Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft
File:                     d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft (raw, json)
Hash identifier:          lxG1NIoSNWdHQX8nCrtN9VzmQ7Wx9WdUFj7jEuaDbpY=
Subject key identifier:   D0:26:36:33:45:14:14:D3:75:A8:69:A6:17:47:16:03:85:DF:90:09
Authority key identifier: 77:7C:49:D3:F6:27:33:51:90:E3:C2:EC:36:54:E1:54:CF:D4:53:98
Certificate issuer:       /CN=777c49d3f627335190e3c2ec3654e154cfd45398
Certificate serial:       01A0B72E2A9864772FBE7E8404D4AAF5B7C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d3xJ0_YnM1GQ48LsNlThVM_UU5g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft
Manifest number:          1148
Signing time:             Sat 19 Sep 2026 01:00:51 +0000
Manifest this update:     Sat 19 Sep 2026 01:00:51 +0000
Manifest next update:     Sun 20 Sep 2026 01:00:51 +0000
Files and hashes:         1: 1JIM2kMeVJoHRDwhcEraJMNWzzk.roa (hash: 7HnRkqXRdr1xWTIy9iiHnk4cqifwXb86Gt3ZsfiE8YQ=)
                          2: d3xJ0_YnM1GQ48LsNlThVM_UU5g.crl (hash: fYueSR9WjZ/ms8lL5L98SPWXVGJscbrVOqtUs+U8doU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d3xJ0_YnM1GQ48LsNlThVM_UU5g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Sep 2026 01:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:b7:2e:2a:98:64:77:2f:be:7e:84:04:d4:aa:f5:b7:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=777c49d3f627335190e3c2ec3654e154cfd45398
        Validity
            Not Before: Sep 19 01:00:51 2026 GMT
            Not After : Sep 20 01:00:51 2026 GMT
        Subject: CN=d0263633451414d375a869a61747160385df9009
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b3:02:ff:4e:b1:30:09:2a:9a:3c:aa:91:26:
                    b8:28:45:2c:3f:a8:31:54:47:b3:51:4f:17:24:9a:
                    f0:62:df:02:ea:bd:73:0a:a0:ad:32:93:2e:d9:06:
                    bc:48:78:70:fb:df:49:c8:1a:03:1e:9c:87:1b:65:
                    65:d3:6c:4d:6f:00:67:92:6e:25:7f:be:74:78:76:
                    a4:0e:79:e1:51:2b:f7:63:8a:fd:67:d4:48:27:2d:
                    7c:7e:3d:c9:60:c2:f1:70:54:bb:a1:32:ee:20:aa:
                    ea:cf:69:a0:57:16:a5:dd:82:55:81:f3:d2:dd:5f:
                    7e:90:57:94:6d:9a:7c:52:e0:6a:25:c7:88:eb:af:
                    c7:c7:57:f3:87:7f:7d:db:8b:5e:f5:93:c4:a0:db:
                    89:bd:ee:0e:29:2a:39:cd:78:30:ee:90:37:8a:1a:
                    b1:13:06:03:7b:0b:2b:f8:13:1f:76:02:95:0a:94:
                    86:70:b3:18:d6:91:7b:10:0d:1c:d3:68:d3:2f:72:
                    05:d9:01:97:5c:d0:2c:4d:25:88:53:c7:c8:eb:2e:
                    75:a7:c6:f7:d1:d3:c0:27:38:bc:bb:63:27:56:3a:
                    3f:9e:b5:aa:3a:19:69:db:42:ef:ca:26:12:51:5a:
                    df:ec:66:1f:8f:9f:72:14:ef:8d:21:21:34:38:fe:
                    56:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:26:36:33:45:14:14:D3:75:A8:69:A6:17:47:16:03:85:DF:90:09
            X509v3 Authority Key Identifier:
                keyid:77:7C:49:D3:F6:27:33:51:90:E3:C2:EC:36:54:E1:54:CF:D4:53:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3xJ0_YnM1GQ48LsNlThVM_UU5g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:fe:fe:ee:40:ac:38:ce:4b:9c:7b:9c:04:94:f8:27:2b:ba:
         6b:ce:49:d6:b7:aa:b8:00:6c:87:6a:1f:23:02:d9:29:b3:38:
         3a:6a:e7:de:97:cb:b2:1c:00:02:0d:1c:59:c0:3b:f9:ba:5c:
         2d:4c:d0:1d:3c:48:68:1d:1d:c4:2f:eb:e1:1e:32:0e:5b:72:
         a6:74:5b:da:3d:88:eb:fb:d3:cc:f0:c3:5c:d8:96:3e:4c:ba:
         eb:53:6f:8f:4b:1e:fd:d4:91:4e:a6:26:26:d5:9d:61:6f:94:
         02:14:1a:f2:e7:d1:89:f3:bd:10:a7:7e:10:be:28:98:fd:29:
         8d:56:00:41:c8:60:be:8a:f0:e7:30:4c:69:5c:cd:62:81:5d:
         7d:c4:e3:7b:bb:3f:51:2c:ce:68:37:f8:64:87:52:50:75:57:
         87:86:00:00:f3:cd:13:f6:d6:5c:d0:64:e9:18:1f:4e:fb:e2:
         19:20:6c:af:43:db:ba:a4:aa:4c:2b:f4:a0:3c:61:c3:a8:9a:
         89:55:08:ab:b6:34:0b:ce:a6:a5:96:34:cc:36:b7:b1:fa:6d:
         dc:01:7f:ef:fe:e3:16:cc:67:b2:57:1e:30:42:17:48:76:38:
         b9:50:15:ea:57:ad:4c:27:38:86:ec:62:a7:13:ae:24:4e:0c:
         fa:32:6e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 06:04:50 2026 by rpki-client