Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft
File:                     RDtnudTJnHJeNX2BdPt-AkoVAuI.mft (raw, json)
Hash identifier:          xYGL3SnbFFl82IYDq5gC/1OB0nAfCoj2rns8OFfwi1Y=
Subject key identifier:   B3:1C:D6:D9:CD:B1:44:82:76:83:61:CA:53:26:0F:E2:0F:20:A9:B4
Authority key identifier: 44:3B:67:B9:D4:C9:9C:72:5E:35:7D:81:74:FB:7E:02:4A:15:02:E2
Certificate issuer:       /CN=443b67b9d4c99c725e357d8174fb7e024a1502e2
Certificate serial:       01A106C9DEA8A399DAA213D1C6CD25228508
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RDtnudTJnHJeNX2BdPt-AkoVAuI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft
Manifest number:          0B13
Signing time:             Sun 04 Oct 2026 12:00:55 +0000
Manifest this update:     Sun 04 Oct 2026 12:00:55 +0000
Manifest next update:     Mon 05 Oct 2026 12:00:55 +0000
Files and hashes:         1: RDtnudTJnHJeNX2BdPt-AkoVAuI.crl (hash: dRegBCgaPVKnrHE3ssd0nUoG5oJVLWiBjCejaH/OGBc=)
                          2: nlcpl9ulhW9UJP1m-NfebbvM-08.roa (hash: IBQWkMt/VVWxVDIuSxk0QRhZsHES5xi9v/NlOWNnx9k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RDtnudTJnHJeNX2BdPt-AkoVAuI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 12:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:06:c9:de:a8:a3:99:da:a2:13:d1:c6:cd:25:22:85:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=443b67b9d4c99c725e357d8174fb7e024a1502e2
        Validity
            Not Before: Oct  4 12:00:55 2026 GMT
            Not After : Oct  5 12:00:55 2026 GMT
        Subject: CN=b31cd6d9cdb14482768361ca53260fe20f20a9b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:0e:3e:fd:c3:d0:cb:80:00:4b:6d:5c:30:a4:
                    88:98:7a:85:63:b4:a7:35:4b:ba:a4:d0:7c:df:7e:
                    a3:8e:75:b7:c6:b2:ba:1a:18:bd:79:87:40:67:6c:
                    94:76:05:e7:18:e0:0b:02:ca:95:71:cb:4e:9d:99:
                    e1:30:15:32:0f:cb:0d:88:26:50:36:4a:f8:86:a3:
                    88:1d:06:d6:52:2e:b5:8b:c7:ab:21:d6:07:78:df:
                    80:6f:ff:2f:8e:cf:9d:d1:4d:8e:1e:0e:bc:d0:77:
                    c2:5c:78:63:e3:1a:24:d8:94:74:c1:54:56:2f:aa:
                    5b:2a:0e:0f:bc:3f:28:81:7e:87:4e:f0:51:e7:67:
                    7c:72:92:6e:61:44:a4:cf:04:9e:bb:ac:0d:fd:8c:
                    97:af:b3:b6:ed:77:1d:ab:82:08:a1:3d:98:17:85:
                    b8:99:65:e7:bb:bd:b7:a9:a6:b1:2b:f1:cd:2a:f3:
                    f2:23:e8:02:5c:51:d2:29:f9:5d:2d:57:7b:24:54:
                    2a:4c:11:2b:50:02:dd:dc:ad:9e:29:cd:a2:5a:a8:
                    b1:f9:ee:95:d7:9e:e0:9f:79:20:46:ba:12:c5:b6:
                    a7:b2:fd:00:2a:3f:07:30:b2:11:7d:e3:67:79:f1:
                    2f:c3:5c:eb:5f:66:41:dd:68:2c:28:87:7b:80:b7:
                    01:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:1C:D6:D9:CD:B1:44:82:76:83:61:CA:53:26:0F:E2:0F:20:A9:B4
            X509v3 Authority Key Identifier:
                keyid:44:3B:67:B9:D4:C9:9C:72:5E:35:7D:81:74:FB:7E:02:4A:15:02:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RDtnudTJnHJeNX2BdPt-AkoVAuI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:30:61:16:05:2e:a1:a8:4c:98:ea:60:33:83:a2:69:d8:4a:
         84:6d:93:c0:38:8c:45:1f:14:90:d0:a4:2f:bb:34:58:f2:ca:
         a2:7d:64:d6:bb:4a:66:52:8e:d4:03:38:20:15:7e:0e:90:6a:
         a6:2e:2d:5d:b8:3b:6c:83:73:f6:34:a1:e7:be:b7:67:d0:68:
         70:0e:43:03:a0:47:4a:ec:92:40:ff:70:42:58:9e:14:44:92:
         a5:2f:0d:fd:3d:63:08:1a:31:b9:97:68:b9:e2:02:09:cf:6c:
         be:a3:13:b3:98:be:c0:4e:1b:fc:64:9b:4c:7d:50:26:62:e7:
         ce:77:1d:8e:01:9a:61:1e:80:da:08:ed:b9:e0:74:e4:c3:16:
         8c:a2:f7:f1:bf:60:10:f0:ae:94:59:25:44:55:ad:73:27:40:
         a2:dd:40:f6:24:79:cd:84:d5:28:70:07:03:4e:27:53:c1:52:
         f0:57:cf:59:ed:22:e9:bd:ca:5f:4a:0d:a5:5e:60:1f:09:c6:
         ab:92:8f:d6:74:67:ff:61:16:d5:dd:23:69:9a:3c:19:99:d0:
         ed:fe:4b:09:67:9b:d4:e6:82:ad:39:5b:3c:7d:44:dc:09:5d:
         13:c4:ff:28:81:2a:0b:e4:78:a0:6a:b6:45:71:ee:2c:c2:2e:
         67:d3:7b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 20:01:00 2026 by rpki-client