Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/0ab1d5-1b84-44f3-87dd-26accb7efd7f/1/cROEjAz5BGjQfWmfcUx_10ihMmk.mft
File:                     cROEjAz5BGjQfWmfcUx_10ihMmk.mft (raw, json)
Hash identifier:          CGqlKkcH9DcOx6e7wgHeNfJXRNmZE9d2Vp2bFUTMrZM=
Subject key identifier:   3D:E5:67:35:1F:2A:94:AE:1D:EE:7F:77:58:7A:92:0E:E4:96:33:90
Authority key identifier: 71:13:84:8C:0C:F9:04:68:D0:7D:69:9F:71:4C:7F:D7:48:A1:32:69
Certificate issuer:       /CN=7113848c0cf90468d07d699f714c7fd748a13269
Certificate serial:       01A0E4078B6DFE604682ED6D8ACB404770DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cROEjAz5BGjQfWmfcUx_10ihMmk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/0ab1d5-1b84-44f3-87dd-26accb7efd7f/1/cROEjAz5BGjQfWmfcUx_10ihMmk.mft
Manifest number:          01E6
Signing time:             Sun 27 Sep 2026 18:01:34 +0000
Manifest this update:     Sun 27 Sep 2026 18:01:34 +0000
Manifest next update:     Mon 28 Sep 2026 18:01:34 +0000
Files and hashes:         1: cROEjAz5BGjQfWmfcUx_10ihMmk.crl (hash: mi7UVNTIQG9ufGKAZpG9edjZsW6SD6J2GihVD8M4Frw=)
                          2: qgrQCVmykbnCGorMw6L6atIBXLU.asa (hash: sVztU1M0ntIZPQm7GwsbhsMw71eOwZCVyvZFdEoj2zw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/0ab1d5-1b84-44f3-87dd-26accb7efd7f/1/cROEjAz5BGjQfWmfcUx_10ihMmk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/0ab1d5-1b84-44f3-87dd-26accb7efd7f/1/cROEjAz5BGjQfWmfcUx_10ihMmk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cROEjAz5BGjQfWmfcUx_10ihMmk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 10:02:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e4:07:8b:6d:fe:60:46:82:ed:6d:8a:cb:40:47:70:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7113848c0cf90468d07d699f714c7fd748a13269
        Validity
            Not Before: Sep 27 18:01:34 2026 GMT
            Not After : Sep 28 18:01:34 2026 GMT
        Subject: CN=3de567351f2a94ae1dee7f77587a920ee4963390
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5f:50:ea:f5:cb:5d:83:bc:06:bc:28:6f:1b:
                    a2:17:37:f2:a8:53:0f:33:f8:29:93:20:5f:1e:ad:
                    12:db:05:2b:ba:e6:4b:68:f4:4b:1d:18:36:51:d5:
                    4d:6a:05:29:27:8b:70:6e:f3:90:5f:a4:5b:94:61:
                    57:d0:0f:71:5e:56:1d:32:30:2d:36:18:00:ee:7c:
                    a9:72:ed:42:fa:e6:83:7d:45:84:51:e2:77:a5:a2:
                    fc:6e:2f:f8:81:db:05:da:b0:fc:9a:c1:a6:9f:8b:
                    f8:dd:43:39:5f:be:4e:6b:f2:04:86:41:bd:70:88:
                    d2:6b:6d:25:c5:db:ce:97:a9:c2:79:0e:ed:d5:24:
                    b0:9b:34:63:4a:9c:83:b6:d6:64:b7:92:26:98:6e:
                    2e:91:82:3a:d2:cb:da:eb:18:68:b7:92:ed:5e:0b:
                    a4:eb:92:a7:dd:15:87:91:ef:89:8e:69:26:9a:b1:
                    7d:01:d4:b9:42:38:f6:aa:75:52:65:20:d8:05:82:
                    c8:ba:67:1e:77:66:75:86:a0:48:b4:fc:8e:90:bf:
                    b3:13:92:6f:95:e8:89:83:64:28:33:1c:06:c0:e1:
                    e8:ec:5b:dd:d1:00:85:f8:e4:1c:7a:81:9a:43:7d:
                    a7:3e:24:03:67:fd:11:5b:7d:41:b4:d3:d2:43:d2:
                    27:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:E5:67:35:1F:2A:94:AE:1D:EE:7F:77:58:7A:92:0E:E4:96:33:90
            X509v3 Authority Key Identifier:
                keyid:71:13:84:8C:0C:F9:04:68:D0:7D:69:9F:71:4C:7F:D7:48:A1:32:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cROEjAz5BGjQfWmfcUx_10ihMmk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0ab1d5-1b84-44f3-87dd-26accb7efd7f/1/cROEjAz5BGjQfWmfcUx_10ihMmk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0ab1d5-1b84-44f3-87dd-26accb7efd7f/1/cROEjAz5BGjQfWmfcUx_10ihMmk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:2f:ee:00:ef:a8:bb:24:0e:09:29:e1:b3:3c:a7:9e:dc:37:
         92:c8:2a:8c:47:b6:5a:8e:22:ec:23:b5:57:88:dd:69:d0:9c:
         b2:e2:dc:fe:f9:76:47:35:fb:4d:e4:40:cd:9f:76:40:67:24:
         bf:9c:9d:65:2a:b7:17:76:52:38:d4:c7:0a:1c:cc:fd:c9:2b:
         e3:e1:d8:22:b7:9e:73:36:24:20:bb:ca:12:76:52:52:e6:9f:
         67:aa:15:0a:e3:3a:35:47:be:1a:70:ee:1b:a0:f4:c0:c5:cc:
         5a:3a:a2:d2:b4:30:a8:1e:1a:4f:c9:4f:89:2c:2d:19:0d:2b:
         90:b2:2d:00:8f:21:2a:2e:80:45:a6:16:72:d4:00:95:16:93:
         f1:67:a9:98:44:fe:c1:38:26:e7:95:e3:31:16:ba:0c:00:f9:
         a1:75:00:3c:a3:36:a7:40:25:c5:6b:06:3e:10:55:4b:05:ba:
         c7:a1:f0:13:ab:74:29:aa:79:14:5e:20:c0:7a:2b:e0:ea:02:
         0e:b2:85:43:9a:57:16:0e:a2:91:46:02:34:f1:36:95:40:57:
         4b:e8:0b:bf:97:ed:15:fc:e1:a6:68:13:72:21:79:e6:ae:de:
         28:9b:aa:53:d4:82:21:e1:13:3c:ea:fa:57:1c:d6:bf:4a:3d:
         a8:f2:78:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 21:52:26 2026 by rpki-client