Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft
File:                     32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft (raw, json)
Hash identifier:          8YVDjrIt8yP1dhkeDBsO2e77JE+jOJuR9chT5sOCxms=
Subject key identifier:   E8:29:66:61:3B:A6:6C:5E:E1:3E:6F:CF:9A:60:59:A6:E2:F6:85:21
Authority key identifier: DF:6A:92:67:B1:8B:36:D8:28:89:0A:86:38:7F:31:0B:84:C0:4B:63
Certificate issuer:       /CN=df6a9267b18b36d828890a86387f310b84c04b63
Certificate serial:       01A0C77D357CA803F8E3BC1F37409C5E05F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/32qSZ7GLNtgoiQqGOH8xC4TAS2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft
Manifest number:          1201
Signing time:             Tue 22 Sep 2026 05:01:06 +0000
Manifest this update:     Tue 22 Sep 2026 05:01:06 +0000
Manifest next update:     Wed 23 Sep 2026 05:01:06 +0000
Files and hashes:         1: 32qSZ7GLNtgoiQqGOH8xC4TAS2M.crl (hash: acMT5ImHjcgpp1ZhflWnHQaBRskoA1SOWfRjRlHK04U=)
                          2: 6tu6wsRKFmIyHrU1PRGJUD04ppo.asa (hash: aHFYEiuMALmMOLvgpIvmsiVm50NUJxSxTCOLYvpZwmc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/32qSZ7GLNtgoiQqGOH8xC4TAS2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c7:7d:35:7c:a8:03:f8:e3:bc:1f:37:40:9c:5e:05:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6a9267b18b36d828890a86387f310b84c04b63
        Validity
            Not Before: Sep 22 05:01:06 2026 GMT
            Not After : Sep 23 05:01:06 2026 GMT
        Subject: CN=e82966613ba66c5ee13e6fcf9a6059a6e2f68521
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:91:de:c3:86:88:72:3b:2f:fd:8d:ff:70:08:
                    54:6c:46:79:fc:50:d9:1f:99:bd:e5:4b:77:41:e1:
                    a0:d9:e2:4a:3d:a3:0f:a8:be:0f:2c:dd:7b:aa:fb:
                    63:58:4b:d6:52:c1:48:ff:0d:80:d6:d6:5d:5a:df:
                    86:3b:bf:5a:74:32:ba:ec:b4:5d:a8:7e:09:8d:de:
                    f0:13:ed:55:d4:68:8d:32:3e:27:ce:45:05:97:5e:
                    2b:12:e3:32:07:87:0d:f9:33:b5:92:40:b3:8a:26:
                    ba:57:8d:3e:00:84:46:98:30:e5:a1:30:60:af:27:
                    8a:a8:21:4f:17:53:66:37:aa:b2:b9:60:0b:0b:ec:
                    d4:c1:94:81:1e:c6:b0:29:bb:e2:3e:43:80:6f:c1:
                    4a:21:cc:6b:08:cc:c8:ca:96:47:54:33:93:a5:9b:
                    05:9b:6f:1c:1f:7f:cd:6d:4a:49:91:e1:5c:90:24:
                    77:fe:ec:ac:e1:0d:bd:45:f9:c1:11:9e:b7:a9:18:
                    9c:ae:14:b6:22:0e:23:2e:4b:fc:ca:d7:26:3d:9d:
                    fa:34:3b:0a:ed:06:3c:06:de:23:b9:40:d0:e7:31:
                    46:48:7c:28:80:f7:b6:aa:88:f4:88:98:a8:7b:c0:
                    91:91:15:63:df:35:e4:56:95:63:d6:e9:39:61:6b:
                    cf:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:29:66:61:3B:A6:6C:5E:E1:3E:6F:CF:9A:60:59:A6:E2:F6:85:21
            X509v3 Authority Key Identifier:
                keyid:DF:6A:92:67:B1:8B:36:D8:28:89:0A:86:38:7F:31:0B:84:C0:4B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32qSZ7GLNtgoiQqGOH8xC4TAS2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:4a:b0:b6:3a:ed:5d:78:37:ff:1a:e9:7d:37:8a:cb:2f:61:
         c4:72:35:5c:c6:a5:87:0d:1a:6e:d7:d2:59:e1:9d:15:b2:ae:
         cb:9f:ca:a1:58:58:f3:26:02:e5:a4:09:9c:6e:f6:28:10:fd:
         a2:e1:44:fd:32:90:50:0d:ee:21:03:56:f9:4f:fc:ef:ab:1c:
         e5:d3:72:cd:5a:69:f5:dd:c7:4a:ec:46:97:d4:51:94:12:20:
         56:cf:ce:e3:f1:df:38:5d:12:c5:67:38:ca:dd:94:a5:1c:e0:
         0a:e2:e2:83:18:8a:d6:a1:5a:48:c6:9a:66:73:52:77:f6:cf:
         12:99:6a:c7:af:2d:33:9a:6e:c2:6e:26:38:aa:c3:cb:7c:fd:
         43:36:55:45:ae:b4:09:7a:2a:4f:be:f9:55:c7:04:55:8f:8e:
         59:fa:5b:ac:77:9a:7c:8a:95:e9:a3:5f:b9:4f:88:5a:3a:93:
         71:24:9d:d0:f3:db:6d:58:ee:62:9f:c5:46:e8:c7:f9:50:b8:
         9f:e8:79:4d:6a:0e:d6:88:77:a8:25:49:de:47:2d:a1:0b:af:
         06:21:60:55:0f:20:f9:c1:06:45:eb:b9:ea:c4:29:76:b9:e8:
         87:02:2a:4d:7a:39:78:5e:7a:02:50:f3:ea:09:14:31:f2:4b:
         c7:1b:52:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:58:10 2026 by rpki-client