Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/AwkPrDzELxmXRVoS5kMGRjfGncM.mft
File:                     AwkPrDzELxmXRVoS5kMGRjfGncM.mft (raw, json)
Hash identifier:          YvKyTRi369u9iwLT8VwSCQ0Jsn8EEkWFjbQFgudIV+I=
Subject key identifier:   3F:1A:B6:0A:9A:44:21:8F:9C:12:0C:73:47:75:58:34:DA:4A:67:D3
Authority key identifier: 03:09:0F:AC:3C:C4:2F:19:97:45:5A:12:E6:43:06:46:37:C6:9D:C3
Certificate issuer:       /CN=03090fac3cc42f1997455a12e643064637c69dc3
Certificate serial:       01A0CB22A720CEBC878D257B2220452FA6D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AwkPrDzELxmXRVoS5kMGRjfGncM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/AwkPrDzELxmXRVoS5kMGRjfGncM.mft
Manifest number:          0FA5
Signing time:             Tue 22 Sep 2026 22:00:40 +0000
Manifest this update:     Tue 22 Sep 2026 22:00:40 +0000
Manifest next update:     Wed 23 Sep 2026 22:00:40 +0000
Files and hashes:         1: AwkPrDzELxmXRVoS5kMGRjfGncM.crl (hash: s1avLRr6WN7HdGJTRGO+yfGE9SXEeRsr4j5HKKNBzzk=)
                          2: OoyL6bjrpv7zlvqenv5ZgNB0gGE.roa (hash: Tm9hWa2oiDIAZqLLnYyHl8n9xWir4VblcdnhJ8WlcHo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/AwkPrDzELxmXRVoS5kMGRjfGncM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/AwkPrDzELxmXRVoS5kMGRjfGncM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AwkPrDzELxmXRVoS5kMGRjfGncM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cb:22:a7:20:ce:bc:87:8d:25:7b:22:20:45:2f:a6:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03090fac3cc42f1997455a12e643064637c69dc3
        Validity
            Not Before: Sep 22 22:00:40 2026 GMT
            Not After : Sep 23 22:00:40 2026 GMT
        Subject: CN=3f1ab60a9a44218f9c120c7347755834da4a67d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:52:13:bd:06:d8:bc:81:26:2a:73:9a:65:5b:
                    ca:b2:8e:5e:66:bf:51:fb:24:b2:63:a0:84:ce:84:
                    22:71:92:e9:6a:c6:e8:a8:49:1f:09:d6:51:9c:6a:
                    97:47:14:6f:55:db:34:c8:6a:38:6e:9d:d2:47:4a:
                    ae:42:39:48:93:7d:84:7c:e4:a5:73:c0:3c:1e:97:
                    37:1a:c9:ef:f0:90:f7:ee:ff:e7:da:9e:4e:9e:b5:
                    1d:5a:9e:c4:df:65:2c:60:bd:8c:7b:d1:71:c0:03:
                    7a:72:2c:2a:b9:63:f3:ce:13:ee:72:a9:67:d4:d4:
                    30:1d:0a:8a:cd:fe:26:4f:80:fe:20:77:1b:2a:dd:
                    e8:21:74:e9:d8:bd:56:39:4c:16:2d:85:52:38:2c:
                    8e:53:de:33:3d:a8:b4:3f:35:cf:07:d2:05:12:bd:
                    17:ba:a4:f1:af:4f:c0:15:e4:31:09:09:ff:34:55:
                    db:6a:d7:0c:46:fd:dd:12:33:d3:73:10:f2:72:99:
                    cb:d5:08:cf:a7:b6:f2:91:13:6a:8f:c0:42:06:d4:
                    e6:fc:8f:2a:e8:df:70:21:a4:b7:53:74:64:b9:36:
                    59:50:9f:cc:7f:09:86:9c:e4:2c:f5:84:c6:08:95:
                    4d:17:8e:08:07:aa:54:ba:8d:84:e8:70:17:8d:67:
                    b4:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:1A:B6:0A:9A:44:21:8F:9C:12:0C:73:47:75:58:34:DA:4A:67:D3
            X509v3 Authority Key Identifier:
                keyid:03:09:0F:AC:3C:C4:2F:19:97:45:5A:12:E6:43:06:46:37:C6:9D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AwkPrDzELxmXRVoS5kMGRjfGncM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/AwkPrDzELxmXRVoS5kMGRjfGncM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/AwkPrDzELxmXRVoS5kMGRjfGncM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:17:de:0b:27:f7:f1:e6:86:6f:99:e8:4b:a7:90:52:2e:f2:
         d4:66:6c:f6:7d:45:4d:b2:af:97:3a:37:8e:5d:db:92:9a:37:
         5d:b3:a5:fa:2e:88:c2:c2:d0:cd:30:f7:15:35:78:b7:3f:0d:
         35:c1:d5:d4:49:27:35:62:bb:68:ba:c8:e9:c4:bc:e5:80:c7:
         4a:78:9b:13:73:2b:58:cd:c9:b9:9b:96:64:32:cd:b2:b6:8d:
         a6:59:c3:c9:9c:94:e1:f1:38:d5:47:30:33:93:1f:12:79:ee:
         f4:42:d9:4c:b2:18:51:69:17:2f:03:84:7c:4f:c9:65:b5:4b:
         f6:45:ec:df:66:f4:41:19:b5:58:45:56:42:ba:11:36:02:a4:
         22:b9:9c:ad:34:c5:98:86:57:3c:df:8e:4f:1d:d2:8c:27:7d:
         ce:3d:63:cd:c4:e3:21:83:60:9b:2b:da:ff:71:5b:08:2e:4a:
         66:46:f2:48:69:40:25:f7:48:1f:91:01:de:88:5b:b5:ec:70:
         c8:9b:ff:aa:ac:bc:87:c3:47:ab:70:d0:98:e6:8f:3c:99:ad:
         61:d6:31:c5:75:9d:46:d4:91:b3:95:48:49:88:64:bf:61:2b:
         9c:5c:b2:73:5a:94:42:1b:84:e9:4a:ac:58:38:a8:e0:07:3a:
         45:5a:ce:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:36:47 2026 by rpki-client