Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.mft
File:                     32GikiI62a68itgsKlZHX72XqDQ.mft (raw, json)
Hash identifier:          EpljeECsx/AXkpd1Yr0DqEWjI4hsekCjlv4Itoglzi0=
Subject key identifier:   8B:D2:8C:13:EC:B6:0B:FA:56:EC:D3:76:45:E4:12:FD:DC:1C:AB:0E
Authority key identifier: DF:61:A2:92:22:3A:D9:AE:BC:8A:D8:2C:2A:56:47:5F:BD:97:A8:34
Certificate issuer:       /CN=df61a292223ad9aebc8ad82c2a56475fbd97a834
Certificate serial:       01A08C7ADF0107029DDE0744660D87C04F52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/32GikiI62a68itgsKlZHX72XqDQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.mft
Manifest number:          10F7
Signing time:             Thu 10 Sep 2026 18:00:57 +0000
Manifest this update:     Thu 10 Sep 2026 18:00:57 +0000
Manifest next update:     Fri 11 Sep 2026 18:00:57 +0000
Files and hashes:         1: 32GikiI62a68itgsKlZHX72XqDQ.crl (hash: QmE7j/sU24ev53UPBPEgXNhyz2BlqAQD17iZ6EcbsqI=)
                          2: 3N8RjBOaHqysfsXcuS4moMiqHcA.roa (hash: iQaQoggeO3tLMHb/V/COJC4hr6BU8lu4S0DICLg++wE=)
                          3: QjEkoZ53NxBeCFxk_AcoQWsSsbc.roa (hash: F5UhzU9AKBT9nluGCkFBzLOXoDePYCyzrIATvKRbYOM=)
                          4: W_FOHMjyvQTaAri5A_zDlx2DY2k.roa (hash: njRnMCxu5gn2zsVJDrc4Nj/3Yt4VdpnpXJ0wh2X6tGk=)
                          5: fdth4-LheaAtkNOEJz6pHobfl_k.roa (hash: rTpg5aqyYW2RH+xhrSVpQRy6U3wJBueXqcjg7bGUFhI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/32GikiI62a68itgsKlZHX72XqDQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 18:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8c:7a:df:01:07:02:9d:de:07:44:66:0d:87:c0:4f:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df61a292223ad9aebc8ad82c2a56475fbd97a834
        Validity
            Not Before: Sep 10 18:00:57 2026 GMT
            Not After : Sep 11 18:00:57 2026 GMT
        Subject: CN=8bd28c13ecb60bfa56ecd37645e412fddc1cab0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:12:23:90:37:7e:33:4d:47:97:ff:ca:b7:14:
                    91:52:05:05:22:7f:ec:bf:b2:8b:71:02:a1:57:83:
                    3a:bc:a8:5b:d4:9a:ce:f4:da:4f:d1:76:c4:ec:05:
                    73:62:f5:fe:f5:b4:7a:d1:44:23:53:b9:66:54:09:
                    65:e0:02:26:5d:6e:c3:61:b8:86:a3:a9:e6:b3:26:
                    7b:32:c9:49:a4:cb:21:16:24:bb:79:fb:b9:3d:c8:
                    9a:77:e5:90:0e:c9:8e:dd:85:44:be:d1:d8:1b:0f:
                    7a:43:fb:6b:b6:b4:86:f9:13:17:1d:fd:68:3a:e5:
                    e7:29:15:00:94:f8:2b:7f:17:c3:fe:05:a0:b6:b3:
                    6c:54:ff:fa:fe:cd:3a:2d:be:3e:24:30:38:70:8f:
                    7c:85:6c:d1:59:47:7b:f2:6e:4e:e4:1c:a2:4c:42:
                    79:f5:3b:95:cb:95:26:e3:c3:7e:ff:d2:7e:5e:c3:
                    4c:3e:d2:26:61:eb:f9:98:b3:a3:1e:de:c9:a7:34:
                    30:20:20:78:6b:88:06:b8:4c:79:40:4c:89:52:14:
                    c3:c5:32:7d:32:e4:7f:87:b8:b1:07:af:75:67:e1:
                    31:52:a6:c0:81:f5:5d:94:76:65:e3:b9:91:bd:b1:
                    f4:31:38:ba:47:e5:67:01:dd:09:83:bb:43:4a:28:
                    fc:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:D2:8C:13:EC:B6:0B:FA:56:EC:D3:76:45:E4:12:FD:DC:1C:AB:0E
            X509v3 Authority Key Identifier:
                keyid:DF:61:A2:92:22:3A:D9:AE:BC:8A:D8:2C:2A:56:47:5F:BD:97:A8:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32GikiI62a68itgsKlZHX72XqDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:ce:9c:dc:4b:3c:5b:e0:25:88:f2:dd:f6:5e:3e:dd:f2:a4:
         74:47:a5:d4:05:c7:b1:78:59:50:af:bb:28:56:e1:d0:77:9e:
         30:46:8a:0c:03:7f:98:f0:c8:ac:ab:14:a8:df:44:4b:cd:c3:
         8e:be:58:bf:19:74:0e:60:a8:0d:55:c6:46:7b:b5:a4:6d:3b:
         cf:fc:26:05:fd:81:ac:39:b6:11:af:61:f8:62:59:b8:38:b8:
         90:bb:33:4b:33:a3:40:eb:e7:d9:0e:de:b5:65:39:c5:9c:84:
         42:25:b6:33:3a:f7:95:7e:94:62:c1:23:23:d9:94:9c:19:29:
         66:35:13:1e:07:28:c5:ff:e7:64:14:ea:12:6d:88:15:a4:a1:
         0a:8b:cb:94:f7:c4:6d:64:97:6b:e4:a5:f5:98:9f:cc:9c:5e:
         98:5a:b8:9e:ca:38:66:7a:bf:2d:0a:65:09:bf:59:e4:7b:c3:
         7f:09:b1:21:35:b1:81:10:a8:e7:9a:22:36:12:a1:6a:87:64:
         0f:ed:80:b4:bb:3b:21:b6:a7:4e:6a:d7:20:e3:f5:6f:62:63:
         cd:ef:14:39:6b:a2:3a:7d:41:57:72:44:db:e4:5f:1b:7e:2a:
         46:80:23:9a:c4:6e:0f:cf:7f:47:91:28:66:20:1f:98:17:ff:
         0a:a0:7c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 04:33:09 2026 by rpki-client