Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/da558e-6075-45d6-bdb6-c08b7bb461a7/1/cjM1sFB1VK5sbMKUdQdkyv0L1og.mft
File:                     cjM1sFB1VK5sbMKUdQdkyv0L1og.mft (raw, json)
Hash identifier:          rFeEET27WHEzudli3Jtact1GPnnO0ulRAryLIk2f3BU=
Subject key identifier:   3D:3C:53:C2:15:D2:8D:4E:36:DD:82:C1:FF:F4:E7:C0:81:6B:80:B6
Authority key identifier: 72:33:35:B0:50:75:54:AE:6C:6C:C2:94:75:07:64:CA:FD:0B:D6:88
Certificate issuer:       /CN=723335b0507554ae6c6cc294750764cafd0bd688
Certificate serial:       01A104A4CD213058B6C73D3A8B3FBC9293A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cjM1sFB1VK5sbMKUdQdkyv0L1og.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/da558e-6075-45d6-bdb6-c08b7bb461a7/1/cjM1sFB1VK5sbMKUdQdkyv0L1og.mft
Manifest number:          02F1
Signing time:             Sun 04 Oct 2026 02:01:11 +0000
Manifest this update:     Sun 04 Oct 2026 02:01:11 +0000
Manifest next update:     Mon 05 Oct 2026 02:01:11 +0000
Files and hashes:         1: cjM1sFB1VK5sbMKUdQdkyv0L1og.crl (hash: K4W1Yseu3tlCQA3/u6vrhAlIhQlhoGa46UbUGl77JBo=)
                          2: h1AxusJ0gzCuRYNROBYE_ex13Gw.asa (hash: RqU6DmGS5GS4oIpT5CWEZ1wznv9eazt1xRYLsNLaGg0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/da558e-6075-45d6-bdb6-c08b7bb461a7/1/cjM1sFB1VK5sbMKUdQdkyv0L1og.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/da558e-6075-45d6-bdb6-c08b7bb461a7/1/cjM1sFB1VK5sbMKUdQdkyv0L1og.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cjM1sFB1VK5sbMKUdQdkyv0L1og.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 20:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:04:a4:cd:21:30:58:b6:c7:3d:3a:8b:3f:bc:92:93:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=723335b0507554ae6c6cc294750764cafd0bd688
        Validity
            Not Before: Oct  4 02:01:11 2026 GMT
            Not After : Oct  5 02:01:11 2026 GMT
        Subject: CN=3d3c53c215d28d4e36dd82c1fff4e7c0816b80b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0d:e4:15:8a:3f:7c:9f:8d:73:2a:2f:88:37:
                    ea:e7:89:e6:06:b2:ea:3c:f0:e8:1b:80:da:64:30:
                    a0:ca:57:0e:0c:76:a9:5f:62:44:ca:87:67:5c:dd:
                    b8:15:87:4e:96:8a:23:23:2c:4a:d8:6b:d4:be:6b:
                    0b:f7:1d:a5:c4:5a:d3:d6:51:60:3f:5c:68:07:09:
                    eb:13:17:a4:d0:19:0f:48:cf:0a:05:4a:67:b9:cf:
                    b9:ad:86:bd:b4:cf:fc:60:e1:6a:3c:41:b6:82:58:
                    7c:a8:f0:17:ba:1e:50:2d:4f:79:90:91:9a:a2:5b:
                    0d:3a:55:68:2e:5c:eb:46:b1:8a:d4:2e:4d:8c:00:
                    b3:ea:36:49:86:48:30:0d:a1:80:45:fd:13:db:31:
                    71:2e:06:51:38:03:4f:0c:a6:81:9d:b1:9e:c6:c4:
                    cc:87:ff:26:b5:91:00:b6:c7:db:8c:ad:a6:29:f2:
                    eb:9a:51:50:9e:01:17:3d:38:5a:83:57:34:a8:46:
                    69:91:29:bb:dd:fb:79:1b:4c:cf:74:5f:c0:4c:6b:
                    bc:b7:57:99:43:df:a4:22:b5:57:40:ea:84:05:7e:
                    df:aa:9f:de:c3:3b:23:13:26:51:41:ec:a4:5c:f1:
                    93:1e:01:fd:74:57:4b:a1:71:dd:a3:29:22:ac:39:
                    24:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:3C:53:C2:15:D2:8D:4E:36:DD:82:C1:FF:F4:E7:C0:81:6B:80:B6
            X509v3 Authority Key Identifier:
                keyid:72:33:35:B0:50:75:54:AE:6C:6C:C2:94:75:07:64:CA:FD:0B:D6:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cjM1sFB1VK5sbMKUdQdkyv0L1og.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/da558e-6075-45d6-bdb6-c08b7bb461a7/1/cjM1sFB1VK5sbMKUdQdkyv0L1og.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/da558e-6075-45d6-bdb6-c08b7bb461a7/1/cjM1sFB1VK5sbMKUdQdkyv0L1og.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:e9:ce:3e:11:90:a5:11:f2:60:fb:79:4c:4f:cc:4d:65:da:
         72:a9:5e:b3:1b:84:a0:d7:0c:2b:cb:67:ca:38:87:dd:b2:06:
         a3:c9:fa:d7:82:c7:ea:43:84:ad:25:8f:2e:f2:a5:ef:b5:ca:
         39:17:e3:c7:0f:59:64:4c:64:a0:ed:26:87:94:a1:c3:9a:19:
         a0:16:2d:6a:c0:2b:76:52:fd:b5:bd:36:86:02:52:ff:0d:0e:
         0c:9a:b0:83:05:c4:5c:2b:8f:e8:37:b5:d2:9a:d4:9b:15:68:
         32:72:a2:21:d8:0e:f1:36:c4:ac:37:19:64:0f:fd:bd:b3:bf:
         40:1b:36:42:ac:3f:be:19:74:a6:83:87:42:ce:1d:c4:e3:be:
         b7:d6:75:f6:6b:9d:18:4d:98:b1:ac:ec:a4:9a:26:7e:1c:7c:
         a2:4c:31:02:d0:de:7b:68:99:21:8f:0c:76:48:88:01:84:b9:
         ba:cb:9f:bf:cd:2b:fb:87:4a:c8:67:9a:b5:4f:6d:3d:05:a5:
         59:74:65:4a:51:7f:40:cd:3f:b6:59:d5:f0:7a:88:87:a2:46:
         09:20:b2:46:61:a1:c4:40:6f:0c:c4:05:ca:6c:08:f2:6a:eb:
         e3:60:30:51:97:8f:bc:03:ac:bf:32:04:24:c2:63:4a:f9:ff:
         62:fe:79:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 07:18:10 2026 by rpki-client