Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.mft
File:                     0yJ36jBLKESnhomzqg2SGeM2Z3M.mft (raw, json)
Hash identifier:          F9gRC0Xp+650SqhfYKbciyuX4wwcZUIMn4pirYd7nWM=
Subject key identifier:   2C:13:66:01:8D:7E:C9:9C:2F:43:B6:61:DD:2F:43:EB:CC:4F:D2:EB
Authority key identifier: D3:22:77:EA:30:4B:28:44:A7:86:89:B3:AA:0D:92:19:E3:36:67:73
Certificate issuer:       /CN=d32277ea304b2844a78689b3aa0d9219e3366773
Certificate serial:       01A11D88A275DC9B4AB1D499A4603D7EF4E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0yJ36jBLKESnhomzqg2SGeM2Z3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.mft
Manifest number:          19C4
Signing time:             Thu 08 Oct 2026 22:00:56 +0000
Manifest this update:     Thu 08 Oct 2026 22:00:56 +0000
Manifest next update:     Fri 09 Oct 2026 22:00:56 +0000
Files and hashes:         1: 0yJ36jBLKESnhomzqg2SGeM2Z3M.crl (hash: n5xZvX1jIXggbdHLJRoJpR1BtGgj+nqFjZDFKRBaWr4=)
                          2: _hM3H1qZ9X2c4qZvxbmxIdT7K78.roa (hash: OwXX274c7WiCLwDlzUWHfVwNDY75hqlVdtdPyNCFPX0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0yJ36jBLKESnhomzqg2SGeM2Z3M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 22:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:1d:88:a2:75:dc:9b:4a:b1:d4:99:a4:60:3d:7e:f4:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d32277ea304b2844a78689b3aa0d9219e3366773
        Validity
            Not Before: Oct  8 22:00:56 2026 GMT
            Not After : Oct  9 22:00:56 2026 GMT
        Subject: CN=2c1366018d7ec99c2f43b661dd2f43ebcc4fd2eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:b9:b0:b9:56:ca:ba:8a:8e:35:76:ab:9d:e7:
                    c6:9c:fe:b1:38:b4:a3:2e:05:b9:0d:5d:cb:f6:a9:
                    52:5b:7c:14:54:39:23:4e:83:9d:d7:44:c8:86:6a:
                    8f:a1:77:60:e4:3e:ff:18:20:43:4b:6c:d6:c7:5c:
                    72:39:b1:a3:ad:70:2f:93:69:79:7e:eb:14:d0:e3:
                    36:6f:ed:a8:5c:d7:a9:77:23:8e:b4:11:2f:1e:e4:
                    5a:92:d7:83:e1:16:2b:b8:52:ff:ab:cb:09:77:c6:
                    3f:a0:9c:fd:b0:0f:6d:8e:75:f4:ac:7f:2c:f0:1e:
                    c3:93:bc:47:01:4c:c0:ed:26:9a:fa:68:bc:bd:2a:
                    5d:6a:b0:b7:e5:09:67:cf:55:c3:ec:86:a8:86:46:
                    df:36:21:38:89:7a:56:4c:dd:87:71:ad:4c:6a:65:
                    20:52:35:6a:d6:69:c5:df:94:b8:38:38:a5:c5:34:
                    dd:9d:b7:92:44:df:c7:31:81:7a:e7:ee:19:05:fa:
                    2e:79:52:f8:b3:97:ce:2f:c2:57:84:35:ea:a9:a3:
                    73:46:19:29:9e:ce:2a:21:a7:50:40:d4:19:8b:f9:
                    e7:b2:b9:c2:b1:d8:e6:88:02:24:fc:ac:2f:14:97:
                    cc:90:ff:22:7e:28:8f:fb:37:ae:39:6e:00:33:3e:
                    06:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:13:66:01:8D:7E:C9:9C:2F:43:B6:61:DD:2F:43:EB:CC:4F:D2:EB
            X509v3 Authority Key Identifier:
                keyid:D3:22:77:EA:30:4B:28:44:A7:86:89:B3:AA:0D:92:19:E3:36:67:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0yJ36jBLKESnhomzqg2SGeM2Z3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:4b:7d:11:06:4f:32:13:04:bc:f1:93:2f:7c:86:90:d4:17:
         4c:d5:d7:9f:cf:7a:0a:81:03:b7:c4:a5:bb:a5:09:ce:57:61:
         da:be:b2:b9:41:e3:1f:d6:79:44:ba:ac:7a:22:06:0b:d6:fa:
         fd:c6:1f:d5:01:59:67:32:d4:27:78:7f:35:01:d8:f2:b2:83:
         b4:c7:67:9a:31:8c:9b:7d:ff:d1:b0:5c:14:98:f8:9f:70:e0:
         ca:51:85:72:74:3d:15:be:08:50:9a:21:53:77:51:b8:c7:b5:
         ca:fb:16:02:ac:eb:35:93:77:33:f4:d2:44:e0:8c:59:a8:fb:
         ed:3b:3f:a5:08:24:6e:d6:6e:bb:bd:8e:1d:a7:b1:78:86:70:
         b7:5e:19:65:19:65:63:b3:f3:f3:99:e6:b7:e5:4f:ea:20:80:
         42:e7:07:f0:69:42:7b:c3:97:88:b4:d5:a8:41:f8:60:33:3f:
         ef:c8:9d:65:64:41:bb:8b:c6:1c:7f:ac:8f:b8:4e:f7:e0:a4:
         75:3f:b8:23:75:e1:1a:9d:fe:6d:a3:58:82:d7:7f:c2:c3:9b:
         28:cc:7d:81:97:99:4e:b7:31:ad:0f:d8:72:87:75:b4:a0:55:
         8f:d0:40:29:76:b2:8e:38:e0:5e:ab:15:c9:41:7d:24:20:96:
         5b:b7:be:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 03:53:00 2026 by rpki-client