Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6b/c1fe4d-ab5a-4071-ba2a-d5a06d8ab984/1/36JPgpi-GMimnxgSjwZOcAPh090.mft
File:                     36JPgpi-GMimnxgSjwZOcAPh090.mft (raw, json)
Hash identifier:          HKVV7H6A12IIAfLKmRVDI4kdFQVqdQYsw5UReRuaCSo=
Subject key identifier:   50:E1:A1:9A:E6:36:30:74:DE:DF:5F:B1:8E:40:E4:0A:CC:2E:47:4A
Authority key identifier: DF:A2:4F:82:98:BE:18:C8:A6:9F:18:12:8F:06:4E:70:03:E1:D3:DD
Certificate issuer:       /CN=dfa24f8298be18c8a69f18128f064e7003e1d3dd
Certificate serial:       01A17C291BF1899ADDFDACA91A64FD7E05B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/36JPgpi-GMimnxgSjwZOcAPh090.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/c1fe4d-ab5a-4071-ba2a-d5a06d8ab984/1/36JPgpi-GMimnxgSjwZOcAPh090.mft
Manifest number:          11BA
Signing time:             Tue 27 Oct 2026 07:00:31 +0000
Manifest this update:     Tue 27 Oct 2026 07:00:31 +0000
Manifest next update:     Wed 28 Oct 2026 07:00:31 +0000
Files and hashes:         1: 36JPgpi-GMimnxgSjwZOcAPh090.crl (hash: +3C0QmaJqI/Pk56EI0ZsEcgJyxDjdBFpzWY+KvhYyG0=)
                          2: nNppMpelb0oU-Z8bXlu9JPmj-50.roa (hash: vaplA6p67yz2pjVfp5DzGuZj7gD852HpFF3uwF96n1s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/c1fe4d-ab5a-4071-ba2a-d5a06d8ab984/1/36JPgpi-GMimnxgSjwZOcAPh090.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/c1fe4d-ab5a-4071-ba2a-d5a06d8ab984/1/36JPgpi-GMimnxgSjwZOcAPh090.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/36JPgpi-GMimnxgSjwZOcAPh090.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7c:29:1b:f1:89:9a:dd:fd:ac:a9:1a:64:fd:7e:05:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfa24f8298be18c8a69f18128f064e7003e1d3dd
        Validity
            Not Before: Oct 27 07:00:31 2026 GMT
            Not After : Oct 28 07:00:31 2026 GMT
        Subject: CN=50e1a19ae6363074dedf5fb18e40e40acc2e474a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a8:0c:86:f7:28:6e:73:10:d0:93:de:d1:de:
                    00:62:05:b0:f3:13:bc:41:b3:0f:3f:7e:41:2a:79:
                    45:5a:86:16:5c:7a:04:0f:3c:d5:56:f5:e9:e2:61:
                    e3:3b:b0:ef:66:43:c0:01:0a:39:44:59:e3:40:eb:
                    ff:26:00:03:51:cd:89:32:e7:a3:ee:a9:fe:23:7e:
                    ed:89:44:09:3c:ce:37:7a:a9:14:69:57:df:0d:33:
                    b5:03:ea:0e:f9:d8:2e:17:0d:3c:d9:ea:30:c5:d1:
                    44:d7:54:f6:0a:95:a1:f5:cd:1c:5a:88:39:06:a4:
                    e5:56:0d:79:d2:e7:e6:81:22:d8:49:9a:2d:9c:1d:
                    f1:15:14:fc:e5:ad:7c:5a:14:7f:cd:20:6e:8a:7c:
                    e2:7d:60:b0:d6:80:0d:1d:ba:30:87:04:f9:d9:26:
                    b3:a4:d3:f7:23:ac:32:22:d1:7c:f2:f1:68:4a:17:
                    e6:98:c9:f5:51:a4:bf:1c:00:ea:37:35:38:ee:67:
                    b3:78:05:58:0e:35:d8:05:35:fa:24:27:a7:ec:32:
                    71:62:1f:b1:eb:78:40:0e:d6:bc:4e:f6:31:a2:57:
                    9d:51:a2:1f:0a:8a:d8:3b:2d:fe:89:ac:75:ad:62:
                    36:e7:a7:8e:6f:bb:f5:81:2c:fa:53:0e:2d:45:01:
                    cd:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:E1:A1:9A:E6:36:30:74:DE:DF:5F:B1:8E:40:E4:0A:CC:2E:47:4A
            X509v3 Authority Key Identifier:
                keyid:DF:A2:4F:82:98:BE:18:C8:A6:9F:18:12:8F:06:4E:70:03:E1:D3:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/36JPgpi-GMimnxgSjwZOcAPh090.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c1fe4d-ab5a-4071-ba2a-d5a06d8ab984/1/36JPgpi-GMimnxgSjwZOcAPh090.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c1fe4d-ab5a-4071-ba2a-d5a06d8ab984/1/36JPgpi-GMimnxgSjwZOcAPh090.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:e6:82:eb:21:c9:02:b9:c3:e2:e7:6d:71:a6:1f:7a:e4:45:
         5f:fb:70:2d:3b:a8:e5:a7:52:1f:cd:84:e2:9c:c6:fe:10:ac:
         8b:c2:95:76:a4:b7:6f:85:d4:b9:81:b1:7e:d6:d6:98:35:f5:
         2d:3d:7d:94:46:7a:9d:55:ff:68:e2:6c:e9:c0:46:e0:27:81:
         5d:80:6b:1d:34:8a:a4:fe:0c:e6:fc:00:28:fc:ac:ec:6d:2d:
         19:cf:22:0c:93:43:41:56:d3:8c:cf:dd:30:f4:b4:79:ae:3a:
         19:7c:36:af:3f:91:70:59:be:4b:ad:a1:82:87:f4:a9:11:6e:
         46:6a:c9:2e:31:b3:45:91:15:ff:5e:60:d6:5d:34:b2:5f:4c:
         68:a0:ed:e9:6e:ff:a1:a7:4f:e2:0a:84:f6:56:db:eb:d0:ca:
         1b:9c:43:53:a5:8f:22:72:f6:d4:b2:39:c2:aa:9c:fb:89:29:
         7e:90:f5:ba:57:a9:93:57:53:bc:7c:f0:6b:c1:5c:bf:c8:46:
         9c:8b:a2:c7:1a:08:7c:ff:f6:70:99:25:b3:1b:b5:cc:7d:8e:
         58:62:2e:12:7d:d0:be:eb:40:af:7f:6f:b7:33:90:5d:b3:4b:
         27:24:af:3b:d5:59:b2:4f:8e:dc:4d:54:b0:d1:35:03:54:6c:
         77:16:6d:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 12:48:44 2026 by rpki-client