Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/59nPsHjtpYFvyAnpjCXLcZY-dbc.mft
File:                     59nPsHjtpYFvyAnpjCXLcZY-dbc.mft (raw, json)
Hash identifier:          pyOxorPmBe2HGlFFS7ZaPfo60kzyNbodrCJvt6Ftegs=
Subject key identifier:   70:85:53:AA:84:9D:64:47:A3:1A:D7:7B:DE:2D:DE:2B:80:F6:DD:0C
Authority key identifier: E7:D9:CF:B0:78:ED:A5:81:6F:C8:09:E9:8C:25:CB:71:96:3E:75:B7
Certificate issuer:       /CN=e7d9cfb078eda5816fc809e98c25cb71963e75b7
Certificate serial:       01A0C2C40633EA292280D08197BD9E36E60D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/59nPsHjtpYFvyAnpjCXLcZY-dbc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/59nPsHjtpYFvyAnpjCXLcZY-dbc.mft
Manifest number:          1583
Signing time:             Mon 21 Sep 2026 07:00:21 +0000
Manifest this update:     Mon 21 Sep 2026 07:00:21 +0000
Manifest next update:     Tue 22 Sep 2026 07:00:21 +0000
Files and hashes:         1: 59nPsHjtpYFvyAnpjCXLcZY-dbc.crl (hash: XSjkoRkgWs/baAyu3s8pwvwbDzfrw+CqChuh251YESE=)
                          2: NuJEHjDX6DrNz16mjk8EVqK6rfk.roa (hash: Ys6DWelm4t8OA8iEU1qUmznaHoT0ZkwCkm2E4AX00hk=)
                          3: SZX71ph8QaHTDKUZ_awWsJ3Rop8.roa (hash: Ezxrik8lWqt6m7GXayjzec/qOLlnThrVGFvxsgwlbj0=)
                          4: fcB7v88dNhWSMeT9xkM_6tDlgB4.roa (hash: YUROPGa3vWTnRdc4QLIk9Iod/RP5OfyerhymP88IP4Q=)
                          5: gwoEbA-s4PqsDQjmI3X53FaRSJ0.roa (hash: avXcM/pU53LLvoxo3B9yOyXnFdyqGLBv2h2RqdKqi6o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/59nPsHjtpYFvyAnpjCXLcZY-dbc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/59nPsHjtpYFvyAnpjCXLcZY-dbc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/59nPsHjtpYFvyAnpjCXLcZY-dbc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 07:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c2:c4:06:33:ea:29:22:80:d0:81:97:bd:9e:36:e6:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7d9cfb078eda5816fc809e98c25cb71963e75b7
        Validity
            Not Before: Sep 21 07:00:21 2026 GMT
            Not After : Sep 22 07:00:21 2026 GMT
        Subject: CN=708553aa849d6447a31ad77bde2dde2b80f6dd0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c3:c8:2a:25:ae:d5:62:fa:c6:8a:2c:a5:1e:
                    f8:80:59:4a:2b:1d:7c:14:44:92:ff:87:18:df:64:
                    a4:99:82:4e:99:83:a7:ff:eb:04:d9:0d:8a:f3:0c:
                    4c:d6:19:d0:eb:c3:c9:8e:8c:4d:eb:37:0e:4c:a0:
                    84:c4:f3:69:d6:6f:53:5a:f7:b8:39:94:d3:f1:d5:
                    47:13:60:fc:ed:4e:7b:14:43:24:57:ef:be:04:20:
                    61:63:a2:7e:ce:ec:d5:f6:14:59:88:98:06:b4:42:
                    54:5f:a7:5a:13:ac:6d:6e:60:dd:9d:5b:6e:f3:51:
                    2e:dd:ae:4f:8c:5e:d8:d1:1c:31:76:8f:3b:cc:51:
                    26:58:d9:ab:07:5a:22:25:09:fd:51:5e:04:56:96:
                    6c:fa:af:f6:bf:82:87:ab:a8:6b:e6:7e:41:93:f8:
                    90:82:e3:d3:27:7f:e4:c5:43:2b:b9:65:4d:23:68:
                    8d:41:d0:d9:4f:0f:8d:87:2c:e3:a7:27:44:a7:c4:
                    f7:8c:17:54:d7:1d:c8:d9:67:46:3e:8a:d0:ab:ff:
                    2d:45:2a:fb:51:19:b1:bd:9f:09:52:97:84:4a:b7:
                    12:92:35:b9:70:2b:f7:8f:77:60:54:6e:a1:17:ea:
                    a4:98:b5:0d:52:13:cc:21:45:c4:a8:c1:bc:fe:31:
                    9a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:85:53:AA:84:9D:64:47:A3:1A:D7:7B:DE:2D:DE:2B:80:F6:DD:0C
            X509v3 Authority Key Identifier:
                keyid:E7:D9:CF:B0:78:ED:A5:81:6F:C8:09:E9:8C:25:CB:71:96:3E:75:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/59nPsHjtpYFvyAnpjCXLcZY-dbc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/59nPsHjtpYFvyAnpjCXLcZY-dbc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/59nPsHjtpYFvyAnpjCXLcZY-dbc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:87:53:78:88:75:d3:b9:2d:c8:7e:eb:a7:27:1b:0c:fe:7c:
         31:21:98:5b:f5:f6:3b:9c:c0:27:83:99:b2:b7:29:5c:47:71:
         81:40:b1:e6:c1:52:c3:68:e2:25:ff:ea:14:ac:a3:71:c8:de:
         15:7e:8f:05:79:01:0d:39:2f:70:9d:ac:32:bc:46:a4:b5:ad:
         40:03:34:83:05:cd:74:f2:ba:10:64:fa:b6:ca:eb:45:34:4f:
         b0:75:8b:d2:4f:c4:3f:37:73:53:09:50:a1:4e:7f:a3:29:3c:
         da:50:25:49:1c:97:bc:0b:30:f5:02:98:c0:f1:72:5f:21:9d:
         0c:14:bf:56:a9:7d:67:71:a5:1f:6e:59:ee:12:f4:86:4a:3a:
         8e:45:6b:6d:c8:1a:cc:8b:d8:7c:c4:d2:c9:9d:fa:fb:35:76:
         06:b5:34:72:2d:c2:0f:1f:b6:86:92:4d:d6:14:cf:75:f6:9d:
         8f:6c:56:c6:5c:7b:37:93:ad:53:90:56:78:13:50:62:45:bb:
         49:cf:f4:24:3c:05:8e:8e:d5:ce:d4:fb:8b:9b:b5:e2:25:20:
         00:8b:ef:a9:6e:d1:23:2c:f4:62:6c:40:c6:b2:aa:ef:cd:a6:
         8e:fe:de:a1:b3:78:f0:95:b6:5c:5a:04:b2:21:c3:03:e2:72:
         1b:c4:cb:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 15:39:20 2026 by rpki-client