Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.mft
File:                     4GyK0oU47eC0x-GnHpypianwPxA.mft (raw, json)
Hash identifier:          74gF0EFRnjQplkybzKu1fKQMiYXE98EpSH1MNFhf98E=
Subject key identifier:   DD:0A:35:0B:0E:F1:74:38:BF:50:2D:7A:FD:41:72:C6:56:49:04:C2
Authority key identifier: E0:6C:8A:D2:85:38:ED:E0:B4:C7:E1:A7:1E:9C:A9:89:A9:F0:3F:10
Certificate issuer:       /CN=e06c8ad28538ede0b4c7e1a71e9ca989a9f03f10
Certificate serial:       01A06D94F092DADB2DD02BB1BCE2A5E595F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4GyK0oU47eC0x-GnHpypianwPxA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.mft
Manifest number:          0B65
Signing time:             Fri 04 Sep 2026 18:01:12 +0000
Manifest this update:     Fri 04 Sep 2026 18:01:12 +0000
Manifest next update:     Sat 05 Sep 2026 18:01:12 +0000
Files and hashes:         1: 4GyK0oU47eC0x-GnHpypianwPxA.crl (hash: TlrI3d2ScN8fwH1magVUJE6M0ULOFRmnAEVyuh4vzbk=)
                          2: MPWn9lYh7Ig78eg1IuFu_hQVgcY.roa (hash: iyM+MzYg4hUTkqmFv32rNevlyEv/xOwD98IypdwiHXI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4GyK0oU47eC0x-GnHpypianwPxA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 18:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6d:94:f0:92:da:db:2d:d0:2b:b1:bc:e2:a5:e5:95:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e06c8ad28538ede0b4c7e1a71e9ca989a9f03f10
        Validity
            Not Before: Sep  4 18:01:12 2026 GMT
            Not After : Sep  5 18:01:12 2026 GMT
        Subject: CN=dd0a350b0ef17438bf502d7afd4172c6564904c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c5:0c:06:ac:39:b3:76:db:81:b9:4b:ca:06:
                    23:e9:50:c7:96:d8:0e:dd:d2:14:bb:f4:c9:15:0f:
                    c8:46:10:58:a7:7d:44:4e:50:01:99:28:10:8f:2d:
                    04:b6:60:4c:70:54:6b:a3:90:49:2f:16:75:8d:3f:
                    01:00:1b:28:8f:20:f3:48:a5:dc:31:fd:67:e6:ff:
                    e2:f6:b7:95:4b:95:31:4f:49:84:18:c8:6d:fd:e5:
                    95:81:09:61:67:b2:a9:5b:27:4d:4c:a2:24:3c:89:
                    f5:b2:03:e4:e4:83:15:e7:68:87:88:58:12:f7:31:
                    af:b1:0f:86:29:af:cd:90:d2:27:07:4a:5c:d4:60:
                    9c:16:84:a6:e7:b4:e8:e4:b4:c7:b9:43:45:b6:59:
                    90:09:9e:2b:7a:9a:95:09:9f:30:96:6e:73:83:26:
                    37:a3:d4:9f:c0:80:ba:25:5b:ff:32:ad:4b:dc:4e:
                    20:db:12:57:99:ba:80:ac:4c:9a:5c:56:2f:f2:30:
                    8d:56:47:88:e9:41:a5:cc:78:0b:32:00:ac:f9:83:
                    cd:19:ab:b7:e4:bc:21:9e:88:d0:7a:7f:62:b9:2a:
                    e2:13:d1:62:11:15:77:a9:54:7a:ec:2a:69:06:7e:
                    6c:30:03:ea:b9:0d:b5:8b:55:87:86:e6:f0:5c:bf:
                    b4:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:0A:35:0B:0E:F1:74:38:BF:50:2D:7A:FD:41:72:C6:56:49:04:C2
            X509v3 Authority Key Identifier:
                keyid:E0:6C:8A:D2:85:38:ED:E0:B4:C7:E1:A7:1E:9C:A9:89:A9:F0:3F:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GyK0oU47eC0x-GnHpypianwPxA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d7:b1:98:a2:37:89:76:b6:1c:b2:f8:38:36:95:5c:7b:c6:0b:
         22:20:ca:17:14:20:4f:ab:2e:17:0b:ff:7b:79:0a:5a:40:c7:
         e0:4f:20:22:37:49:02:c6:39:10:cb:8f:53:0a:b2:29:5c:53:
         d3:87:70:3f:9d:f4:13:f4:6a:4b:ab:8a:cf:a1:a1:12:79:95:
         db:e5:4c:1e:3e:c4:34:82:bd:f5:fd:ab:44:56:72:c7:81:89:
         39:d5:b1:81:32:fe:5b:54:62:95:aa:bd:16:ef:b3:0c:03:a2:
         1d:01:8d:b5:f9:2f:49:f8:46:c2:01:d2:02:85:e3:3f:9e:ba:
         b2:fe:48:0f:c5:07:14:2f:ee:d7:7b:25:d3:56:c1:d4:90:cc:
         10:7c:74:d2:c9:88:33:57:2c:36:19:3f:9b:fe:17:52:48:f8:
         19:78:e7:04:17:b3:4d:84:0f:e6:f3:87:f5:01:a0:4f:3f:da:
         bd:74:4f:c7:15:0a:02:d6:a3:f9:0e:80:e0:0e:5d:ac:6f:57:
         2c:f5:3e:78:8f:75:3d:8d:29:39:a9:12:05:8c:07:43:68:14:
         83:f1:91:13:60:01:d8:49:9a:c3:71:d1:a7:63:4e:bd:ca:e9:
         a4:2c:86:2c:6d:dd:e8:24:1f:bf:c6:e5:82:fb:52:0c:b7:b1:
         26:bd:5a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:38:11 2026 by rpki-client