Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/drtZ2KtKtSd87uX_CYIIQzBiex8.mft
File:                     drtZ2KtKtSd87uX_CYIIQzBiex8.mft (raw, json)
Hash identifier:          9PRy0ZLBm8g4tqCh9fjFCIFAUdoAv/WfYrEyA8bgpwQ=
Subject key identifier:   10:26:BF:79:F1:A2:31:03:3C:E5:8D:ED:59:AB:52:C8:0F:3C:5A:DE
Authority key identifier: 76:BB:59:D8:AB:4A:B5:27:7C:EE:E5:FF:09:82:08:43:30:62:7B:1F
Certificate issuer:       /CN=76bb59d8ab4ab5277ceee5ff0982084330627b1f
Certificate serial:       01A08CE8B0F5F6AECB52B372B690E2177365
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/drtZ2KtKtSd87uX_CYIIQzBiex8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/drtZ2KtKtSd87uX_CYIIQzBiex8.mft
Manifest number:          04FD
Signing time:             Thu 10 Sep 2026 20:00:54 +0000
Manifest this update:     Thu 10 Sep 2026 20:00:54 +0000
Manifest next update:     Fri 11 Sep 2026 20:00:54 +0000
Files and hashes:         1: drtZ2KtKtSd87uX_CYIIQzBiex8.crl (hash: ToqC4zZpFtn/yWNTorWfzcNE1EWIuYqDCsrOM9jH5kQ=)
                          2: lYVVRT8ck9hIF_wE0rPLM9h8sl4.roa (hash: nOQ76WC5KxHith3R9t77yLyg4sKQCt1T2XSdiC50P2s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/drtZ2KtKtSd87uX_CYIIQzBiex8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/drtZ2KtKtSd87uX_CYIIQzBiex8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/drtZ2KtKtSd87uX_CYIIQzBiex8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8c:e8:b0:f5:f6:ae:cb:52:b3:72:b6:90:e2:17:73:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76bb59d8ab4ab5277ceee5ff0982084330627b1f
        Validity
            Not Before: Sep 10 20:00:54 2026 GMT
            Not After : Sep 11 20:00:54 2026 GMT
        Subject: CN=1026bf79f1a231033ce58ded59ab52c80f3c5ade
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:12:40:b7:20:46:0e:56:82:eb:e5:8f:a0:b5:
                    e9:dd:ab:03:a2:07:7a:1d:81:a4:3c:fe:cc:34:6e:
                    ad:a3:ef:5a:c8:e2:30:60:92:e1:17:ed:9a:b4:8d:
                    6b:2a:24:47:ec:3c:99:0b:1f:77:6e:e0:0c:e8:7f:
                    14:2b:ee:c5:6b:f6:4d:52:7d:ff:f6:7b:84:ee:a2:
                    74:c5:2d:0f:8c:48:29:47:91:bc:c0:4d:cf:5f:0d:
                    44:4e:d6:c8:35:b9:9f:d6:f7:ff:bf:90:1e:c3:4e:
                    52:25:a7:2e:83:e3:de:34:20:1b:ef:59:d4:d2:7c:
                    65:1d:a2:3b:e2:76:83:9a:47:f6:9b:62:81:99:0c:
                    d8:d8:7f:10:06:73:f4:7d:05:04:7f:a8:04:bb:ab:
                    12:c4:6e:1e:ca:f0:e2:48:cf:d7:f2:84:01:f1:fb:
                    9a:de:72:15:5d:ce:82:e1:d2:91:a3:2d:93:35:f4:
                    99:ec:49:e9:30:25:c1:9a:b8:47:d7:ab:74:e6:b0:
                    09:2a:5b:6c:b7:9b:1b:50:5e:bd:06:d3:a6:74:90:
                    bc:b2:92:e3:eb:8d:19:4f:e4:b2:8e:f9:f6:b4:58:
                    b1:9e:9c:fb:88:44:b7:19:dd:54:17:ff:c0:0b:63:
                    0e:43:f8:bb:7a:77:8a:17:3a:cd:ad:34:6f:a1:fb:
                    c3:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:26:BF:79:F1:A2:31:03:3C:E5:8D:ED:59:AB:52:C8:0F:3C:5A:DE
            X509v3 Authority Key Identifier:
                keyid:76:BB:59:D8:AB:4A:B5:27:7C:EE:E5:FF:09:82:08:43:30:62:7B:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/drtZ2KtKtSd87uX_CYIIQzBiex8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/drtZ2KtKtSd87uX_CYIIQzBiex8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/drtZ2KtKtSd87uX_CYIIQzBiex8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:33:54:e3:ea:a1:c9:80:e1:65:a6:80:c5:65:1b:36:0c:ea:
         e1:3e:c6:0d:a0:bc:ee:28:21:07:a7:8d:08:e3:08:c1:67:31:
         18:c1:31:15:ae:37:d2:db:0c:4b:d1:b9:b0:73:ff:7b:6c:56:
         54:a8:a4:00:4e:2b:2e:60:e4:d3:a1:c6:c0:fa:bc:8e:a7:5e:
         90:1b:a8:fc:85:14:68:b4:69:a6:ed:2f:81:19:5c:32:9c:d6:
         f3:22:5e:3d:d8:83:31:e6:c5:5d:36:ad:6f:6c:12:87:af:6e:
         28:84:22:38:e5:c3:53:81:4b:0c:0b:76:f8:21:c8:b7:a5:36:
         57:eb:9f:77:f7:9a:1a:54:81:a3:c1:df:82:9d:e8:47:f6:45:
         a3:e2:ff:c9:cb:02:3a:8a:49:8a:32:cb:bc:60:ee:4c:3e:7e:
         af:02:88:01:18:79:20:cc:ae:21:1a:1f:ce:57:82:a3:57:bf:
         3c:ce:3e:e0:14:12:57:90:0c:83:1d:c7:25:ab:fb:8f:74:9c:
         4d:df:69:5a:55:9c:9b:6c:54:ea:09:d5:8d:a8:d8:2e:9a:a2:
         50:66:f4:e9:8c:c0:0b:26:e9:52:3e:6e:18:6a:d5:92:c3:de:
         9e:a1:8b:b7:c0:8e:e4:c3:46:c6:cb:e9:e6:58:7e:75:06:82:
         eb:70:0a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 23:36:39 2026 by rpki-client