Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.mft
File:                     DEd6vwon7eiG-8QkE9eonCJrEfo.mft (raw, json)
Hash identifier:          tovgi65auan0pAQ6KYKZLi2t4eX6VJcVsrBhfbWIueo=
Subject key identifier:   10:BE:48:98:96:CC:83:D1:9C:5D:9D:7A:95:7E:CC:D6:AB:2A:27:4F
Authority key identifier: 0C:47:7A:BF:0A:27:ED:E8:86:FB:C4:24:13:D7:A8:9C:22:6B:11:FA
Certificate issuer:       /CN=0c477abf0a27ede886fbc42413d7a89c226b11fa
Certificate serial:       01A0C5C535E671E215687119E366BB94D2B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DEd6vwon7eiG-8QkE9eonCJrEfo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.mft
Manifest number:          177D
Signing time:             Mon 21 Sep 2026 21:00:30 +0000
Manifest this update:     Mon 21 Sep 2026 21:00:30 +0000
Manifest next update:     Tue 22 Sep 2026 21:00:30 +0000
Files and hashes:         1: DEd6vwon7eiG-8QkE9eonCJrEfo.crl (hash: zznMD9A/wNnrTuQt044UtIx9UIrm+QLDbxAmi/ArGos=)
                          2: I6B11vAuliEHXkaj56Cx_nMNtzM.roa (hash: zwWKRvjHFcgx4AfaFVQj5qA+i2zTNLuDDbo0ohM5s9o=)
                          3: aFA8TdWBrL0sKL1WgCpchD-t0-E.roa (hash: yrp0PGLJIdfIoFJTh2LRDBtU78Dj8mCkVBqMsQkNwT0=)
                          4: zbElgd4kOsYPerCSi4Ys9upL4XA.roa (hash: i1lrAyqBTfs/DpcBlpdmtWLhCahW3WY5O3LNfMBqc9Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DEd6vwon7eiG-8QkE9eonCJrEfo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c5:c5:35:e6:71:e2:15:68:71:19:e3:66:bb:94:d2:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c477abf0a27ede886fbc42413d7a89c226b11fa
        Validity
            Not Before: Sep 21 21:00:30 2026 GMT
            Not After : Sep 22 21:00:30 2026 GMT
        Subject: CN=10be489896cc83d19c5d9d7a957eccd6ab2a274f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:42:78:67:4a:f6:0b:2c:2c:56:71:e0:cf:79:
                    e9:33:ef:1a:0b:48:38:f3:77:07:7d:b2:64:61:b3:
                    cb:2c:ac:f1:5a:5a:f9:0d:b5:7e:e4:d8:bc:cf:c7:
                    4a:31:06:b7:22:a3:e8:70:74:e0:4b:f5:4a:42:4f:
                    a4:ad:96:a6:50:87:24:45:fa:1b:6e:e7:81:6f:e8:
                    d7:65:20:0f:b0:5c:d4:9b:d7:43:a0:1b:79:4a:13:
                    f2:45:de:6b:c6:40:ca:4b:22:ea:e1:88:cd:27:fd:
                    d6:c9:bb:81:52:57:d9:bc:29:c1:be:aa:3c:5a:c8:
                    64:3a:57:8f:5f:c4:76:e7:4f:42:c3:f6:8c:ea:9c:
                    ce:c6:7a:39:da:84:dd:d2:20:cc:b7:d1:47:5e:7b:
                    2f:97:1a:c9:99:2f:b1:6e:e1:4f:db:61:50:b8:95:
                    76:7e:09:f4:67:f5:c4:1c:23:80:8b:64:18:2a:ee:
                    d2:48:9b:57:32:eb:ac:37:f3:51:cc:36:94:35:59:
                    24:cc:41:d2:e6:e1:28:2b:e4:ff:4f:c4:90:20:3a:
                    31:90:0a:91:f4:2c:fc:54:1b:84:28:2b:b5:d7:60:
                    c4:07:8c:6c:77:40:04:2a:2d:77:10:bb:d2:cf:e1:
                    3c:74:66:6e:e9:0a:7e:9d:73:ce:e9:2e:ac:bf:e9:
                    40:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:BE:48:98:96:CC:83:D1:9C:5D:9D:7A:95:7E:CC:D6:AB:2A:27:4F
            X509v3 Authority Key Identifier:
                keyid:0C:47:7A:BF:0A:27:ED:E8:86:FB:C4:24:13:D7:A8:9C:22:6B:11:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DEd6vwon7eiG-8QkE9eonCJrEfo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:34:07:c0:1e:a0:4c:3e:0e:cb:66:93:fa:4e:cd:14:06:ae:
         fd:74:a1:20:52:38:4c:be:33:ab:1c:dc:8c:93:a3:20:66:e1:
         98:95:49:7f:06:63:5a:25:28:bd:3c:02:e9:68:4f:97:1f:f9:
         e5:52:d0:0f:e1:16:26:3d:6b:84:a5:fa:c2:ac:b5:e5:26:2c:
         dc:bc:d5:16:03:c9:51:92:ce:c6:9e:ec:e3:25:a8:61:82:b2:
         3e:b4:9c:42:1b:f6:ef:79:6b:be:0a:f6:38:f2:2e:6b:6a:59:
         40:e0:f4:ab:3f:48:c4:eb:3a:7f:7b:72:a7:9e:31:46:f7:0c:
         78:7c:36:3d:b6:41:9d:f7:2a:06:3b:3d:5c:c1:a2:38:8a:c4:
         55:4f:6a:3d:01:5a:8a:5f:5e:a7:59:29:e4:25:96:6f:83:db:
         e4:4f:2f:eb:b3:1c:d5:8d:ba:2e:72:0f:e1:b3:e0:b9:53:f3:
         55:f4:49:5f:c6:6b:48:39:68:eb:c8:b3:e4:f8:d7:2f:55:c0:
         66:fe:71:50:b1:90:c5:1c:94:86:fd:0a:cd:8c:11:70:a4:3f:
         c2:79:c5:f6:40:c1:aa:a8:47:1f:a2:5d:45:d5:b5:f2:0f:ac:
         fc:de:dc:36:52:c5:dd:8b:6d:1d:3c:94:41:e3:cd:4c:b2:ca:
         4e:30:c3:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:43:55 2026 by rpki-client