Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/0Mv2ugl6drYQyFYDW8GN55fCpnc.mft
File:                     0Mv2ugl6drYQyFYDW8GN55fCpnc.mft (raw, json)
Hash identifier:          +az2wU4nL2z3Q1Khkld3qfaq8mS8jxZ6sJG9QFGkKKs=
Subject key identifier:   FC:DE:70:6C:02:4C:5B:08:FA:A2:13:75:EB:60:0B:E0:99:76:03:99
Authority key identifier: D0:CB:F6:BA:09:7A:76:B6:10:C8:56:03:5B:C1:8D:E7:97:C2:A6:77
Certificate issuer:       /CN=d0cbf6ba097a76b610c856035bc18de797c2a677
Certificate serial:       01A08D1FA7D6B42350FD88FCBF6E6F8DCB9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Mv2ugl6drYQyFYDW8GN55fCpnc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/0Mv2ugl6drYQyFYDW8GN55fCpnc.mft
Manifest number:          0C32
Signing time:             Thu 10 Sep 2026 21:00:57 +0000
Manifest this update:     Thu 10 Sep 2026 21:00:57 +0000
Manifest next update:     Fri 11 Sep 2026 21:00:57 +0000
Files and hashes:         1: 0Mv2ugl6drYQyFYDW8GN55fCpnc.crl (hash: D7DkrunEJDSgeWxzbwzjqqG3jEyED2YPnjQSG0/20i0=)
                          2: DqXib1Ly2xFoTm2bjcxnicthk1w.roa (hash: g/TBWWlwOSVO9LY7Rp7QlLHadW83dAk0kFgZL+CVZlo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/0Mv2ugl6drYQyFYDW8GN55fCpnc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/0Mv2ugl6drYQyFYDW8GN55fCpnc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Mv2ugl6drYQyFYDW8GN55fCpnc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 21:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8d:1f:a7:d6:b4:23:50:fd:88:fc:bf:6e:6f:8d:cb:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0cbf6ba097a76b610c856035bc18de797c2a677
        Validity
            Not Before: Sep 10 21:00:57 2026 GMT
            Not After : Sep 11 21:00:57 2026 GMT
        Subject: CN=fcde706c024c5b08faa21375eb600be099760399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:8b:6a:2c:ee:fa:9f:9f:2c:3b:59:57:1a:d9:
                    65:9c:d0:6a:02:2d:c0:7c:02:ce:84:5e:3e:94:ec:
                    3e:e5:36:ba:bf:36:4d:ca:b0:3c:01:43:d4:88:4e:
                    aa:dc:7a:a5:f1:1f:fe:0f:35:f3:bb:49:11:0b:16:
                    4a:ea:d7:94:ee:63:90:0c:bd:b3:e1:0b:39:c9:2c:
                    51:ee:48:57:ab:76:ac:60:64:19:28:f4:d1:80:f6:
                    a7:cf:f6:d2:18:98:83:b4:e0:29:fb:ca:09:f5:1e:
                    7b:6d:f9:7a:0c:f0:3b:76:09:61:89:83:30:5d:cf:
                    95:b9:a6:45:6f:d0:4f:25:ac:43:df:c2:03:e6:e8:
                    f7:71:0d:ec:d8:4e:3a:0d:a1:2b:40:13:28:8f:50:
                    94:d7:fa:ef:f5:37:1a:52:62:c6:6e:ca:8e:f9:16:
                    76:ff:74:0d:a8:9a:bb:6d:3f:d3:47:81:87:57:9d:
                    4c:db:8f:ae:f5:5d:15:fd:4a:b9:0c:ff:02:fb:5f:
                    64:db:57:63:f2:42:2e:85:a2:e5:d7:6d:32:ea:13:
                    b7:4e:65:cd:1f:a5:53:fd:af:01:76:41:e5:5d:2e:
                    4b:b5:3d:82:95:99:a6:3b:fc:9e:b2:80:01:cf:fa:
                    ba:99:11:5c:96:33:59:e0:bb:2d:12:64:0a:6d:5b:
                    3d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:DE:70:6C:02:4C:5B:08:FA:A2:13:75:EB:60:0B:E0:99:76:03:99
            X509v3 Authority Key Identifier:
                keyid:D0:CB:F6:BA:09:7A:76:B6:10:C8:56:03:5B:C1:8D:E7:97:C2:A6:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Mv2ugl6drYQyFYDW8GN55fCpnc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/0Mv2ugl6drYQyFYDW8GN55fCpnc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/0Mv2ugl6drYQyFYDW8GN55fCpnc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:fc:f5:c6:cf:12:9c:f0:96:2b:4e:c5:8f:bf:3a:91:0e:a8:
         7c:be:18:03:21:1a:71:ca:37:de:6e:92:84:87:6c:73:58:38:
         78:b3:75:71:47:07:67:d6:47:18:c3:06:9a:85:03:91:c4:e4:
         66:bc:94:f4:f7:fd:e6:b4:97:88:c8:88:83:93:92:c7:1d:bb:
         66:71:e0:16:54:69:09:da:3f:b5:75:21:e5:b0:e9:f6:da:b7:
         f9:96:b3:8a:e6:39:a6:2b:d4:63:5f:c4:91:6a:1e:d6:20:e1:
         ed:22:34:12:5b:17:d3:bc:6d:07:38:2b:bc:ed:79:aa:1d:7d:
         2b:d7:3b:d1:69:08:46:11:57:8e:d4:78:45:83:e1:bb:4f:31:
         47:7d:b6:ba:6d:20:58:d0:ad:db:24:5c:dc:09:f7:aa:cd:8f:
         51:08:23:21:d0:88:fc:44:65:94:23:62:6b:60:67:d3:f3:15:
         b7:ed:a1:eb:2a:5d:48:47:a4:70:4c:9a:4b:51:f4:76:c1:74:
         b6:85:e7:f7:14:a4:e8:72:56:1a:7a:8b:52:34:c4:f6:52:4b:
         ab:b7:d9:0f:c9:38:51:95:02:b0:b2:92:29:98:63:a9:0a:3c:
         b8:5e:78:25:ab:0e:12:03:95:16:ba:93:ee:64:94:3a:19:a5:
         ea:44:5b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 06:51:37 2026 by rpki-client