Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/468b75-5994-48fb-a85d-4a5eed1ee5bc/1/63g1imqX0ZsvWv_xz8eT-7Tq_J0.mft
File:                     63g1imqX0ZsvWv_xz8eT-7Tq_J0.mft (raw, json)
Hash identifier:          IEFGUnhsIbGVqFRdb6dUBMbM0KjAjigf0+4MxeqNC9M=
Subject key identifier:   66:82:1B:B7:4E:39:A1:1C:9C:01:FB:00:F2:1E:43:5C:85:75:58:D3
Authority key identifier: EB:78:35:8A:6A:97:D1:9B:2F:5A:FF:F1:CF:C7:93:FB:B4:EA:FC:9D
Certificate issuer:       /CN=eb78358a6a97d19b2f5afff1cfc793fbb4eafc9d
Certificate serial:       01A0D26E9E8AF43FA2336266354D2501E5E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/63g1imqX0ZsvWv_xz8eT-7Tq_J0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/468b75-5994-48fb-a85d-4a5eed1ee5bc/1/63g1imqX0ZsvWv_xz8eT-7Tq_J0.mft
Manifest number:          0DD0
Signing time:             Thu 24 Sep 2026 08:00:59 +0000
Manifest this update:     Thu 24 Sep 2026 08:00:59 +0000
Manifest next update:     Fri 25 Sep 2026 08:00:59 +0000
Files and hashes:         1: 63g1imqX0ZsvWv_xz8eT-7Tq_J0.crl (hash: G37+Kw58k7Z7dQ2B/mL9HubUzetKln6aKJJ2/mZx8xc=)
                          2: Yaq2yQABZup3SrIC9V3Vg03XQQ4.roa (hash: 7fM1bUhYaUT+C1cim42k75J0aN9dJ78xVp4HTMLxEag=)
                          3: tlRAf5EiqUlqBJcvLJfhmJFN9vI.roa (hash: fKYdczyGnrIDmFu9ZA4jTUe3SM7U43almigmqc8ux9c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/468b75-5994-48fb-a85d-4a5eed1ee5bc/1/63g1imqX0ZsvWv_xz8eT-7Tq_J0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/468b75-5994-48fb-a85d-4a5eed1ee5bc/1/63g1imqX0ZsvWv_xz8eT-7Tq_J0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/63g1imqX0ZsvWv_xz8eT-7Tq_J0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 08:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d2:6e:9e:8a:f4:3f:a2:33:62:66:35:4d:25:01:e5:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb78358a6a97d19b2f5afff1cfc793fbb4eafc9d
        Validity
            Not Before: Sep 24 08:00:59 2026 GMT
            Not After : Sep 25 08:00:59 2026 GMT
        Subject: CN=66821bb74e39a11c9c01fb00f21e435c857558d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:85:9f:b5:0b:b3:67:ce:3b:88:53:fb:2e:bc:
                    fe:22:40:3b:0c:36:56:0c:a9:b8:f8:2c:88:78:88:
                    c5:2d:a8:5d:55:36:d9:af:3c:64:6c:2d:b6:05:4f:
                    c5:4e:aa:01:f9:b9:d6:43:63:ce:4f:02:35:73:8d:
                    bd:3a:e7:ff:13:41:8b:fd:47:f7:a6:11:63:60:e7:
                    dd:3c:7a:53:dc:c0:e2:9d:80:95:84:d9:d9:51:7d:
                    87:71:13:a2:f7:81:f7:9c:3c:4d:08:db:94:f3:09:
                    f1:8c:00:10:ee:17:20:74:8d:95:ea:4c:1b:e5:06:
                    3b:af:b5:99:bb:6e:e9:69:14:cc:ff:57:ac:c1:2e:
                    c5:b0:bb:5b:fc:33:1d:0f:39:9c:81:1a:27:4f:b5:
                    e5:3d:02:d8:da:21:8e:5f:3c:04:8c:1e:95:df:73:
                    be:af:76:13:ba:91:cf:ab:f9:66:83:62:4b:f5:33:
                    05:17:dc:cc:74:66:b6:04:c7:56:02:b6:86:cc:62:
                    13:e4:74:06:c6:a8:9f:2b:ba:2c:26:c7:72:51:7f:
                    18:f2:4b:eb:09:13:4b:20:12:17:4a:2e:a7:49:48:
                    f5:2a:53:eb:12:f7:48:e4:19:ed:36:44:c1:f1:3a:
                    a6:79:44:84:3c:48:8c:0c:87:37:17:ef:e5:32:46:
                    6a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:82:1B:B7:4E:39:A1:1C:9C:01:FB:00:F2:1E:43:5C:85:75:58:D3
            X509v3 Authority Key Identifier:
                keyid:EB:78:35:8A:6A:97:D1:9B:2F:5A:FF:F1:CF:C7:93:FB:B4:EA:FC:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63g1imqX0ZsvWv_xz8eT-7Tq_J0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/468b75-5994-48fb-a85d-4a5eed1ee5bc/1/63g1imqX0ZsvWv_xz8eT-7Tq_J0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/468b75-5994-48fb-a85d-4a5eed1ee5bc/1/63g1imqX0ZsvWv_xz8eT-7Tq_J0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:72:44:13:b3:a5:bb:38:cc:2b:6c:13:e7:ff:a2:53:ec:b8:
         6d:d0:a9:77:25:9e:65:16:7a:bb:99:04:a2:4b:02:af:94:68:
         f8:95:5a:47:8e:1c:ae:42:ec:88:64:22:22:7d:18:b4:c7:db:
         51:cc:9a:88:8c:10:ed:f8:66:88:10:ba:5c:75:95:62:b9:ce:
         0e:6a:86:d4:72:78:0f:39:23:31:85:68:dc:1b:a4:f8:37:68:
         47:b9:b1:58:01:d3:0d:f9:d9:99:73:ec:ea:0d:1c:97:6f:f5:
         fd:4b:d4:1a:11:5d:ac:a5:32:9f:08:28:f0:ba:49:f4:cb:e7:
         cc:6b:99:44:42:39:8c:3c:57:f9:68:e9:09:c6:30:d3:33:a9:
         82:8c:73:02:9f:ed:d9:8e:11:6a:43:69:c5:e7:32:0b:4e:27:
         15:06:19:0d:1b:f3:29:e3:38:5a:a0:72:26:1f:e5:ae:82:e1:
         d3:bd:8d:2a:c9:fd:d8:3a:2e:5f:4c:00:14:51:8c:43:af:aa:
         6d:96:78:3a:ca:28:e8:97:13:a1:d7:be:36:d5:56:06:8b:6b:
         74:a4:74:8f:a6:07:29:64:8b:a2:cd:93:97:f9:c2:be:b2:43:
         08:25:41:cf:5d:ab:e9:3d:a4:86:c6:89:68:f2:02:0c:ff:94:
         05:cc:5e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:06:02 2026 by rpki-client