Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/987c4e-789b-4c26-8ce5-abb222507f17/1/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.mft
File:                     RoRlV7nkKVUWPlFrAtyOPuOCgRQ.mft (raw, json)
Hash identifier:          RMEGvHw7M955/OCVXBiNMw6J72xZqEkBUrESI3X4JDY=
Subject key identifier:   35:EF:5E:DC:31:E8:31:9B:0F:29:52:AB:C4:7A:FD:AD:8E:E3:FD:8B
Authority key identifier: 46:84:65:57:B9:E4:29:55:16:3E:51:6B:02:DC:8E:3E:E3:82:81:14
Certificate issuer:       /CN=46846557b9e42955163e516b02dc8e3ee3828114
Certificate serial:       01A08F0E4A5DE1315309AA8EA8C91C519E2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/987c4e-789b-4c26-8ce5-abb222507f17/1/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.mft
Manifest number:          0D96
Signing time:             Fri 11 Sep 2026 06:01:13 +0000
Manifest this update:     Fri 11 Sep 2026 06:01:13 +0000
Manifest next update:     Sat 12 Sep 2026 06:01:13 +0000
Files and hashes:         1: RoRlV7nkKVUWPlFrAtyOPuOCgRQ.crl (hash: bovTzokKc3ripyLslOZpqk0QRBkCxUT8Oqnp2kYvwps=)
                          2: ZRtJ06zDF-x6e7hZrwH9g5MJ3wY.roa (hash: WcjDPDlk98u+n1T1FkRZjQvHjiER+xJZpFWL/kzuHtQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/987c4e-789b-4c26-8ce5-abb222507f17/1/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/987c4e-789b-4c26-8ce5-abb222507f17/1/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8f:0e:4a:5d:e1:31:53:09:aa:8e:a8:c9:1c:51:9e:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46846557b9e42955163e516b02dc8e3ee3828114
        Validity
            Not Before: Sep 11 06:01:13 2026 GMT
            Not After : Sep 12 06:01:13 2026 GMT
        Subject: CN=35ef5edc31e8319b0f2952abc47afdad8ee3fd8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:81:16:c1:d5:47:d0:3b:fe:ab:09:aa:c3:e9:
                    07:40:4a:5a:30:11:f3:3e:d1:03:c6:43:da:ae:56:
                    cb:76:29:d9:ba:78:cd:4e:bd:5d:29:62:b0:d7:93:
                    26:c8:d5:b4:61:3a:e8:9f:20:fa:a8:9b:b8:e9:87:
                    49:2b:b9:25:21:81:19:ff:9f:b7:2c:df:ff:4a:d0:
                    a5:33:ea:07:f8:53:66:45:19:82:c7:4d:84:76:ef:
                    bb:9d:2b:48:bc:4c:11:d9:6a:dd:c5:a4:96:5e:25:
                    c9:e3:eb:fc:8e:d6:e2:e4:a6:ba:ac:83:35:69:ea:
                    73:1a:bf:55:75:f3:6e:9c:3f:a1:9a:ee:ce:30:f3:
                    80:43:a3:dc:3e:76:42:04:e0:1c:d7:08:8e:79:17:
                    43:ef:fe:47:d9:ab:28:2b:ae:d4:23:b5:32:4b:3b:
                    4a:41:b9:55:d6:fb:63:d8:ba:07:09:e9:62:a1:c7:
                    2e:0a:f2:cd:dc:e7:c7:fd:fc:14:c9:7d:e6:4f:e3:
                    59:90:3b:6e:16:bb:a5:c4:9c:66:82:c4:f5:2b:05:
                    05:99:98:12:cf:04:8b:f5:01:f6:6e:f0:04:64:44:
                    dd:a8:1c:c6:17:06:56:5d:90:d5:fb:bb:96:53:0a:
                    94:1f:8b:20:73:d4:07:ce:77:13:91:c9:f3:e2:c2:
                    3b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:EF:5E:DC:31:E8:31:9B:0F:29:52:AB:C4:7A:FD:AD:8E:E3:FD:8B
            X509v3 Authority Key Identifier:
                keyid:46:84:65:57:B9:E4:29:55:16:3E:51:6B:02:DC:8E:3E:E3:82:81:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/987c4e-789b-4c26-8ce5-abb222507f17/1/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/987c4e-789b-4c26-8ce5-abb222507f17/1/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:34:22:68:69:1f:20:6b:6c:d7:1a:5e:60:df:44:c7:54:d5:
         18:69:5b:3e:39:5c:6b:44:18:cc:49:36:21:2b:bb:2f:e3:51:
         a5:60:2d:01:9d:a2:26:36:74:bc:3e:26:aa:94:f2:3e:ac:f1:
         9f:7e:d5:3f:5a:77:c7:66:1e:4e:e9:e9:e5:6e:61:85:57:9b:
         21:86:68:54:5b:a6:b9:69:2c:3a:28:34:a9:6e:d2:cd:c2:42:
         38:17:ca:d6:2a:e2:fd:ed:72:42:93:f8:9a:38:52:da:25:ef:
         3d:20:df:b2:1e:ca:73:e0:1a:c9:63:da:34:8d:53:0c:9a:d6:
         71:b2:fb:0b:65:60:4c:a9:29:53:da:6a:27:d4:f4:d6:b0:e4:
         7f:69:57:e8:98:60:85:61:20:58:40:99:a2:b6:17:19:0a:06:
         db:ac:8f:b0:ec:81:a3:69:ab:ae:d7:6e:58:5b:33:f8:05:4f:
         d3:96:c7:91:e2:17:d4:0d:70:4a:72:51:99:c3:e6:b4:b2:ac:
         4c:cd:35:f1:99:44:08:a6:d8:59:45:ea:3f:65:75:a8:7a:22:
         14:a9:ab:0a:8a:e2:bd:84:33:64:11:94:cb:10:23:cf:5f:04:
         97:b7:22:3e:14:6d:f8:2f:2e:7e:df:7d:e2:cb:8b:3d:e2:a1:
         0e:35:3a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 09:09:13 2026 by rpki-client