Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.mft
File:                     DDY1dImAYOG2pIysPx8ryzbIbU4.mft (raw, json)
Hash identifier:          uoHkpV5LQf+VGOjSTPo435QZ+gbUtXcSEU0wM6Yn/x4=
Subject key identifier:   18:9F:AE:D9:E4:ED:61:8E:9E:C0:1C:E0:17:96:61:B0:3B:B9:3A:B8
Authority key identifier: 0C:36:35:74:89:80:60:E1:B6:A4:8C:AC:3F:1F:2B:CB:36:C8:6D:4E
Certificate issuer:       /CN=0c363574898060e1b6a48cac3f1f2bcb36c86d4e
Certificate serial:       01A0ED78EB61C1F4036DF0486C5C6A33553F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DDY1dImAYOG2pIysPx8ryzbIbU4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.mft
Manifest number:          1A7B
Signing time:             Tue 29 Sep 2026 14:01:59 +0000
Manifest this update:     Tue 29 Sep 2026 14:01:59 +0000
Manifest next update:     Wed 30 Sep 2026 14:01:59 +0000
Files and hashes:         1: DDY1dImAYOG2pIysPx8ryzbIbU4.crl (hash: RBgvnGn6/V/9o5P016q5gkALNOCIf4+hd4kcaHinbFc=)
                          2: L-I_vi73nF4X50y77Nj4pc6tO3Q.roa (hash: JkXJproHbfGeicYSovdpj1lTU8shuNCsjUwqjSmsDCk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DDY1dImAYOG2pIysPx8ryzbIbU4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:01:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ed:78:eb:61:c1:f4:03:6d:f0:48:6c:5c:6a:33:55:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c363574898060e1b6a48cac3f1f2bcb36c86d4e
        Validity
            Not Before: Sep 29 14:01:59 2026 GMT
            Not After : Sep 30 14:01:59 2026 GMT
        Subject: CN=189faed9e4ed618e9ec01ce0179661b03bb93ab8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a7:c1:91:a2:af:3a:bc:2e:45:9c:e0:eb:75:
                    9f:f9:87:5f:b4:0c:07:30:0b:a6:88:d8:a5:2a:c0:
                    d9:e2:60:8a:1e:df:a5:02:52:1d:27:f8:50:e8:32:
                    a2:a8:98:98:f6:5d:ba:d8:c7:3e:53:f6:c4:10:28:
                    9b:2b:65:d6:da:d6:a8:9f:92:5d:3f:3f:3b:6d:31:
                    22:ba:12:ce:6b:94:85:88:82:ae:12:6a:1d:40:04:
                    f8:02:0b:5c:38:fc:9a:b0:07:7e:a3:a6:1a:28:39:
                    d8:6f:02:da:5a:38:9e:65:5a:d2:dd:1c:f7:02:d4:
                    20:d8:d4:48:27:30:c4:0d:18:1b:33:15:c9:c4:67:
                    7b:fe:4b:93:28:5b:7e:e7:a2:6e:4c:1a:1d:43:0a:
                    8b:b6:0a:94:7b:ae:5e:8a:79:e8:82:e0:c5:80:9c:
                    0f:82:ef:0b:7e:2a:5a:22:c4:b9:30:17:0d:d4:8e:
                    27:0b:73:f2:e7:23:c6:18:af:61:17:86:d9:3c:49:
                    29:07:fa:27:b3:4c:86:5e:6a:20:c2:a9:c1:a4:6d:
                    fc:d9:05:ae:79:9d:d2:c4:5e:cd:61:28:e7:29:81:
                    38:53:38:e5:9f:c8:b0:5d:12:1b:c8:f6:34:de:75:
                    ef:4e:91:84:f8:92:91:1f:c3:0d:eb:7b:8a:f0:c8:
                    22:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:9F:AE:D9:E4:ED:61:8E:9E:C0:1C:E0:17:96:61:B0:3B:B9:3A:B8
            X509v3 Authority Key Identifier:
                keyid:0C:36:35:74:89:80:60:E1:B6:A4:8C:AC:3F:1F:2B:CB:36:C8:6D:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDY1dImAYOG2pIysPx8ryzbIbU4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:b0:3f:7f:13:00:47:0e:de:99:0a:84:54:f8:3e:58:aa:2e:
         8c:fc:ab:5c:34:ee:7e:75:f1:c0:f5:a0:fd:51:2b:b4:27:c1:
         c6:27:21:c1:65:ee:57:89:06:53:1b:bd:b7:bb:a7:c2:70:a5:
         17:55:3c:4f:5e:e3:16:4d:6d:e1:68:5b:e1:b1:3a:d8:af:e1:
         3d:eb:b5:6d:e4:19:1a:0b:a8:56:67:0d:9a:d9:9b:e6:36:69:
         eb:67:34:92:d9:cb:63:95:95:c3:66:f7:4c:87:b9:ec:58:5d:
         83:8f:ac:1a:db:b6:fc:14:50:81:e3:88:3a:e2:6a:7d:46:a8:
         fc:81:fc:6e:16:24:f8:4c:52:b0:06:94:d9:59:6e:cb:63:5d:
         ea:22:1d:8a:f4:2f:b6:d5:38:86:dc:9a:02:6c:67:f3:08:0b:
         ad:fb:81:85:8e:85:71:89:fc:21:d3:cf:62:7f:3f:1e:d1:12:
         be:dc:54:64:3c:8a:56:b1:ba:96:64:91:84:77:d9:f5:97:d3:
         84:86:84:d8:f4:5b:78:72:8d:fd:0d:bf:14:02:88:57:bd:cc:
         6e:66:de:8a:14:c8:e4:bd:b6:08:1a:0e:f0:1b:f2:8d:8f:f8:
         66:57:3b:70:2f:fc:49:60:78:e3:96:c3:77:83:58:d0:8c:cc:
         b0:db:cd:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 00:56:44 2026 by rpki-client