Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.mft
File:                     dr5GHrn3AE8poX_d3-8uLqBeua8.mft (raw, json)
Hash identifier:          ta6s4ehb6Ulo3D9xwBh4ed7m3bymu0S9hy6O3RgreMw=
Subject key identifier:   26:6D:91:63:74:83:D0:91:31:5D:F9:52:EA:69:27:1E:E1:28:CD:BC
Authority key identifier: 76:BE:46:1E:B9:F7:00:4F:29:A1:7F:DD:DF:EF:2E:2E:A0:5E:B9:AF
Certificate issuer:       /CN=76be461eb9f7004f29a17fdddfef2e2ea05eb9af
Certificate serial:       01A08A8CB434C7AD0834334FC285F775D6D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dr5GHrn3AE8poX_d3-8uLqBeua8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.mft
Manifest number:          19DC
Signing time:             Thu 10 Sep 2026 09:01:11 +0000
Manifest this update:     Thu 10 Sep 2026 09:01:11 +0000
Manifest next update:     Fri 11 Sep 2026 09:01:11 +0000
Files and hashes:         1: adYAw1QARYUATfxCFb6i8Q_fm-o.roa (hash: QPoF7S4xS1/LhTKBOqbjrxIWUWpnI5hm5nl1XAjSOeg=)
                          2: dr5GHrn3AE8poX_d3-8uLqBeua8.crl (hash: e4C+7q4XlppOY0J1FrrKWbJrm6Y+t59X/mz4zY48oKI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dr5GHrn3AE8poX_d3-8uLqBeua8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 08:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:8c:b4:34:c7:ad:08:34:33:4f:c2:85:f7:75:d6:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76be461eb9f7004f29a17fdddfef2e2ea05eb9af
        Validity
            Not Before: Sep 10 09:01:11 2026 GMT
            Not After : Sep 11 09:01:11 2026 GMT
        Subject: CN=266d91637483d091315df952ea69271ee128cdbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f0:89:29:fb:5b:9c:5d:08:14:db:f8:b5:4c:
                    93:08:a0:64:e6:66:e8:2a:ee:b5:54:ef:49:e5:9b:
                    3f:05:3b:3a:d3:fb:20:eb:9a:cc:b5:10:5c:3d:6b:
                    55:f2:2c:fd:c2:0f:12:e3:58:df:79:a5:e6:3e:56:
                    13:d8:20:ea:ee:7b:3b:60:ad:a1:bd:ee:ac:51:53:
                    66:50:9f:a3:e5:ae:1f:80:db:7d:f6:88:78:1b:96:
                    60:51:01:09:43:9f:eb:94:56:f4:a0:ce:c4:8c:8a:
                    cc:73:b9:4e:a8:78:94:9e:9e:7b:65:7f:6f:22:1d:
                    72:65:44:36:c5:9f:e0:38:ae:68:14:5e:38:3a:7f:
                    05:70:03:08:b6:c4:ad:43:01:7f:f9:c6:74:c0:99:
                    cd:f8:e3:82:0a:bb:a4:7a:fd:66:ce:a0:5d:5e:8d:
                    ac:17:24:49:87:65:a0:8c:13:61:4a:59:ac:01:94:
                    17:bf:00:58:dd:ef:93:e5:80:8e:28:55:12:21:89:
                    1d:bc:bc:b8:bf:a0:37:bc:11:e1:d8:45:56:e4:45:
                    c9:2f:d8:7d:20:d8:77:8a:8d:74:98:1e:9c:c1:f4:
                    ff:c6:b4:44:52:49:6b:ce:c1:b8:df:f3:27:ad:c2:
                    2d:88:a6:62:c0:8a:93:40:a0:fc:b0:65:99:69:58:
                    ff:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:6D:91:63:74:83:D0:91:31:5D:F9:52:EA:69:27:1E:E1:28:CD:BC
            X509v3 Authority Key Identifier:
                keyid:76:BE:46:1E:B9:F7:00:4F:29:A1:7F:DD:DF:EF:2E:2E:A0:5E:B9:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dr5GHrn3AE8poX_d3-8uLqBeua8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:f1:b8:7c:2d:5e:fb:48:97:87:07:36:70:3e:9b:cc:bc:c1:
         12:a1:9b:7b:4f:d6:d1:0b:3a:85:cd:c1:de:d9:a0:58:7b:f9:
         f4:f2:9f:7c:33:df:81:8e:66:ca:d4:5d:b0:27:de:fa:4e:88:
         20:94:02:08:53:cf:53:99:01:a9:3d:91:e1:40:c6:23:e7:de:
         b7:6f:67:f5:ee:25:72:c9:b7:f1:e1:c7:13:b2:63:e4:90:f6:
         5c:6a:8d:9c:2f:db:65:8f:49:d8:7a:cd:1f:07:6d:18:72:8c:
         4c:7c:37:50:12:14:29:cd:42:cf:89:6b:d3:40:dc:ce:89:5d:
         bf:91:25:ab:ea:5d:60:f7:87:55:18:cb:de:1f:e0:a7:ce:d5:
         a5:34:f0:9f:79:d8:83:5e:1b:f2:ab:1a:b7:dd:bd:10:c1:b3:
         15:45:21:dd:10:27:91:b6:eb:b3:ce:a4:94:51:e9:3e:fc:da:
         e5:1f:ca:21:7c:b7:2d:d0:5f:eb:e1:25:51:62:78:90:f0:ab:
         78:88:71:5a:2e:a3:e2:0a:8f:a5:d8:0f:22:cb:79:c7:83:a6:
         83:21:7e:fd:d4:d8:a2:ab:2d:2a:32:a1:79:92:7c:ec:d6:fc:
         9b:b6:38:9b:15:59:82:16:62:a1:47:f8:cd:8d:5e:27:5f:25:
         fe:b5:48:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:01:16 2026 by rpki-client