Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.mft
File:                     01GoxXA90UCJWao1WSVY_1GiQ-k.mft (raw, json)
Hash identifier:          /jrz6/DWih8mGFMDXvJfjLu/xUqIc4foNvmn4t2e0BE=
Subject key identifier:   11:C3:4E:D0:74:0C:34:A9:50:48:5C:89:20:F6:41:7A:69:83:54:1F
Authority key identifier: D3:51:A8:C5:70:3D:D1:40:89:59:AA:35:59:25:58:FF:51:A2:43:E9
Certificate issuer:       /CN=d351a8c5703dd1408959aa35592558ff51a243e9
Certificate serial:       01A08BD5F11B144A2BCF843F0E4A0C9E0A18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/01GoxXA90UCJWao1WSVY_1GiQ-k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.mft
Manifest number:          0668
Signing time:             Thu 10 Sep 2026 15:00:48 +0000
Manifest this update:     Thu 10 Sep 2026 15:00:48 +0000
Manifest next update:     Fri 11 Sep 2026 15:00:48 +0000
Files and hashes:         1: 01GoxXA90UCJWao1WSVY_1GiQ-k.crl (hash: BsZGac6jULUkU4NbdZyMiaz8XpiRP6xw1uSXP6rd6KU=)
                          2: 9QlF0IX_u34_i50MZFQglOV4b78.roa (hash: FaOLBQU7OKAasfBGnRJ98t12gmWw6oMThOw0VH/q8mI=)
                          3: K3ua2RrqGcbdB2SIo8hldBAl3_E.roa (hash: 3r2KWl0kTZ/mtXETApfCg3qAcK7g4mRubdUIUTx0FZU=)
                          4: NcSh_-Ffauem6ez7_yno8PhT3YA.roa (hash: x+fdD0W14LGnfLhl1bXQbaRHap4bSB42pwGqiN2+NHI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/01GoxXA90UCJWao1WSVY_1GiQ-k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8b:d5:f1:1b:14:4a:2b:cf:84:3f:0e:4a:0c:9e:0a:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d351a8c5703dd1408959aa35592558ff51a243e9
        Validity
            Not Before: Sep 10 15:00:48 2026 GMT
            Not After : Sep 11 15:00:48 2026 GMT
        Subject: CN=11c34ed0740c34a950485c8920f6417a6983541f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:03:62:d4:ab:4f:67:2e:2a:ba:5f:57:23:b2:
                    b8:25:7a:9d:f0:24:3b:8c:b7:af:9e:7f:b3:65:36:
                    12:d9:b6:46:34:43:83:ed:09:81:30:b9:7e:69:a6:
                    9b:cc:4e:81:2a:3a:f4:20:0d:e1:b4:5a:7e:76:b6:
                    aa:f5:5f:ae:2a:aa:08:32:1a:7d:f8:55:f9:b4:4a:
                    97:c2:18:21:e7:55:d1:fb:d7:26:aa:65:f0:d3:33:
                    21:75:eb:8d:a1:01:5b:d7:f1:23:45:e0:19:21:48:
                    79:e8:81:07:d2:5c:d2:b6:a7:93:16:d5:ca:61:4f:
                    f0:9d:d5:ad:d0:1b:02:60:f9:50:f4:7c:46:ef:52:
                    21:84:83:3e:b5:72:50:d5:58:55:fd:31:c3:e3:4d:
                    a1:58:02:2f:a2:74:bb:10:72:c4:1b:ba:52:cf:76:
                    60:1b:3c:65:d6:83:48:86:ab:26:d7:cb:4f:69:55:
                    0c:5a:44:78:26:d1:67:de:e0:e6:74:6d:33:dc:2d:
                    1c:4d:f9:0f:1a:81:ca:06:27:67:7a:93:39:21:87:
                    6f:db:c5:95:4e:91:6d:50:38:18:1a:e9:69:e0:8a:
                    76:37:e8:5a:9f:77:68:31:32:7c:e1:5b:ef:e1:83:
                    de:47:89:1e:08:60:58:d1:7c:58:4c:d9:f0:ba:c2:
                    1c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:C3:4E:D0:74:0C:34:A9:50:48:5C:89:20:F6:41:7A:69:83:54:1F
            X509v3 Authority Key Identifier:
                keyid:D3:51:A8:C5:70:3D:D1:40:89:59:AA:35:59:25:58:FF:51:A2:43:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01GoxXA90UCJWao1WSVY_1GiQ-k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:5e:5e:48:99:32:6f:92:31:45:4c:84:4e:e1:cd:c7:d0:d4:
         55:75:d0:5c:f6:4d:41:64:a5:1b:29:44:f0:4b:06:50:a1:f2:
         00:f5:f0:b4:43:80:76:3d:07:bc:f6:9f:30:a6:46:b6:21:44:
         72:6f:04:06:9e:40:03:64:5d:8c:67:e1:30:ef:e7:99:cf:a4:
         8f:1e:25:c9:af:09:48:11:58:d4:d4:be:f5:8e:4b:62:10:d1:
         2d:53:8a:00:2d:e2:3f:e3:9d:5e:a2:3c:e8:a3:18:06:08:e1:
         46:6e:6d:73:42:0a:12:c1:bc:c1:c7:19:15:d2:eb:43:da:08:
         db:0f:73:9d:f6:a5:bb:c7:ba:5a:9e:56:79:b9:10:6b:98:f0:
         fc:cf:64:8c:cc:bc:62:12:8a:1e:e7:1e:a3:94:25:03:ec:db:
         ab:90:f3:75:c5:af:b9:e5:5d:16:5c:1c:0e:00:fa:31:67:30:
         58:fd:2f:07:fa:9b:9a:3c:76:57:dc:63:14:4b:df:37:ca:1f:
         18:77:6d:33:e3:c4:59:70:82:86:0a:ce:f8:ff:de:95:1c:17:
         46:9c:95:aa:34:2e:01:9a:cb:ab:e1:6a:74:19:db:ca:d3:6d:
         ef:dd:97:4d:d3:e8:5d:a1:8a:1d:f3:37:d4:cc:b2:d1:10:20:
         6a:eb:6a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 23:35:28 2026 by rpki-client