Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.mft
File:                     0627YSN4H_DjVBNEaseTHP9KSQ0.mft (raw, json)
Hash identifier:          /sNF4iGZ175UFMGsIp0jxBSriryCmAyq5zUzi1+dO1E=
Subject key identifier:   B3:58:1A:BE:04:D9:18:4F:81:38:30:E5:14:9F:CB:CA:20:1B:4E:A3
Authority key identifier: D3:AD:BB:61:23:78:1F:F0:E3:54:13:44:6A:C7:93:1C:FF:4A:49:0D
Certificate issuer:       /CN=d3adbb6123781ff0e35413446ac7931cff4a490d
Certificate serial:       01A11A50B2D0FAEB74979345DC6591B883F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0627YSN4H_DjVBNEaseTHP9KSQ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.mft
Manifest number:          1A93
Signing time:             Thu 08 Oct 2026 07:00:58 +0000
Manifest this update:     Thu 08 Oct 2026 07:00:58 +0000
Manifest next update:     Fri 09 Oct 2026 07:00:58 +0000
Files and hashes:         1: 0627YSN4H_DjVBNEaseTHP9KSQ0.crl (hash: ZKbP/NDYZgmvKaCNXtr4vqwIXIFIIVEficiA28scpA8=)
                          2: uVyWlFLKciqrsAXXjZQjx39QcNU.roa (hash: jEDtg9ux39nelJUaz7u7+ZJxoa/PnUqwfRMuyqZC6j0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0627YSN4H_DjVBNEaseTHP9KSQ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 07:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:1a:50:b2:d0:fa:eb:74:97:93:45:dc:65:91:b8:83:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3adbb6123781ff0e35413446ac7931cff4a490d
        Validity
            Not Before: Oct  8 07:00:58 2026 GMT
            Not After : Oct  9 07:00:58 2026 GMT
        Subject: CN=b3581abe04d9184f813830e5149fcbca201b4ea3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:6a:3e:74:e8:24:45:e6:fa:12:0f:1c:5f:ca:
                    3b:f5:0e:00:54:7d:8d:77:7e:df:0c:41:62:f2:c6:
                    c2:70:47:d5:af:6b:eb:2b:c5:8b:ef:52:d3:e2:46:
                    1e:3e:49:f7:90:60:b5:09:e1:95:b7:f3:72:dc:5e:
                    b3:a9:e4:68:72:be:19:f8:c1:95:2a:ee:e6:fd:8c:
                    be:19:86:f9:a1:74:0b:d9:0f:69:e5:f7:f6:ec:cc:
                    22:b0:d4:87:06:76:f8:78:f4:c3:23:98:06:eb:23:
                    dc:71:31:52:52:f1:8e:8d:4a:d6:ab:8d:1c:af:b5:
                    47:7b:7e:b7:7a:23:d0:71:3e:11:a9:fd:c8:bf:53:
                    a1:4e:d1:38:bd:aa:e6:63:63:4f:6f:3f:e6:9b:58:
                    08:4e:4a:00:86:1c:1a:9e:f4:03:68:52:d1:08:62:
                    18:c4:34:d1:ae:15:82:f3:0e:71:c2:35:81:1c:23:
                    b4:98:5e:cd:3f:5e:e5:c8:d3:94:2f:8a:86:d6:41:
                    cc:c6:af:0a:0f:96:a2:89:0e:90:07:ba:5b:ab:eb:
                    1c:c4:7b:1b:6e:14:57:09:34:f0:96:94:8f:d8:ae:
                    d8:13:53:43:d7:d3:1c:06:81:64:97:9a:58:bb:cb:
                    65:65:65:b9:65:21:0e:a7:37:1b:1a:5b:55:a4:f8:
                    24:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:58:1A:BE:04:D9:18:4F:81:38:30:E5:14:9F:CB:CA:20:1B:4E:A3
            X509v3 Authority Key Identifier:
                keyid:D3:AD:BB:61:23:78:1F:F0:E3:54:13:44:6A:C7:93:1C:FF:4A:49:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0627YSN4H_DjVBNEaseTHP9KSQ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:53:47:79:79:96:73:c6:d0:d6:eb:82:18:b5:43:c0:0f:f2:
         5b:27:c9:71:b1:ba:82:1d:d0:9e:f3:1b:b4:c5:ca:02:0e:cf:
         c3:35:43:c5:df:ff:96:4a:65:58:8d:70:a0:88:aa:e0:22:b3:
         35:89:0f:bb:8d:ab:23:cd:c2:60:f4:b1:ef:b4:09:c9:69:fe:
         d9:4a:2b:53:2b:15:07:9b:02:bd:34:b7:68:da:62:d3:1e:21:
         a5:27:c5:5f:fa:e7:f3:43:0b:ec:23:ee:ec:45:ca:7c:03:26:
         46:8c:e3:fc:54:b5:77:b7:6a:33:fc:60:f2:b8:65:d4:f4:11:
         04:1f:52:98:f2:e2:6c:56:f8:ed:21:59:91:cd:1d:8e:1f:ff:
         40:98:ca:62:d8:68:1f:83:9d:d6:e7:0c:b9:21:82:64:61:f3:
         44:74:58:18:e6:ab:d4:61:4d:df:06:cb:f9:86:84:7c:d8:81:
         d6:d9:aa:df:37:8b:d6:f2:bc:16:88:c5:47:84:5f:05:8e:91:
         05:02:24:52:6b:78:24:8f:4c:ff:ea:2e:0e:d5:e3:a0:1d:74:
         03:40:0c:03:09:14:6b:77:97:b5:c9:3d:1d:dd:a1:d4:06:5e:
         40:4a:fb:e2:6f:2c:02:6b:ec:61:2c:fa:73:03:11:99:05:11:
         1f:a1:9e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 14:05:29 2026 by rpki-client