Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.mft
File:                     C_z94Kdy-nw-nRn6cHf3AmvXcbI.mft (raw, json)
Hash identifier:          JY0NI7b+fm6VW2P0+Y5ZO34ZYyOS2TcU8uesrydJFj0=
Subject key identifier:   A7:7D:3F:21:4B:B0:B6:1D:67:D6:F6:0C:3D:A0:4B:DD:40:01:14:55
Authority key identifier: 0B:FC:FD:E0:A7:72:FA:7C:3E:9D:19:FA:70:77:F7:02:6B:D7:71:B2
Certificate issuer:       /CN=0bfcfde0a772fa7c3e9d19fa7077f7026bd771b2
Certificate serial:       01A089E7BCB9C4EF343181366C27316BE30C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C_z94Kdy-nw-nRn6cHf3AmvXcbI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.mft
Manifest number:          0522
Signing time:             Thu 10 Sep 2026 06:01:00 +0000
Manifest this update:     Thu 10 Sep 2026 06:01:00 +0000
Manifest next update:     Fri 11 Sep 2026 06:01:00 +0000
Files and hashes:         1: C_z94Kdy-nw-nRn6cHf3AmvXcbI.crl (hash: UTmV05N6biyDODHrwmRPLvhgC0AhSIZZVHbetFVjvIs=)
                          2: GTbIIUIo-dUPXDDNc0IDT6FB8t4.roa (hash: 8J7E94r3VGtcxGoE3/Ht7FS8OoqmAYFunNkzFd6kzqw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C_z94Kdy-nw-nRn6cHf3AmvXcbI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 06:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:89:e7:bc:b9:c4:ef:34:31:81:36:6c:27:31:6b:e3:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bfcfde0a772fa7c3e9d19fa7077f7026bd771b2
        Validity
            Not Before: Sep 10 06:01:00 2026 GMT
            Not After : Sep 11 06:01:00 2026 GMT
        Subject: CN=a77d3f214bb0b61d67d6f60c3da04bdd40011455
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:4b:14:c9:7f:41:99:1d:bc:76:d1:57:48:dc:
                    90:0b:97:83:7c:6f:5b:d1:fa:81:18:33:87:1b:ca:
                    84:c0:6c:9f:93:da:65:97:38:e6:4e:45:c2:0b:35:
                    b4:a3:bb:16:66:50:d4:53:32:c7:5d:70:fb:7a:49:
                    8a:0e:16:bf:43:94:47:6f:6e:1a:87:c7:2f:9c:14:
                    c4:fb:d4:0d:87:e2:13:dc:15:88:46:e3:08:7b:f3:
                    00:38:5a:c4:5a:4a:ae:c2:cc:ba:4c:fc:40:01:43:
                    6c:47:9f:bf:fd:b4:5a:2e:b1:bc:fa:e3:9a:82:29:
                    5c:dd:0c:a8:b5:21:b3:b5:1a:b0:bc:0e:7a:11:c5:
                    fd:71:3b:78:c5:23:80:6f:10:aa:a6:27:f9:d0:d0:
                    7a:f5:b8:1f:34:87:f8:44:8b:c2:bf:32:0f:35:b3:
                    2a:6f:40:cb:dd:6a:5c:f6:36:53:90:76:10:ae:23:
                    d7:ff:6d:6c:d8:c3:90:9e:0d:85:6f:3f:b3:bc:16:
                    f0:31:d9:e0:7b:57:56:67:03:36:53:f3:48:b9:84:
                    33:5c:22:85:00:39:31:41:86:09:3d:3e:06:8b:09:
                    ab:bc:c9:ff:e4:eb:7f:08:b3:64:ca:28:5a:8c:e4:
                    df:7f:3e:ca:e8:6b:a8:cd:54:45:8f:7e:49:f0:f1:
                    cd:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:7D:3F:21:4B:B0:B6:1D:67:D6:F6:0C:3D:A0:4B:DD:40:01:14:55
            X509v3 Authority Key Identifier:
                keyid:0B:FC:FD:E0:A7:72:FA:7C:3E:9D:19:FA:70:77:F7:02:6B:D7:71:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_z94Kdy-nw-nRn6cHf3AmvXcbI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:d9:44:3f:b8:27:fc:35:ed:4b:14:d8:1e:d2:7c:3f:10:1b:
         f2:6f:bd:8d:cd:75:e9:e3:24:cf:99:8a:ed:7e:8c:6e:7c:51:
         e7:9d:08:3d:b2:c2:79:d4:b5:13:1b:fb:60:5b:a1:5f:4d:b9:
         fc:37:32:25:57:3e:4d:f3:7b:a7:7c:59:af:6c:85:2e:ee:d7:
         c1:8b:2c:22:42:c3:d4:05:f8:9c:50:da:3e:f0:5a:17:6e:48:
         c4:b6:25:87:ee:68:82:d8:09:5e:0b:ea:64:06:1d:91:96:45:
         1e:d1:f3:25:c3:82:57:10:4d:cc:2e:33:f1:87:6b:6c:38:d9:
         21:4b:95:97:77:c1:79:43:0f:cb:c1:a0:de:bd:70:d5:a4:f7:
         a7:ba:8f:79:94:15:a3:c0:9e:05:cd:e6:ea:fe:ac:09:bf:c3:
         51:c4:73:44:26:69:1d:df:cd:db:1f:c0:bc:c6:63:cb:dd:13:
         02:42:df:35:41:0e:66:be:c6:81:30:d1:e8:e1:12:08:56:14:
         70:b0:e5:e3:1e:38:44:3d:2d:8d:fd:a4:9e:e1:84:5a:8e:94:
         34:0b:38:f0:82:40:f2:12:c9:8d:f5:09:2e:de:e8:13:7b:9e:
         98:4f:d7:ff:62:f1:a4:cc:be:b0:15:96:85:df:11:6a:82:6c:
         91:6e:db:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:14:22 2026 by rpki-client