Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/93dd3d-d53b-4e21-b241-6ddeecb428a6/1/Cn4rBHu6-WxHybJyFbobEOYav28.mft
File:                     Cn4rBHu6-WxHybJyFbobEOYav28.mft (raw, json)
Hash identifier:          gocd9xliDBz6+CO57A9Nxf9m5rP3qVj4A+0yKbCypFg=
Subject key identifier:   94:B1:FE:45:0B:4F:84:44:27:33:BE:6A:B3:A0:23:8F:96:8C:33:04
Authority key identifier: 0A:7E:2B:04:7B:BA:F9:6C:47:C9:B2:72:15:BA:1B:10:E6:1A:BF:6F
Certificate issuer:       /CN=0a7e2b047bbaf96c47c9b27215ba1b10e61abf6f
Certificate serial:       01A089B0CE4D01A792C3FDFCE5B6D01D1D12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cn4rBHu6-WxHybJyFbobEOYav28.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/93dd3d-d53b-4e21-b241-6ddeecb428a6/1/Cn4rBHu6-WxHybJyFbobEOYav28.mft
Manifest number:          01EC
Signing time:             Thu 10 Sep 2026 05:01:00 +0000
Manifest this update:     Thu 10 Sep 2026 05:01:00 +0000
Manifest next update:     Fri 11 Sep 2026 05:01:00 +0000
Files and hashes:         1: Cn4rBHu6-WxHybJyFbobEOYav28.crl (hash: hpxq6iQfeseUcitsZHNR1DSxKbO5z9VMEtnb8fgYWtc=)
                          2: Y4Gyzg4W6akHejirl6HnZ5QGdGc.roa (hash: qK3xm6Kuv/YRcthZV7gfsusrohvZRdkJr0GOyaQzsIg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/93dd3d-d53b-4e21-b241-6ddeecb428a6/1/Cn4rBHu6-WxHybJyFbobEOYav28.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/93dd3d-d53b-4e21-b241-6ddeecb428a6/1/Cn4rBHu6-WxHybJyFbobEOYav28.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Cn4rBHu6-WxHybJyFbobEOYav28.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 05:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:89:b0:ce:4d:01:a7:92:c3:fd:fc:e5:b6:d0:1d:1d:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7e2b047bbaf96c47c9b27215ba1b10e61abf6f
        Validity
            Not Before: Sep 10 05:01:00 2026 GMT
            Not After : Sep 11 05:01:00 2026 GMT
        Subject: CN=94b1fe450b4f84442733be6ab3a0238f968c3304
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:34:90:47:8d:5a:d6:1a:4b:af:39:4a:2d:9a:
                    0d:e3:ac:d5:01:8d:ca:df:cb:09:90:32:1b:86:35:
                    e0:07:f1:8f:45:5d:8e:ba:a3:d2:9c:41:7a:51:59:
                    28:0c:9d:24:97:43:1d:59:8b:f8:f8:f2:cb:fa:f6:
                    f1:1a:dd:c4:fd:7e:26:88:2b:72:fb:2e:f9:89:6d:
                    d0:b3:39:db:a3:c2:ff:2f:0d:0f:4a:0d:c0:86:50:
                    f2:b9:85:ed:40:67:c6:da:d2:e0:c0:41:7b:1d:fd:
                    e1:74:d2:b7:70:8e:59:a0:85:78:7f:2c:24:7c:f1:
                    a9:70:5d:b6:68:5b:83:7f:0a:9a:fb:65:5a:9d:3a:
                    c6:bd:11:db:7a:24:5b:a2:b3:28:96:b0:88:bf:21:
                    53:f8:01:9e:5e:36:25:83:e0:04:2d:19:e0:0c:db:
                    86:1f:f2:f7:ab:d5:0d:86:77:e4:82:46:74:c4:25:
                    80:31:7f:da:ce:39:08:1b:b3:91:e2:a8:b1:c7:ba:
                    ec:e7:a8:a6:98:0c:dc:ae:db:7c:f9:6c:45:6a:05:
                    2b:f5:ac:d1:07:6a:ea:17:da:7e:6a:7e:5d:d9:5e:
                    06:1c:35:87:bc:07:1d:95:73:9d:a6:49:0f:13:f9:
                    06:a5:de:64:ad:eb:ca:90:9f:da:f7:11:a4:9b:12:
                    fe:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:B1:FE:45:0B:4F:84:44:27:33:BE:6A:B3:A0:23:8F:96:8C:33:04
            X509v3 Authority Key Identifier:
                keyid:0A:7E:2B:04:7B:BA:F9:6C:47:C9:B2:72:15:BA:1B:10:E6:1A:BF:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cn4rBHu6-WxHybJyFbobEOYav28.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93dd3d-d53b-4e21-b241-6ddeecb428a6/1/Cn4rBHu6-WxHybJyFbobEOYav28.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93dd3d-d53b-4e21-b241-6ddeecb428a6/1/Cn4rBHu6-WxHybJyFbobEOYav28.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:f5:9c:80:b1:5c:0d:79:8f:b7:8c:f2:a1:a7:0b:8f:85:37:
         87:23:b0:d5:9f:ce:ad:de:a2:f3:c1:4a:ca:2d:2d:89:b6:71:
         6d:62:02:9b:5a:6b:a8:1e:3e:f3:20:5e:72:b9:f1:fb:de:bd:
         20:e7:4b:b2:a2:1a:6c:0a:7a:47:c0:2a:f0:df:df:98:85:d1:
         18:8d:f3:ad:2f:36:18:b1:26:b6:8c:f8:08:38:7d:57:55:9d:
         91:40:e6:d4:26:c2:8a:ce:55:cb:bf:c2:e1:05:d6:f2:65:e8:
         d3:a0:19:52:0b:b0:a0:83:23:f8:9f:76:db:df:6b:c8:e5:86:
         b9:d4:78:f8:d5:64:18:cf:3e:7f:89:9f:0a:1b:12:81:50:24:
         89:c1:b3:b3:b1:4f:0b:c7:0c:20:53:99:80:d8:ce:83:15:d4:
         6a:9c:76:b6:57:b7:44:69:11:70:49:ea:06:9d:7f:16:ae:52:
         a6:47:19:b6:3c:de:ac:a3:b3:f8:e5:10:46:64:2d:bc:5f:09:
         4c:f0:b4:c8:3f:71:24:9a:e1:7c:10:cc:8f:f2:8d:c8:ac:80:
         f5:2a:26:f2:bc:95:91:62:fa:c8:19:09:5a:22:65:13:14:fb:
         61:73:93:b2:e3:cc:35:c0:1e:bf:a9:32:50:76:a4:89:d1:09:
         c6:ca:05:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:07:43 2026 by rpki-client