8:22:cf:a0:b9:ef:
                    60:5d:66:1b:1e:b5:2c:b7:64:c5:03:24:e8:2a:e9:
                    4e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:36:E8:FC:6C:28:36:92:A6:83:A6:48:02:C0:F4:70:0A:71:4E:C1
            X509v3 Authority Key Identifier:
                keyid:F3:6F:9C:BA:FF:65:3B:60:13:4B:46:AA:70:E7:91:17:09:8A:7C:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/82-cuv9lO2ATS0aqcOeRFwmKfGQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/adf329-09c5-4bb8-af6c-d95ab99fb0c5/1/82-cuv9lO2ATS0aqcOeRFwmKfGQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/adf329-09c5-4bb8-af6c-d95ab99fb0c5/1/82-cuv9lO2ATS0aqcOeRFwmKfGQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:ca:6d:04:e4:7a:22:f4:ea:4c:3c:4e:a1:6e:99:c3:95:68:
         73:f5:9c:60:34:44:3f:48:27:20:c0:e9:6c:7e:c7:a6:47:db:
         ad:ca:9f:8f:79:bf:50:e3:e4:e8:81:fc:f5:74:3a:9b:ee:61:
         26:37:9e:11:39:75:ec:0a:2e:8d:7d:e4:2d:3c:c7:11:42:05:
         78:dd:55:45:30:e6:57:52:2f:02:ae:e7:01:c2:c1:40:53:7c:
         d2:52:cc:19:8d:e9:dd:aa:7f:dc:47:59:aa:e9:73:9c:bb:d9:
         ee:77:15:b7:d0:cf:31:2a:6f:2a:c6:ea:41:1d:cd:03:5a:16:
         91:49:96:03:04:af:ed:99:fd:28:30:c5:fb:d9:97:83:eb:d7:
         0d:06:b6:72:97:bd:5f:10:93:e7:ea:9a:71:a9:b6:01:78:69:
         69:8d:d9:a7:49:55:f1:d7:8c:82:53:b2:17:7c:53:e8:8d:3f:
         c4:7b:e8:df:e5:5e:51:3c:92:4b:33:63:c7:d4:27:e9:f0:f7:
         c4:ad:4f:68:11:ea:60:6a:42:5f:34:b1:95:6f:30:1b:86:a6:
         89:a8:ae:34:10:90:cc:b4:cd:f5:72:af:81:9d:d4:87:eb:8d:
         5e:62:4a:67:0e:17:43:a8:4a:88:2f:61:fa:cf:a9:87:88:9a:
         00:d5:31:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:18:11 2026 by rpki-client