Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/9c0a69-e44c-48da-b763-37cfd4a64ff1/1/meoF_mActoAa-DeT4GP3njlA8DA.mft
File:                     meoF_mActoAa-DeT4GP3njlA8DA.mft (raw, json)
Hash identifier:          2HirqJYH2zIAnCxtCYIPJHMRx8VQo7V6n2bg34SsfFg=
Subject key identifier:   B4:3A:F8:90:FD:45:4F:71:D3:42:38:3E:F7:FC:75:00:7F:AE:33:24
Authority key identifier: 99:EA:05:FE:60:1C:B6:80:1A:F8:37:93:E0:63:F7:9E:39:40:F0:30
Certificate issuer:       /CN=99ea05fe601cb6801af83793e063f79e3940f030
Certificate serial:       01A0DB71CBA1D6BE19F9A768C6F9B78EA62E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/meoF_mActoAa-DeT4GP3njlA8DA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/9c0a69-e44c-48da-b763-37cfd4a64ff1/1/meoF_mActoAa-DeT4GP3njlA8DA.mft
Manifest number:          0873
Signing time:             Sat 26 Sep 2026 02:01:03 +0000
Manifest this update:     Sat 26 Sep 2026 02:01:03 +0000
Manifest next update:     Sun 27 Sep 2026 02:01:03 +0000
Files and hashes:         1: meoF_mActoAa-DeT4GP3njlA8DA.crl (hash: Cnltt8HCB+n4p7nJPt+DFMa/bf0Q0d09GAolNHzRWN4=)
                          2: yALd4Mt6HE3dj2c5xLfJcrGYWWo.roa (hash: 1lKxwhNATkAVqpc77ycYRa96oFT/1GMPUZCkZLj7654=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/9c0a69-e44c-48da-b763-37cfd4a64ff1/1/meoF_mActoAa-DeT4GP3njlA8DA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/9c0a69-e44c-48da-b763-37cfd4a64ff1/1/meoF_mActoAa-DeT4GP3njlA8DA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/meoF_mActoAa-DeT4GP3njlA8DA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:db:71:cb:a1:d6:be:19:f9:a7:68:c6:f9:b7:8e:a6:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99ea05fe601cb6801af83793e063f79e3940f030
        Validity
            Not Before: Sep 26 02:01:03 2026 GMT
            Not After : Sep 27 02:01:03 2026 GMT
        Subject: CN=b43af890fd454f71d342383ef7fc75007fae3324
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:17:e6:40:0d:55:c5:93:21:d5:33:a3:7f:4f:
                    b1:7c:d1:7a:63:64:a4:27:47:3c:f6:04:25:c4:6d:
                    3c:f6:84:4e:72:4f:0f:9a:29:7a:2f:91:bc:07:4e:
                    8b:d2:cd:ee:f4:63:0d:39:c7:a9:c5:f5:f4:a7:0c:
                    0c:2d:43:a9:eb:4d:b5:74:d8:8c:0f:8d:21:fb:2a:
                    8a:01:37:cf:10:a0:bf:a9:ba:4f:89:9f:39:d0:77:
                    a2:e0:c6:ba:c3:24:b3:fb:d7:7a:97:0d:67:3c:59:
                    92:28:a6:8a:b9:bd:d8:32:3b:c7:ee:81:6d:1e:50:
                    d0:21:90:f4:d2:90:d6:76:a5:79:10:22:85:4b:60:
                    55:a4:48:7e:9c:22:18:be:9d:1d:9f:d8:bb:fc:1c:
                    b4:5b:7e:40:6c:ec:58:01:c8:66:04:37:51:6a:4d:
                    3c:6f:cc:41:22:46:5c:09:da:1c:66:21:37:73:60:
                    1b:ae:19:f0:19:13:71:16:f1:f6:f4:01:20:af:7b:
                    01:93:85:d6:d2:81:21:42:24:dd:2f:82:97:a5:0a:
                    8d:16:0d:00:53:3b:02:03:b6:3b:57:17:9e:89:46:
                    e6:a5:29:31:4f:30:43:6e:d6:5a:69:ac:b2:71:1d:
                    87:e2:33:4a:61:6d:8e:6e:b0:21:bf:c4:82:09:d3:
                    ce:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:3A:F8:90:FD:45:4F:71:D3:42:38:3E:F7:FC:75:00:7F:AE:33:24
            X509v3 Authority Key Identifier:
                keyid:99:EA:05:FE:60:1C:B6:80:1A:F8:37:93:E0:63:F7:9E:39:40:F0:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/meoF_mActoAa-DeT4GP3njlA8DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9c0a69-e44c-48da-b763-37cfd4a64ff1/1/meoF_mActoAa-DeT4GP3njlA8DA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9c0a69-e44c-48da-b763-37cfd4a64ff1/1/meoF_mActoAa-DeT4GP3njlA8DA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:ce:e6:82:3a:d8:99:32:1e:28:a1:09:40:ca:c6:32:7d:27:
         5b:02:51:c4:64:e7:de:13:d3:ac:55:7b:89:07:de:c8:a9:45:
         3d:04:6a:ec:e6:58:40:72:74:4b:de:6b:18:03:6a:89:cb:b1:
         52:7b:af:15:2d:7d:8e:9d:f5:97:40:8d:01:0c:f4:2d:1f:3c:
         63:9f:af:df:73:d7:dc:1d:3b:77:4e:66:9d:25:88:50:39:ee:
         c3:26:64:52:c0:92:66:45:bc:3a:c8:d6:b2:b5:05:c1:18:9b:
         f1:c3:64:c3:0d:71:12:c0:8a:af:40:a9:20:3d:d9:bd:64:be:
         67:f0:e8:9e:09:ce:85:f6:d8:ec:e0:f3:a1:0b:2e:37:ae:0d:
         43:77:87:3e:ac:69:a9:a7:98:1a:2c:41:08:c9:40:89:fc:96:
         04:1e:db:c3:a2:41:3f:ff:15:75:79:a4:0f:f9:f6:0c:be:c0:
         7c:42:18:de:15:53:50:94:0b:87:6b:2b:85:33:6b:c3:b5:8e:
         d5:8e:04:85:76:86:e5:5e:9e:a0:e4:0a:4e:bf:ed:76:40:51:
         9e:bc:7e:17:32:9c:0a:c8:f4:3e:45:ce:f0:91:87:a1:92:b9:
         ed:fd:8d:df:d0:35:74:85:10:a7:6e:42:e3:5e:29:84:7e:70:
         d9:e3:53:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:29:46 2026 by rpki-client