Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.mft
File:                     75S8y9TC4P-PeqsEXhSjEfOy-f4.mft (raw, json)
Hash identifier:          1wg9zjYxV31f+k2dr/PD8S47VqCgq8hU3qgiEEoU+88=
Subject key identifier:   F8:EC:91:9B:96:17:09:26:2D:BF:03:AD:AD:EF:16:DA:E0:50:9D:20
Authority key identifier: EF:94:BC:CB:D4:C2:E0:FF:8F:7A:AB:04:5E:14:A3:11:F3:B2:F9:FE
Certificate issuer:       /CN=ef94bccbd4c2e0ff8f7aab045e14a311f3b2f9fe
Certificate serial:       01A06F83CDC97F617976BA32E2AF74441DD9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/75S8y9TC4P-PeqsEXhSjEfOy-f4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.mft
Manifest number:          062C
Signing time:             Sat 05 Sep 2026 03:01:43 +0000
Manifest this update:     Sat 05 Sep 2026 03:01:43 +0000
Manifest next update:     Sun 06 Sep 2026 03:01:43 +0000
Files and hashes:         1: 75S8y9TC4P-PeqsEXhSjEfOy-f4.crl (hash: Evng9B+MyIdIaIQvkcsbqaFX072QdKSFFqo2lVi+P7c=)
                          2: T402uwWdle2-wACzD9ONw9UX7Q0.roa (hash: qH2p5m4fwAtgkEGn5eHmdKfPUlYPjTmqTH+gzJaccXQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/75S8y9TC4P-PeqsEXhSjEfOy-f4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 20:21:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6f:83:cd:c9:7f:61:79:76:ba:32:e2:af:74:44:1d:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef94bccbd4c2e0ff8f7aab045e14a311f3b2f9fe
        Validity
            Not Before: Sep  5 03:01:43 2026 GMT
            Not After : Sep  6 03:01:43 2026 GMT
        Subject: CN=f8ec919b961709262dbf03adadef16dae0509d20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:1e:1a:48:30:e9:9a:eb:26:1e:6e:c6:98:0d:
                    58:d0:cd:6c:37:73:d5:b9:05:e6:95:be:67:d6:3d:
                    73:01:5f:d5:96:0b:99:c4:4b:5d:ee:f7:92:50:d0:
                    79:0c:a9:8f:74:5d:f0:22:4a:26:38:72:d6:d0:ed:
                    49:bd:04:eb:86:7f:90:1e:ca:fe:89:76:6e:cd:80:
                    e6:6d:88:b2:6c:09:83:95:f2:34:5e:68:a3:95:f5:
                    45:21:91:a2:6a:d0:52:d0:e8:21:77:38:59:e6:96:
                    fe:28:c8:c5:53:22:70:6b:0b:01:6e:27:73:bb:6e:
                    bd:0d:e5:a1:70:50:8b:d2:f5:26:fa:eb:26:1d:66:
                    1a:e2:d3:e6:c9:e4:63:65:2d:24:3e:c5:d8:2f:a7:
                    27:f8:7c:4d:a0:ce:68:4f:1c:5d:93:ef:30:65:66:
                    94:90:ff:4e:32:b6:9d:27:e9:19:64:f5:cf:f0:94:
                    e5:51:e4:89:2b:c2:36:65:2a:38:e5:6e:b7:9c:26:
                    96:72:f5:4c:b3:7c:41:b2:db:08:3c:a0:15:aa:a9:
                    52:8b:26:ba:16:e2:3d:16:45:40:38:06:08:e9:7a:
                    7c:34:fc:96:db:6d:b2:67:77:71:01:ba:8c:6d:f3:
                    74:df:01:5f:b3:8b:13:66:d2:ee:77:d3:36:7f:ec:
                    6e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:EC:91:9B:96:17:09:26:2D:BF:03:AD:AD:EF:16:DA:E0:50:9D:20
            X509v3 Authority Key Identifier:
                keyid:EF:94:BC:CB:D4:C2:E0:FF:8F:7A:AB:04:5E:14:A3:11:F3:B2:F9:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/75S8y9TC4P-PeqsEXhSjEfOy-f4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:d5:ae:41:a8:96:12:97:f3:5b:f3:89:5a:8a:f6:d4:78:89:
         52:5f:7f:05:54:63:d6:2f:25:8f:e3:7b:84:0f:a7:b5:33:90:
         f0:2b:1f:30:20:47:8e:58:48:d1:79:d0:11:2c:39:3d:78:dd:
         f6:2e:53:37:f4:ae:8e:03:b2:11:8b:e6:a5:9c:c2:9f:2f:e0:
         2a:83:05:c0:59:c6:b5:ca:8d:47:79:9c:ee:61:b9:c8:24:0a:
         10:ea:79:24:b6:c8:61:b7:0a:d6:a3:e1:6a:3c:c8:9f:b8:aa:
         47:15:6c:ae:03:ca:4c:3c:44:17:59:c3:9f:00:58:81:8e:74:
         c6:5e:f3:cf:fa:59:99:22:70:66:c6:2a:9e:44:5c:7e:d3:00:
         5d:1d:95:3b:dc:43:83:76:7e:78:c6:d3:58:a7:d4:6b:77:0c:
         b1:66:ea:d9:28:84:fb:bc:8b:f5:ec:3b:b1:d0:19:a3:2f:e4:
         a0:31:01:d2:4d:48:84:28:26:4c:58:b1:7e:f1:bb:1a:18:e8:
         86:b5:44:a7:5b:9b:26:61:28:66:7e:0b:e2:02:c5:d4:97:8a:
         c1:d4:af:e4:1c:ae:66:69:40:ad:2b:dc:a5:41:26:fb:4f:66:
         67:6e:44:b7:4d:6f:9b:1e:ba:5a:33:6e:ef:7e:d3:65:16:27:
         50:3d:44:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:18:45 2026 by rpki-client