Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
File:                     9WdppC5EJm8Dfss5DUEV_r44YaQ.mft (raw, json)
Hash identifier:          TLjgNG3GeQ+S68YIljEiLcdWMdx594TR1dVVmqvKsOU=
Subject key identifier:   28:DA:90:83:BA:35:B4:1F:2A:25:95:B4:2D:F0:28:86:39:A4:6C:79
Authority key identifier: F5:67:69:A4:2E:44:26:6F:03:7E:CB:39:0D:41:15:FE:BE:38:61:A4
Certificate issuer:       /CN=f56769a42e44266f037ecb390d4115febe3861a4
Certificate serial:       01A0A29477E01BB2C7E6F35624D5DA35EDE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
Manifest number:          19E7
Signing time:             Tue 15 Sep 2026 01:00:33 +0000
Manifest this update:     Tue 15 Sep 2026 01:00:33 +0000
Manifest next update:     Wed 16 Sep 2026 01:00:33 +0000
Files and hashes:         1: 9WdppC5EJm8Dfss5DUEV_r44YaQ.crl (hash: +6RlHzJA5Z/ziS+61hRSHgiPsLyb17J3K8y7gSdavjQ=)
                          2: PmvPeyfuH32uVVKqSfQ5RmaGzZA.roa (hash: 9iQB+r4y8DYdCOUHJllDHq/E35qdiIubyMUUaFVIXsY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 16 Sep 2026 01:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:a2:94:77:e0:1b:b2:c7:e6:f3:56:24:d5:da:35:ed:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f56769a42e44266f037ecb390d4115febe3861a4
        Validity
            Not Before: Sep 15 01:00:33 2026 GMT
            Not After : Sep 16 01:00:33 2026 GMT
        Subject: CN=28da9083ba35b41f2a2595b42df0288639a46c79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:21:89:b1:96:c0:9d:c1:d9:23:de:6a:36:a9:
                    6a:76:30:96:ca:1a:85:85:72:70:b4:e8:a2:a5:42:
                    2b:22:c1:10:40:1e:ee:0d:06:e9:a6:40:9f:bc:ef:
                    b3:da:29:1e:61:f9:78:d7:bc:6b:93:a7:94:a0:fd:
                    b4:94:1b:bb:40:98:50:91:d0:26:a6:45:8a:b7:52:
                    1e:9f:5b:b4:a7:9e:90:ef:9a:79:20:ce:d4:a0:d1:
                    53:d5:49:a2:4b:0d:b9:7b:fc:b9:1a:63:ef:27:32:
                    6c:c4:d3:0b:a2:31:14:e3:2d:04:f2:86:4e:e5:aa:
                    47:ac:6a:5f:41:62:e8:ae:7d:01:4f:8f:a7:d8:41:
                    64:14:72:67:a7:b1:fd:0e:9b:76:15:1c:cd:cf:43:
                    7f:04:c0:0f:e9:97:07:df:78:43:79:35:e6:e0:14:
                    a9:7f:b5:51:9f:bd:ed:ee:50:5e:e5:d6:74:7f:83:
                    ec:fc:fc:f7:48:c4:fc:84:f5:27:fb:7b:f2:ba:44:
                    dd:f8:d8:2a:f2:3e:61:0f:b9:ac:ac:19:9c:ce:d8:
                    c6:91:47:fe:32:f7:50:9c:40:68:39:0e:82:7d:86:
                    df:25:1a:19:56:8c:47:44:90:a2:01:59:ab:b7:10:
                    ab:2d:52:5a:ad:2a:9e:9a:91:4e:30:01:b0:75:d8:
                    1a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:DA:90:83:BA:35:B4:1F:2A:25:95:B4:2D:F0:28:86:39:A4:6C:79
            X509v3 Authority Key Identifier:
                keyid:F5:67:69:A4:2E:44:26:6F:03:7E:CB:39:0D:41:15:FE:BE:38:61:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:c0:bf:7f:0a:b5:8f:e5:12:40:de:dc:3f:03:1c:7f:20:b9:
         01:e8:95:33:af:03:c0:b8:d2:69:24:6d:87:1d:4f:80:cc:84:
         24:bb:27:7b:d0:38:de:af:17:fb:a3:da:46:c7:7b:3f:65:96:
         86:c5:00:27:9d:6b:c6:92:11:a6:3e:a7:c8:26:5f:32:7e:7b:
         36:f1:c6:ac:f0:73:4a:35:0b:bb:0f:af:18:21:92:06:dd:bf:
         a3:d7:1d:36:a0:60:3c:0f:6e:f1:2f:7d:1c:f5:8f:36:72:74:
         12:d9:23:d5:6d:53:78:7c:d2:24:09:41:e2:f5:bc:47:95:c0:
         59:7d:f9:cd:fe:49:3e:05:c9:af:2a:01:00:d9:5a:1a:09:d5:
         45:fc:72:98:ca:94:ab:a7:2d:95:d8:ff:67:4e:96:f1:74:7d:
         03:d6:2f:06:4a:02:98:6a:02:16:00:8f:62:4e:10:62:f2:02:
         b4:b6:8c:4f:83:66:83:27:a1:41:46:40:c4:97:8c:2e:62:a5:
         f2:ed:3e:bf:c9:c4:c0:29:13:4a:e4:a7:7c:5a:40:49:3d:ba:
         0f:18:99:67:a0:00:82:96:1d:dd:47:7c:50:ec:9b:68:87:1e:
         64:c5:73:4a:97:a9:7e:fc:b3:31:ef:cb:1e:7e:3e:14:1d:f3:
         85:5c:9f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 11:24:33 2026 by rpki-client