Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.mft
File:                     CAdgG8REIsjSOjzXK_6hu_KgVjo.mft (raw, json)
Hash identifier:          beN29EIav38A10AX6CTmfkL8meWQTHt/7XApLtHBozQ=
Subject key identifier:   E9:AC:36:A4:54:AC:47:0D:E8:97:BC:B6:CE:C5:C2:57:19:FB:1D:58
Authority key identifier: 08:07:60:1B:C4:44:22:C8:D2:3A:3C:D7:2B:FE:A1:BB:F2:A0:56:3A
Certificate issuer:       /CN=0807601bc44422c8d23a3cd72bfea1bbf2a0563a
Certificate serial:       01A0CB2249A1379D59FCD4092139B077A22C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CAdgG8REIsjSOjzXK_6hu_KgVjo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.mft
Manifest number:          1A69
Signing time:             Tue 22 Sep 2026 22:00:16 +0000
Manifest this update:     Tue 22 Sep 2026 22:00:16 +0000
Manifest next update:     Wed 23 Sep 2026 22:00:16 +0000
Files and hashes:         1: CAdgG8REIsjSOjzXK_6hu_KgVjo.crl (hash: O6YKdnQgUSKRxED+9qxK/Qj9yeXktYsLJe+WxJ6hqR8=)
                          2: H1YvmuStYDNqAB61c-rWu6eqTD4.roa (hash: 9PGCd+QuRbx4/mSkh35qhoqedPe+bLxdrUELkN0aarc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CAdgG8REIsjSOjzXK_6hu_KgVjo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cb:22:49:a1:37:9d:59:fc:d4:09:21:39:b0:77:a2:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0807601bc44422c8d23a3cd72bfea1bbf2a0563a
        Validity
            Not Before: Sep 22 22:00:16 2026 GMT
            Not After : Sep 23 22:00:16 2026 GMT
        Subject: CN=e9ac36a454ac470de897bcb6cec5c25719fb1d58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:8c:3c:5a:8e:91:6c:39:70:b8:87:d3:b7:35:
                    ea:22:66:3a:4d:ac:97:e1:df:19:8b:84:49:c8:ad:
                    73:9b:2b:37:35:cc:27:b2:c7:08:02:ba:65:1b:0e:
                    54:75:49:e0:35:a1:78:fd:fd:49:90:2d:4b:2c:e6:
                    94:b3:97:03:6d:94:cb:33:1d:6d:64:f4:6b:9f:a0:
                    1c:49:ef:b6:8a:f9:83:73:39:f1:26:48:57:3d:0f:
                    19:82:19:34:33:47:ca:7d:c8:fc:34:dc:79:37:66:
                    c1:08:88:a7:2c:f5:f0:36:26:cf:68:8a:f9:fa:c1:
                    f1:4f:b1:fd:cb:3d:54:b3:a6:c4:c4:70:96:f8:2d:
                    64:04:06:52:e8:2b:1a:43:84:4f:f5:5a:30:1d:66:
                    54:62:bc:72:15:aa:2e:1d:3f:f9:a2:df:df:fe:24:
                    b0:97:e4:df:23:38:17:4f:07:dd:bd:9e:42:cb:8b:
                    19:1b:98:58:b9:54:5f:47:6b:cb:ea:cf:96:37:05:
                    03:b9:e2:4b:eb:0d:41:34:1f:5c:65:d3:0d:74:98:
                    44:f9:b6:e4:50:e5:7f:67:8e:41:c3:85:d4:0c:02:
                    af:cd:71:77:72:64:57:90:73:a2:34:11:88:9b:32:
                    f0:6b:e9:e6:41:ba:2b:b5:96:46:0e:62:27:e2:b4:
                    71:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:AC:36:A4:54:AC:47:0D:E8:97:BC:B6:CE:C5:C2:57:19:FB:1D:58
            X509v3 Authority Key Identifier:
                keyid:08:07:60:1B:C4:44:22:C8:D2:3A:3C:D7:2B:FE:A1:BB:F2:A0:56:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAdgG8REIsjSOjzXK_6hu_KgVjo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:d9:47:3a:1f:ad:1d:ee:e9:0b:f3:b5:0e:2d:56:3a:d1:b8:
         5f:87:e8:86:a4:43:40:10:fd:a2:fb:87:83:69:ad:05:25:61:
         0c:3b:94:bb:f0:9d:2f:4a:cc:38:6e:15:1e:27:08:38:39:a0:
         98:f8:ef:80:19:09:91:18:76:05:84:0b:85:ea:c5:a9:37:02:
         38:05:bb:db:be:69:10:51:1f:e2:65:90:c9:0c:4b:88:ac:fe:
         7c:5f:c2:86:37:47:99:12:4e:e9:92:d1:b4:07:a5:f3:32:3c:
         6e:b1:00:7d:cb:6d:20:ff:72:3d:d6:d2:ad:f0:1a:6f:ba:05:
         e5:46:67:b1:8f:1b:30:3e:6a:45:70:6e:03:d9:81:99:c1:b5:
         12:a3:02:03:48:b9:44:b9:27:ec:2d:82:8d:19:3a:78:30:41:
         2f:b8:6f:ef:37:14:fd:4b:be:b8:1f:e5:02:2d:55:10:c1:6c:
         d8:1c:12:42:fd:5e:b0:aa:5c:45:7b:d6:6a:d4:41:63:26:3f:
         85:b9:e4:23:9e:e6:5d:44:88:b4:1c:ac:aa:78:9c:60:1c:72:
         ac:1c:cb:b9:c2:42:89:f6:5e:fa:b9:a3:9d:d8:3e:2c:10:a0:
         f9:30:4f:e8:74:b4:af:af:f7:74:df:6b:16:be:20:28:c7:05:
         03:5e:0d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:36:41 2026 by rpki-client