Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/e38fc3-ea13-4013-9284-3a8ac4dc3eef/1/36vRQuiUFoiDzkUicxf5-lAiGU8.mft
File:                     36vRQuiUFoiDzkUicxf5-lAiGU8.mft (raw, json)
Hash identifier:          xeNKXBCF3IJFB1vE3ffkx60Y5/kplrNJZ1OyB3frIFw=
Subject key identifier:   D7:B9:0E:BB:A2:69:83:75:E9:C0:B0:02:8E:54:01:71:D7:71:ED:E6
Authority key identifier: DF:AB:D1:42:E8:94:16:88:83:CE:45:22:73:17:F9:FA:50:22:19:4F
Certificate issuer:       /CN=dfabd142e894168883ce45227317f9fa5022194f
Certificate serial:       01A0C88F57AB9C6D826AB7ACBB06294482C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/36vRQuiUFoiDzkUicxf5-lAiGU8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/e38fc3-ea13-4013-9284-3a8ac4dc3eef/1/36vRQuiUFoiDzkUicxf5-lAiGU8.mft
Manifest number:          1063
Signing time:             Tue 22 Sep 2026 10:00:32 +0000
Manifest this update:     Tue 22 Sep 2026 10:00:32 +0000
Manifest next update:     Wed 23 Sep 2026 10:00:32 +0000
Files and hashes:         1: 36vRQuiUFoiDzkUicxf5-lAiGU8.crl (hash: BMkevToS11oJMT2K8CHHKTOjAVJwqy5gOfgBc+huhHI=)
                          2: uI-quQ5_A0kZBp2yrmzexnFbllM.roa (hash: rDYsx8yebGIjiP0Kf0GxRBRYizjVck1GA16b9PLZbjQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/e38fc3-ea13-4013-9284-3a8ac4dc3eef/1/36vRQuiUFoiDzkUicxf5-lAiGU8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/e38fc3-ea13-4013-9284-3a8ac4dc3eef/1/36vRQuiUFoiDzkUicxf5-lAiGU8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/36vRQuiUFoiDzkUicxf5-lAiGU8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 05:59:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c8:8f:57:ab:9c:6d:82:6a:b7:ac:bb:06:29:44:82:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfabd142e894168883ce45227317f9fa5022194f
        Validity
            Not Before: Sep 22 10:00:32 2026 GMT
            Not After : Sep 23 10:00:32 2026 GMT
        Subject: CN=d7b90ebba2698375e9c0b0028e540171d771ede6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:55:c2:d8:19:aa:36:d1:43:29:cc:e1:68:35:
                    a8:97:be:f5:4a:c3:60:4f:04:84:b8:b9:7b:35:f3:
                    67:f9:48:42:c1:ce:d3:86:cc:c0:0f:f6:3e:bc:55:
                    87:51:24:8d:60:73:1b:d0:a9:57:14:12:45:07:f9:
                    82:cf:3a:d0:40:a7:2d:a4:d3:80:40:1b:e0:84:92:
                    b2:76:c6:5e:1d:61:dd:2d:c7:10:b4:00:5a:23:a5:
                    e4:5d:c6:99:67:9e:20:3c:2a:de:44:76:d8:ca:c9:
                    3f:53:04:9f:ad:96:27:71:a0:69:16:e6:5f:4d:1d:
                    78:94:1e:19:17:67:89:57:88:57:13:e3:10:44:36:
                    63:f7:1c:04:36:c1:94:d1:4a:e7:f1:a1:48:49:11:
                    93:69:a3:8e:8a:b9:e3:e3:28:f7:0e:5a:b6:cc:32:
                    7f:d1:f4:8b:c3:1f:ff:1e:5a:ac:56:56:fc:90:b2:
                    b1:8c:1d:70:c2:ec:03:0c:d8:b9:45:49:04:13:a8:
                    ef:db:a3:b8:d1:2a:67:dc:75:40:b6:78:41:5f:9e:
                    fe:f3:d4:a2:18:c8:f8:96:af:f1:e9:b7:df:82:08:
                    c0:c1:7f:de:b8:cf:02:ad:03:45:65:92:8a:99:b5:
                    92:a4:fd:ac:b7:1c:5e:9b:4b:02:58:3b:ae:b0:9d:
                    b5:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:B9:0E:BB:A2:69:83:75:E9:C0:B0:02:8E:54:01:71:D7:71:ED:E6
            X509v3 Authority Key Identifier:
                keyid:DF:AB:D1:42:E8:94:16:88:83:CE:45:22:73:17:F9:FA:50:22:19:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/36vRQuiUFoiDzkUicxf5-lAiGU8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e38fc3-ea13-4013-9284-3a8ac4dc3eef/1/36vRQuiUFoiDzkUicxf5-lAiGU8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e38fc3-ea13-4013-9284-3a8ac4dc3eef/1/36vRQuiUFoiDzkUicxf5-lAiGU8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:8b:f3:09:e7:2b:cf:88:74:ea:e1:7a:de:5c:12:8f:4c:21:
         f0:9e:a3:05:c7:94:5b:52:6e:51:dd:39:26:f0:c7:b7:fe:3b:
         ce:56:28:23:f3:86:ab:ee:96:ec:9e:15:61:f8:60:82:31:f0:
         7a:49:7b:19:f5:cf:ff:d2:8e:88:1a:81:41:d4:23:62:61:72:
         bb:7a:ba:e3:c0:d5:3e:6f:2a:53:e2:5a:a0:05:27:ce:99:3f:
         0b:f3:d1:bf:a9:2a:26:72:82:8e:9d:35:a5:bd:1c:fb:53:e4:
         11:7a:35:bc:eb:a3:f3:7b:f0:87:c5:48:d8:52:a3:bd:3a:09:
         dd:a1:60:9e:f2:3e:6d:3c:66:15:56:54:4f:59:b0:07:a5:38:
         0f:0f:64:bd:19:50:80:c6:a9:7a:40:a2:c4:99:3c:18:de:97:
         4c:6f:bd:e7:a2:a7:c4:80:26:b3:13:59:55:41:99:30:f3:96:
         da:76:23:d5:f7:d8:ba:83:5c:05:2d:55:58:5f:7c:02:d6:c3:
         2b:29:62:55:b8:06:31:1a:3b:b9:dd:4b:71:2a:da:b4:25:2e:
         dc:41:47:06:ba:b2:f0:64:46:d7:89:9a:7a:21:8d:c8:1b:30:
         a8:dc:97:a3:fb:6c:9a:35:da:8a:e1:f5:87:63:89:40:b7:a2:
         4a:e5:ad:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:55:21 2026 by rpki-client