Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft
File:                     DgE0-vunLgYznK3FXV8TuuSCsS0.mft (raw, json)
Hash identifier:          iLRLYZmU49GE8lGwhCa3rgLKNCoiEqoKNljElZPTO/U=
Subject key identifier:   88:14:D8:02:C7:91:BE:FA:8F:69:2E:0C:1F:A0:F5:BB:97:49:06:CA
Authority key identifier: 0E:01:34:FA:FB:A7:2E:06:33:9C:AD:C5:5D:5F:13:BA:E4:82:B1:2D
Certificate issuer:       /CN=0e0134fafba72e06339cadc55d5f13bae482b12d
Certificate serial:       01A0BCF966F1817BF9591193DD0453EA19FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft
Manifest number:          1A65
Signing time:             Sun 20 Sep 2026 04:00:56 +0000
Manifest this update:     Sun 20 Sep 2026 04:00:56 +0000
Manifest next update:     Mon 21 Sep 2026 04:00:56 +0000
Files and hashes:         1: DgE0-vunLgYznK3FXV8TuuSCsS0.crl (hash: 7n/+58SiH6pAJvc2T51EbJy1cNUOgqIE3c6Y1/GGKOo=)
                          2: FNGdELpGS2bwEGg4hvaYUE_r1O4.roa (hash: Ei6sBNoGSjj3ahbV1+2LrTjtk8IEn6iFKEC198BdvPQ=)
                          3: cfuyV7WY5uCzefphkg9dkFiDF4o.roa (hash: 56j+8wClcw9KajdQHM4PT6tZ5VXaRrrlOf4m/1pMO8M=)
                          4: zdTKCzMNYrD_vxLGScehqegrrJk.roa (hash: Al6OIKoNSWVa63JvchjYlE1VIlKOSAurCVguG0aSQOU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 04:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:bc:f9:66:f1:81:7b:f9:59:11:93:dd:04:53:ea:19:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e0134fafba72e06339cadc55d5f13bae482b12d
        Validity
            Not Before: Sep 20 04:00:56 2026 GMT
            Not After : Sep 21 04:00:56 2026 GMT
        Subject: CN=8814d802c791befa8f692e0c1fa0f5bb974906ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:bc:36:82:dc:2c:cb:04:e2:ef:cf:47:b1:d1:
                    f0:71:7c:d0:dd:80:7f:30:2f:29:13:42:20:96:77:
                    9b:4a:a5:2c:9a:1f:7e:0b:1f:16:d2:2c:67:3a:9e:
                    0c:bb:af:ea:7b:4e:82:cb:ee:29:1f:4e:e5:d1:08:
                    7d:e3:c2:81:90:8e:78:c9:3f:dc:50:fc:2d:55:01:
                    06:92:68:c0:64:e1:3e:23:0e:84:3d:8c:af:e7:71:
                    00:5c:e8:02:d9:cf:45:b4:a3:66:cc:db:af:77:0c:
                    73:82:28:0e:87:f6:4f:8d:94:6c:92:5d:b2:9d:9e:
                    bd:2b:f8:af:b2:90:b6:f9:90:0a:b4:79:e4:82:71:
                    c8:67:f0:54:63:84:93:0d:9d:eb:af:32:70:3c:8a:
                    5f:0e:c3:e4:36:84:24:19:f8:59:11:58:19:46:08:
                    d3:6f:81:c5:0d:06:90:4e:6b:6a:0b:2e:b7:79:37:
                    25:da:f9:3b:a4:8b:f2:e2:cc:de:a4:47:cb:bc:a2:
                    76:d3:8a:ef:3d:b4:4b:b7:9c:6a:cd:09:be:87:1e:
                    3e:cc:66:0d:65:9b:b9:6f:35:ee:c0:66:92:45:ee:
                    52:05:a5:24:01:e4:90:9e:b7:43:64:00:7e:1d:90:
                    9a:0c:0b:28:81:25:00:e0:bb:b3:63:fa:a7:d0:ae:
                    27:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:14:D8:02:C7:91:BE:FA:8F:69:2E:0C:1F:A0:F5:BB:97:49:06:CA
            X509v3 Authority Key Identifier:
                keyid:0E:01:34:FA:FB:A7:2E:06:33:9C:AD:C5:5D:5F:13:BA:E4:82:B1:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:da:d7:2d:49:0b:dc:5e:96:d6:f0:84:94:33:2d:e8:f2:3c:
         a5:56:33:4e:0d:1d:68:c0:a7:ac:c1:f3:e3:45:22:d1:37:ac:
         7a:06:8f:33:6e:4a:80:3b:16:7d:dc:17:30:3f:18:09:eb:35:
         e1:66:f6:c1:3d:e4:96:fe:2e:e9:c7:67:78:3b:2a:3d:06:c5:
         80:5e:31:fc:9e:dd:ca:81:be:35:13:e8:96:27:1b:4b:66:fa:
         21:54:f6:98:1a:6d:1b:7e:a0:17:30:df:93:f3:94:db:db:1c:
         4b:12:fc:f3:ae:ba:84:18:c9:eb:6c:5b:01:ae:47:b6:43:f3:
         09:77:2b:e1:d8:98:ee:f2:c8:48:c8:c6:2d:8e:91:6f:37:0d:
         96:d8:ea:68:d9:37:71:b7:19:e4:ce:f0:04:8b:aa:81:8d:a1:
         31:5b:92:34:f6:09:37:a6:fe:a7:c4:aa:79:21:e3:19:ad:1b:
         92:33:67:94:6e:ad:36:96:46:6d:e7:e4:4e:cb:06:6b:cf:88:
         d9:36:2c:12:65:d3:d0:48:e3:38:35:4c:74:19:53:54:49:57:
         2a:60:23:58:f3:99:2c:dc:ae:ae:1a:98:80:d3:63:3f:56:6e:
         04:d6:a8:25:53:21:37:19:99:a8:06:ad:52:28:82:d2:95:97:
         d5:32:2a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:52:06 2026 by rpki-client