Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/eec68b-2720-4b45-b85b-8a8de37eb833/1/31rDE7L3xc3GUDLKoGSK1zjwdds.mft
File:                     31rDE7L3xc3GUDLKoGSK1zjwdds.mft (raw, json)
Hash identifier:          YJo9yO6aVlj2b13PO4B6UhQPopRgnUzdRa9P9CvdP80=
Subject key identifier:   87:1C:F5:5B:D4:11:C3:13:53:AB:EE:67:A5:9C:95:D6:4C:62:E5:68
Authority key identifier: DF:5A:C3:13:B2:F7:C5:CD:C6:50:32:CA:A0:64:8A:D7:38:F0:75:DB
Certificate issuer:       /CN=df5ac313b2f7c5cdc65032caa0648ad738f075db
Certificate serial:       01A08B9F63B5673434159E6F8603E8396175
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/31rDE7L3xc3GUDLKoGSK1zjwdds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/eec68b-2720-4b45-b85b-8a8de37eb833/1/31rDE7L3xc3GUDLKoGSK1zjwdds.mft
Manifest number:          F5
Signing time:             Thu 10 Sep 2026 14:01:13 +0000
Manifest this update:     Thu 10 Sep 2026 14:01:13 +0000
Manifest next update:     Fri 11 Sep 2026 14:01:13 +0000
Files and hashes:         1: 31rDE7L3xc3GUDLKoGSK1zjwdds.crl (hash: b9e7n9Tpoxi3q2idv1FsRteXznrDhBRU8LXZOph8HJ4=)
                          2: 7kBOew20AqCcSN7unx6uuoSngeg.roa (hash: oLLPx2wFkNsUiyxMXNv8D1J8xAnpI1BWVugs3oA0gdA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/eec68b-2720-4b45-b85b-8a8de37eb833/1/31rDE7L3xc3GUDLKoGSK1zjwdds.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/eec68b-2720-4b45-b85b-8a8de37eb833/1/31rDE7L3xc3GUDLKoGSK1zjwdds.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/31rDE7L3xc3GUDLKoGSK1zjwdds.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8b:9f:63:b5:67:34:34:15:9e:6f:86:03:e8:39:61:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df5ac313b2f7c5cdc65032caa0648ad738f075db
        Validity
            Not Before: Sep 10 14:01:13 2026 GMT
            Not After : Sep 11 14:01:13 2026 GMT
        Subject: CN=871cf55bd411c31353abee67a59c95d64c62e568
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:88:3e:77:b7:e4:db:2d:cf:06:cb:c8:c6:d6:
                    40:17:61:f6:3c:87:9e:97:a6:92:97:8b:ce:38:fd:
                    2d:1c:20:c9:88:9d:cd:da:5d:d3:95:90:6a:a9:a8:
                    4c:3a:14:7a:bb:1e:e2:46:0f:ff:2a:af:e3:96:3b:
                    da:a9:79:f2:76:28:63:1c:e7:14:e6:b3:45:1b:c5:
                    df:a4:ac:f0:c1:bc:92:57:68:dc:fd:f7:d0:db:b1:
                    f0:d5:f5:e2:c6:73:fa:0d:94:97:39:32:13:81:63:
                    44:ff:ae:b1:a5:c4:16:e9:5a:27:bd:79:59:6e:78:
                    07:02:3b:63:37:72:63:7c:b2:af:a7:a3:0d:68:5d:
                    8f:43:cd:6c:38:22:f8:2b:dd:da:49:05:ab:17:3e:
                    3e:67:fa:5d:a0:80:0d:bb:a3:cc:1b:c9:22:7d:25:
                    e3:e7:45:3e:29:6d:fc:a9:e1:9e:aa:41:ed:09:3a:
                    79:bd:fc:12:33:f0:13:b5:90:7a:c8:f3:cb:76:00:
                    6e:01:46:48:a6:5c:2a:f3:0e:ed:58:8e:0d:1e:4a:
                    db:8f:06:7a:81:f2:4e:13:67:22:60:79:5b:d2:f4:
                    69:37:b4:93:5c:f7:21:a1:53:e2:f1:96:35:38:88:
                    ee:95:92:30:ef:a1:16:90:d6:a7:8d:97:c0:9e:0f:
                    0c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:1C:F5:5B:D4:11:C3:13:53:AB:EE:67:A5:9C:95:D6:4C:62:E5:68
            X509v3 Authority Key Identifier:
                keyid:DF:5A:C3:13:B2:F7:C5:CD:C6:50:32:CA:A0:64:8A:D7:38:F0:75:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/31rDE7L3xc3GUDLKoGSK1zjwdds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eec68b-2720-4b45-b85b-8a8de37eb833/1/31rDE7L3xc3GUDLKoGSK1zjwdds.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eec68b-2720-4b45-b85b-8a8de37eb833/1/31rDE7L3xc3GUDLKoGSK1zjwdds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:50:1c:fd:aa:66:83:99:1a:8b:c1:50:d8:cf:6c:a3:40:1f:
         83:d8:a9:2b:21:c4:eb:e5:fa:e9:a5:6a:ac:ce:44:e2:08:6b:
         06:b9:9b:0e:15:5f:e7:d9:13:7f:3e:19:d5:c4:f5:3a:64:69:
         1b:b1:8a:a6:51:3d:9c:6f:6b:a8:a7:48:a7:e5:19:58:1e:8b:
         59:dd:ac:7d:2a:58:a3:d6:99:bd:a8:e0:f3:3b:f8:ca:d2:5e:
         90:e3:61:db:49:74:fa:0f:97:fe:a1:82:70:3e:5d:f3:4d:a7:
         f3:84:1d:7d:cb:33:22:1c:73:05:e5:c9:73:dd:57:b8:d2:24:
         56:57:e3:67:12:63:3e:c5:8c:09:ee:a4:39:19:3b:59:27:aa:
         e0:ad:40:dc:fb:d2:28:ce:99:38:35:b0:cb:02:fd:1a:18:9a:
         36:5e:be:4a:56:e3:c0:67:02:c1:34:4e:e1:4f:dc:d9:23:0f:
         86:0e:4b:31:1d:1d:c6:ad:2c:91:49:73:74:03:09:b7:6b:6e:
         f2:0b:07:79:2d:5d:4f:cc:94:d7:a3:b3:0f:c7:6d:cc:52:35:
         7d:d6:b6:d8:f0:04:40:58:2b:5f:31:2c:b4:24:e0:cf:6f:40:
         3b:7d:5b:35:3d:44:bd:71:86:fb:01:32:9e:2c:8f:e6:a5:06:
         5c:49:39:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:30:56 2026 by rpki-client