Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/9e1e78-df24-4fc6-b077-39fe723ef730/1/0j94Nzy5ZlTQMGBkaS78SudxXxc.mft
File:                     0j94Nzy5ZlTQMGBkaS78SudxXxc.mft (raw, json)
Hash identifier:          R1jpZ1p1HG1fZMwr1Sw0XwDOQ9S46fdWrFTGnd/KHxI=
Subject key identifier:   8C:C4:5E:03:53:4B:75:2B:F4:57:34:DA:C3:77:8C:AC:87:88:D4:7D
Authority key identifier: D2:3F:78:37:3C:B9:66:54:D0:30:60:64:69:2E:FC:4A:E7:71:5F:17
Certificate issuer:       /CN=d23f78373cb96654d0306064692efc4ae7715f17
Certificate serial:       01A0B61B98E6A5171590DC046E94A45B1491
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0j94Nzy5ZlTQMGBkaS78SudxXxc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/9e1e78-df24-4fc6-b077-39fe723ef730/1/0j94Nzy5ZlTQMGBkaS78SudxXxc.mft
Manifest number:          0EEE
Signing time:             Fri 18 Sep 2026 20:00:56 +0000
Manifest this update:     Fri 18 Sep 2026 20:00:56 +0000
Manifest next update:     Sat 19 Sep 2026 20:00:56 +0000
Files and hashes:         1: 0j94Nzy5ZlTQMGBkaS78SudxXxc.crl (hash: g9yfoHm4oISEDhlTHjfh0vY/eJa74wgp2o3QxYn9T+0=)
                          2: 2k2efwLza4ZnO03YIidqVEqe8vI.roa (hash: B5AmAsDvRZimr7FECRkl2IW5OMCrTl16t1iaHWJsJvk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/9e1e78-df24-4fc6-b077-39fe723ef730/1/0j94Nzy5ZlTQMGBkaS78SudxXxc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/9e1e78-df24-4fc6-b077-39fe723ef730/1/0j94Nzy5ZlTQMGBkaS78SudxXxc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0j94Nzy5ZlTQMGBkaS78SudxXxc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Sep 2026 16:24:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:b6:1b:98:e6:a5:17:15:90:dc:04:6e:94:a4:5b:14:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d23f78373cb96654d0306064692efc4ae7715f17
        Validity
            Not Before: Sep 18 20:00:56 2026 GMT
            Not After : Sep 19 20:00:56 2026 GMT
        Subject: CN=8cc45e03534b752bf45734dac3778cac8788d47d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:5b:3e:10:1f:8d:52:f0:01:24:cc:b6:5f:a4:
                    be:4a:10:7d:56:2b:97:82:b0:00:90:ac:b7:bf:65:
                    ea:21:ee:a5:8f:b8:56:56:80:40:3b:62:8a:75:9e:
                    aa:a8:44:bf:0d:49:d9:1b:09:25:fd:90:4b:88:b9:
                    dc:0f:96:17:7a:36:f5:b1:94:04:63:b1:82:28:50:
                    84:5b:b1:d1:e1:e4:4c:b4:ed:aa:8e:25:e5:17:21:
                    2f:cb:bf:f9:ae:78:f5:b9:53:ad:cc:16:bb:24:39:
                    b7:14:2a:e5:c5:b7:c8:bf:ac:50:19:58:20:47:d9:
                    04:42:80:70:6b:22:95:d8:d4:05:d4:86:d7:59:fc:
                    ff:aa:12:c7:7c:68:18:c2:2d:3a:9b:12:89:67:30:
                    72:7d:5a:f1:ba:07:2d:94:3e:41:a4:22:aa:f2:b5:
                    36:4b:c0:ea:1d:a2:cf:d5:9b:b3:bc:dd:c1:4c:b5:
                    e3:98:48:d1:c8:4f:d5:f0:c3:e7:0b:d5:8f:4e:34:
                    66:ec:dd:7f:df:f9:93:09:e8:07:5e:90:e6:11:f0:
                    f1:fe:31:64:c4:35:72:b4:95:f2:7c:ab:c4:c9:ab:
                    51:12:37:b5:2e:33:ac:4f:86:9a:46:4a:ab:88:e0:
                    f6:4f:d2:51:b8:da:b9:c8:48:9a:c1:95:6f:4a:da:
                    02:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:C4:5E:03:53:4B:75:2B:F4:57:34:DA:C3:77:8C:AC:87:88:D4:7D
            X509v3 Authority Key Identifier:
                keyid:D2:3F:78:37:3C:B9:66:54:D0:30:60:64:69:2E:FC:4A:E7:71:5F:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0j94Nzy5ZlTQMGBkaS78SudxXxc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9e1e78-df24-4fc6-b077-39fe723ef730/1/0j94Nzy5ZlTQMGBkaS78SudxXxc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9e1e78-df24-4fc6-b077-39fe723ef730/1/0j94Nzy5ZlTQMGBkaS78SudxXxc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:af:50:78:fc:dc:33:47:ea:23:22:f8:3b:f6:23:d8:be:e0:
         e9:7f:dd:f3:5f:a1:c1:4a:55:e0:05:ba:70:00:fa:3d:46:f3:
         c2:8f:16:11:83:77:07:d6:92:92:67:96:4d:4a:5c:59:6a:e8:
         2d:5f:e8:77:dd:e7:ae:31:2b:9a:8f:24:75:b8:b3:33:4f:30:
         ae:2d:eb:16:30:be:74:42:1c:13:5c:72:bd:30:c3:46:69:20:
         0a:6a:5d:71:9d:a1:0d:4e:89:0c:38:00:3e:2d:b1:95:5d:c9:
         73:10:ac:c1:b1:08:b5:d3:7d:45:c9:fb:47:32:60:33:c2:89:
         db:73:09:18:4e:3a:d3:a0:8b:57:36:a7:3e:d9:23:a2:2f:aa:
         32:10:83:88:ad:29:c7:de:ee:13:26:97:43:92:09:d4:28:27:
         a9:85:1d:c7:6c:b9:3f:93:02:04:a4:2d:6c:62:f3:4a:03:88:
         7f:f3:bb:1a:13:d8:e7:63:45:87:db:65:03:ea:3a:e1:2e:8e:
         2e:f7:09:a5:89:4e:e6:a2:90:8d:df:ef:53:ea:eb:56:e5:4b:
         e4:ca:83:1a:69:e8:c1:91:f3:8b:7d:02:88:49:a8:0a:75:e7:
         3d:d3:2a:5a:09:ec:73:6f:a8:77:63:e8:3d:76:0b:11:a1:b6:
         89:95:f9:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 00:11:50 2026 by rpki-client