Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/88f1fc-204d-43be-a7b4-b76e82c232b7/1/Dxd9Rq5RS92RniRMevdK337bqNU.mft
File:                     Dxd9Rq5RS92RniRMevdK337bqNU.mft (raw, json)
Hash identifier:          VLAB6MN0h4z0YetwPCT1coyYWkQGFgHuuD0XE5WbXH4=
Subject key identifier:   21:A8:D0:12:74:7D:3E:D7:F6:47:B1:FD:D5:E6:4C:67:38:FB:84:5D
Authority key identifier: 0F:17:7D:46:AE:51:4B:DD:91:9E:24:4C:7A:F7:4A:DF:7E:DB:A8:D5
Certificate issuer:       /CN=0f177d46ae514bdd919e244c7af74adf7edba8d5
Certificate serial:       01A08C0DCCA6C01690177229FE6CC4867554
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dxd9Rq5RS92RniRMevdK337bqNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/88f1fc-204d-43be-a7b4-b76e82c232b7/1/Dxd9Rq5RS92RniRMevdK337bqNU.mft
Manifest number:          0260
Signing time:             Thu 10 Sep 2026 16:01:49 +0000
Manifest this update:     Thu 10 Sep 2026 16:01:49 +0000
Manifest next update:     Fri 11 Sep 2026 16:01:49 +0000
Files and hashes:         1: 25aFLsrtr-3cg85dYuCtUtJ12DI.roa (hash: Q6BbhiSVhBcdb9sUM5J8K87QWD5MUDWEKTLkdgJwJhY=)
                          2: Dxd9Rq5RS92RniRMevdK337bqNU.crl (hash: 1wosYL3GdzgKG89l9v5eHXVUu87eu+RAyPVhHMM7ybA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/88f1fc-204d-43be-a7b4-b76e82c232b7/1/Dxd9Rq5RS92RniRMevdK337bqNU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/88f1fc-204d-43be-a7b4-b76e82c232b7/1/Dxd9Rq5RS92RniRMevdK337bqNU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dxd9Rq5RS92RniRMevdK337bqNU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8c:0d:cc:a6:c0:16:90:17:72:29:fe:6c:c4:86:75:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f177d46ae514bdd919e244c7af74adf7edba8d5
        Validity
            Not Before: Sep 10 16:01:49 2026 GMT
            Not After : Sep 11 16:01:49 2026 GMT
        Subject: CN=21a8d012747d3ed7f647b1fdd5e64c6738fb845d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b3:d3:09:8b:57:7d:f6:9b:9c:47:6e:cf:f4:
                    ae:42:72:f3:88:3f:6e:f2:7b:74:38:a9:f0:1f:2d:
                    fa:6a:09:6b:50:e5:57:cd:b0:39:fc:c0:65:1f:12:
                    58:59:7d:8b:56:10:03:5c:44:85:cd:e2:b6:ce:d5:
                    12:bf:7d:e8:6b:df:f2:68:67:5f:a1:5a:ee:6d:4c:
                    47:00:4e:cb:db:24:74:2b:7c:c4:a7:aa:b8:a4:47:
                    5b:de:01:a0:91:31:3b:ef:87:e9:9b:15:b6:8c:56:
                    16:dd:63:8b:08:8a:d4:46:55:d0:46:32:3c:b4:0e:
                    38:61:d1:ec:05:93:e1:72:5b:b4:12:1b:6a:54:87:
                    6f:b0:7a:09:48:3c:c0:1e:66:14:c3:55:36:cd:d8:
                    5f:c2:06:05:49:20:cd:7e:23:b8:a2:04:c9:4f:ba:
                    4e:69:d4:1d:41:98:f0:4b:53:94:a9:30:cb:60:98:
                    36:70:27:b8:05:a7:0f:1a:fb:70:cd:b3:b7:25:80:
                    b6:40:b4:7a:04:52:f5:05:b3:16:e5:40:51:7c:06:
                    83:45:9e:53:1f:cb:21:df:0d:d5:48:44:f6:bb:9f:
                    78:2d:e8:03:78:cf:dd:3b:18:5e:b6:33:1a:b3:85:
                    7a:0f:f8:aa:25:91:55:87:e6:6e:2e:c9:46:fe:c2:
                    62:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:A8:D0:12:74:7D:3E:D7:F6:47:B1:FD:D5:E6:4C:67:38:FB:84:5D
            X509v3 Authority Key Identifier:
                keyid:0F:17:7D:46:AE:51:4B:DD:91:9E:24:4C:7A:F7:4A:DF:7E:DB:A8:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dxd9Rq5RS92RniRMevdK337bqNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/88f1fc-204d-43be-a7b4-b76e82c232b7/1/Dxd9Rq5RS92RniRMevdK337bqNU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/88f1fc-204d-43be-a7b4-b76e82c232b7/1/Dxd9Rq5RS92RniRMevdK337bqNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:41:8d:5a:3e:f7:f6:1b:08:1d:48:17:43:de:3d:59:fd:32:
         30:7c:4a:0f:24:6b:c8:fc:e3:77:59:bf:2d:6f:a1:91:97:df:
         61:5d:63:d3:a0:18:0e:d2:2d:80:1b:ad:41:e5:f0:a6:13:cb:
         ba:f5:39:35:d3:b0:a3:70:ed:4d:ff:67:e7:57:5c:b0:f4:74:
         81:b3:d7:cf:36:f5:a1:50:b1:fa:e0:93:75:c5:f8:90:80:40:
         ab:e9:57:02:cb:c7:b3:bc:e7:e9:9f:f3:d4:0d:3a:6b:93:ba:
         0d:da:40:d1:4b:10:e1:43:0b:a5:2e:f8:90:dc:ea:7e:de:09:
         f6:2c:8b:54:b5:4f:14:e8:98:97:69:b4:e4:f5:f6:44:8d:38:
         db:dd:93:7e:ae:65:46:a6:c3:2e:b7:db:c5:3e:88:95:7d:8f:
         a4:27:c6:fb:e7:ba:11:35:8e:26:23:a6:54:25:9c:4d:88:a1:
         03:32:85:b5:28:89:81:b8:b9:83:3f:d4:a3:4a:55:17:0a:cb:
         33:ad:62:72:b4:83:77:7e:e5:d7:38:87:e6:b1:46:e8:f3:f7:
         3f:48:dd:d4:a9:cf:f1:7a:d1:2b:72:46:f4:5b:7b:42:23:a3:
         b6:d5:c9:d7:86:7c:49:98:4c:17:eb:65:78:b4:c9:d7:3e:53:
         32:4d:d1:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:11:53 2026 by rpki-client