Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/61DTCEv4qp6nd9JFtg1RG-GJ6rI.mft
File:                     61DTCEv4qp6nd9JFtg1RG-GJ6rI.mft (raw, json)
Hash identifier:          MpAyt5EcRkUrbaLlniAUWuGMjv+WGRmOkEjxdVB2dKI=
Subject key identifier:   0D:8A:9D:44:05:C9:6B:75:28:E3:E3:72:26:3F:31:77:31:68:BF:E5
Authority key identifier: EB:50:D3:08:4B:F8:AA:9E:A7:77:D2:45:B6:0D:51:1B:E1:89:EA:B2
Certificate issuer:       /CN=eb50d3084bf8aa9ea777d245b60d511be189eab2
Certificate serial:       01A08BD5D8F8C85508E678BF8A3168D76DB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/61DTCEv4qp6nd9JFtg1RG-GJ6rI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/61DTCEv4qp6nd9JFtg1RG-GJ6rI.mft
Manifest number:          1936
Signing time:             Thu 10 Sep 2026 15:00:42 +0000
Manifest this update:     Thu 10 Sep 2026 15:00:42 +0000
Manifest next update:     Fri 11 Sep 2026 15:00:42 +0000
Files and hashes:         1: 61DTCEv4qp6nd9JFtg1RG-GJ6rI.crl (hash: SvpJgjyIIG1rrzbc46Q3KT/g+ZV8KlooS4tV9qzK6l8=)
                          2: FvBVsD-JI1fx_aJoqIlivb1aPfo.roa (hash: fUKfMlC9o6d72fhPXb316L/yDfu1iUqB0W1b0HREIFQ=)
                          3: Q2rRoJXpXa3a3SwooTdf3uV3wgU.roa (hash: fHgw9Vex+UqLybix6EKx0Tqbyqm27d9FJ8vUgMV12jo=)
                          4: f2KR8h_5o1QsslK8nolQ4ahTN08.roa (hash: AIZ4lGLd2ADd/z7qsU4674hSFsUsEiTPO5cs/Imqvtk=)
                          5: smFvN5NH47jtWpxFBCY810YgJEA.roa (hash: IOHCm8FQ7HxP6SJC8exg5xebz9QSffOWCznME7vCHwI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/61DTCEv4qp6nd9JFtg1RG-GJ6rI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/61DTCEv4qp6nd9JFtg1RG-GJ6rI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/61DTCEv4qp6nd9JFtg1RG-GJ6rI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8b:d5:d8:f8:c8:55:08:e6:78:bf:8a:31:68:d7:6d:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb50d3084bf8aa9ea777d245b60d511be189eab2
        Validity
            Not Before: Sep 10 15:00:42 2026 GMT
            Not After : Sep 11 15:00:42 2026 GMT
        Subject: CN=0d8a9d4405c96b7528e3e372263f31773168bfe5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:55:0d:a1:a0:c1:67:6e:01:0d:4b:21:41:b2:
                    3c:73:ef:a8:83:37:d0:ed:b9:c1:d3:f8:78:43:74:
                    e7:a1:ad:d6:5e:6d:65:c4:1a:ef:08:e7:8e:17:cb:
                    93:a6:91:a7:7d:ba:9b:74:99:e2:e7:f9:c7:86:b4:
                    f3:b2:91:1e:38:8d:52:cd:e9:b0:bd:88:e2:aa:0f:
                    d6:2b:09:58:e2:99:56:d1:ba:b7:4f:e1:dd:06:62:
                    91:3a:3e:c7:3c:73:02:7d:be:a4:d4:aa:62:d5:3b:
                    37:70:c0:d2:0c:ea:88:e0:03:14:27:2b:56:b2:12:
                    e0:74:d3:47:ce:ba:18:16:c0:e9:73:6b:8b:ae:f8:
                    5a:40:47:e7:93:b0:f7:24:c7:03:01:26:ca:8e:90:
                    d5:56:19:3c:f9:4d:d9:0c:d0:9b:5c:0b:50:f9:5d:
                    8f:38:97:c3:be:7d:34:ef:5a:41:96:96:7d:fe:75:
                    60:c7:05:1a:69:94:3f:c8:ec:da:b9:c8:5f:c2:c8:
                    f7:53:0c:7d:5b:b4:8f:ea:cf:fb:77:84:b9:ba:2b:
                    46:8f:ed:05:25:5b:d7:b0:a8:9d:bc:78:65:8e:27:
                    f5:9f:b0:9e:91:87:dd:07:26:8a:ed:aa:40:9e:9e:
                    b9:6c:2b:4c:e2:8a:f0:8b:2c:37:96:14:62:ca:8a:
                    78:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:8A:9D:44:05:C9:6B:75:28:E3:E3:72:26:3F:31:77:31:68:BF:E5
            X509v3 Authority Key Identifier:
                keyid:EB:50:D3:08:4B:F8:AA:9E:A7:77:D2:45:B6:0D:51:1B:E1:89:EA:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61DTCEv4qp6nd9JFtg1RG-GJ6rI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/61DTCEv4qp6nd9JFtg1RG-GJ6rI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/61DTCEv4qp6nd9JFtg1RG-GJ6rI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:af:8b:79:e7:b9:ee:ef:40:6d:a0:76:0d:bf:8b:25:0b:66:
         b7:d2:4d:48:f5:ac:0e:ac:31:93:f6:a4:cf:25:fc:e9:42:d2:
         fc:a2:98:ef:88:c5:a4:78:92:be:95:38:73:38:2d:18:64:91:
         56:d6:07:58:a6:b0:5d:0e:3f:6a:55:47:71:ce:87:b4:0e:13:
         6c:22:08:19:78:62:c1:8b:a2:1e:06:f9:0e:7a:b5:e9:94:41:
         d5:88:bb:00:67:93:4e:cc:9e:f3:40:8a:92:6e:16:98:28:e1:
         c3:e1:cf:e6:35:9f:e4:38:6f:e5:8b:bf:42:a0:e0:cb:09:0a:
         1c:75:01:96:1d:53:f0:3e:2a:19:61:01:40:a0:6b:9f:f3:b5:
         62:fe:d0:38:db:52:2b:97:02:48:93:f5:63:c1:7f:f2:c8:2b:
         8a:8b:04:89:84:dd:57:de:7f:a4:ba:e2:d9:7d:29:7b:1e:05:
         d0:ae:eb:3d:f1:68:b6:08:49:db:e1:65:08:84:ad:db:e9:5b:
         39:18:80:b2:48:c6:f5:21:f0:db:4d:d3:fd:03:95:71:36:62:
         e9:4c:bb:b9:7f:e9:45:fc:e1:7a:c3:b6:74:7d:a7:02:77:b4:
         b6:8a:b5:49:62:99:ad:18:4e:12:b6:94:69:3c:85:4a:a5:dc:
         e1:40:59:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:40:31 2026 by rpki-client