Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.mft
File:                     dE3Tr9fM584AqerGfgvKmb63Kao.mft (raw, json)
Hash identifier:          UYdxhuMnlrT8klcPYH2PoCWAWypYuBS2cQXs4qjEK84=
Subject key identifier:   A7:A1:DF:AF:05:96:8E:CA:8E:5E:19:AE:78:9B:35:7D:D1:75:A5:57
Authority key identifier: 74:4D:D3:AF:D7:CC:E7:CE:00:A9:EA:C6:7E:0B:CA:99:BE:B7:29:AA
Certificate issuer:       /CN=744dd3afd7cce7ce00a9eac67e0bca99beb729aa
Certificate serial:       01A0DB3B12CE588841AC708EFF49DA808FE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dE3Tr9fM584AqerGfgvKmb63Kao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.mft
Manifest number:          1A71
Signing time:             Sat 26 Sep 2026 01:01:16 +0000
Manifest this update:     Sat 26 Sep 2026 01:01:16 +0000
Manifest next update:     Sun 27 Sep 2026 01:01:16 +0000
Files and hashes:         1: dE3Tr9fM584AqerGfgvKmb63Kao.crl (hash: nuKaRhzuqwfX+Fk+iJlUsYCsKdEYU3a3fsejo62r/vU=)
                          2: jeUCTnllWBc2YjwSNbaBtlWcww4.roa (hash: A3urkixwNeWZh9C+aMoLes8n2HeLxR2S7cO9Wh2QMPQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dE3Tr9fM584AqerGfgvKmb63Kao.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 00:06:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:db:3b:12:ce:58:88:41:ac:70:8e:ff:49:da:80:8f:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=744dd3afd7cce7ce00a9eac67e0bca99beb729aa
        Validity
            Not Before: Sep 26 01:01:16 2026 GMT
            Not After : Sep 27 01:01:16 2026 GMT
        Subject: CN=a7a1dfaf05968eca8e5e19ae789b357dd175a557
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a0:38:f4:d0:80:af:50:57:1b:5c:31:00:4e:
                    7d:8a:fd:d3:09:9e:e7:9b:10:4d:7b:71:a9:0d:f5:
                    5b:52:4a:12:8d:79:2f:c7:50:5c:1c:41:f5:27:1d:
                    04:43:2b:05:01:02:86:8d:cc:38:57:1a:83:b5:30:
                    e1:0e:c6:0b:ee:01:4c:2a:d7:c5:32:ee:b1:69:41:
                    71:70:0a:77:72:1b:e2:30:1b:69:f0:f5:df:3e:46:
                    e1:26:58:06:b5:75:87:0f:c1:aa:24:2d:fd:8e:29:
                    1c:7e:ac:7e:19:e3:f9:f2:fd:f0:e5:85:fb:81:04:
                    21:96:04:bd:e6:e7:32:e1:91:af:44:ed:17:e7:df:
                    58:73:a8:88:2f:d9:21:d5:96:58:b1:25:d1:0d:dc:
                    63:86:48:7e:d0:78:33:51:19:99:de:b6:a6:71:2a:
                    f7:67:3e:43:4b:c9:b3:2b:e7:7b:b6:06:b1:6b:07:
                    a8:c1:a8:50:09:3a:00:50:f8:4f:65:91:54:62:c6:
                    20:06:fe:22:45:e5:81:53:38:d8:7d:b2:53:06:85:
                    41:e7:d9:ee:55:a8:d9:44:a0:0b:fd:2a:3f:4c:8e:
                    7d:de:9d:34:37:06:03:b0:30:4e:8a:0b:9b:8e:fa:
                    99:09:ce:ff:f6:09:3f:eb:38:d2:a9:f9:9b:ba:95:
                    af:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:A1:DF:AF:05:96:8E:CA:8E:5E:19:AE:78:9B:35:7D:D1:75:A5:57
            X509v3 Authority Key Identifier:
                keyid:74:4D:D3:AF:D7:CC:E7:CE:00:A9:EA:C6:7E:0B:CA:99:BE:B7:29:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dE3Tr9fM584AqerGfgvKmb63Kao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:df:35:cb:fd:b5:73:a1:0e:d8:3f:d8:23:bd:6d:9d:5a:96:
         03:2d:be:e2:9e:18:66:eb:9c:13:77:1a:c7:95:8c:b5:96:4e:
         61:ec:01:66:3b:dd:38:79:f7:0d:72:5c:96:39:38:e3:76:5b:
         8d:59:cb:a1:03:c2:f8:59:09:81:4e:d8:36:a9:f9:4e:8f:f3:
         da:21:6c:c0:f4:8b:fa:5d:e9:48:fb:b3:32:3e:a2:04:24:88:
         b5:24:61:3b:f0:ad:f3:a2:6e:d9:3c:85:ef:d8:1e:1f:23:e7:
         a9:4d:f4:b7:7e:9b:3c:a8:28:8e:e5:41:d0:a3:22:b1:8f:18:
         ce:55:83:86:30:b8:0d:ed:40:a8:84:79:b2:24:5f:29:15:b0:
         23:84:ef:9e:f3:6d:cc:96:a9:51:4e:79:02:78:27:45:46:1d:
         2e:e1:5c:37:a5:31:3b:f2:35:9d:a0:4d:58:89:e6:2a:bd:e9:
         30:07:68:16:8c:62:4e:47:87:ee:18:92:f5:e8:2c:da:01:fe:
         fd:b4:e5:8e:d7:86:37:76:5d:bc:59:c7:ab:39:79:1e:4b:d3:
         01:cc:9a:55:80:28:1f:07:3c:2a:5c:6a:60:c4:17:88:66:d4:
         9b:ae:78:b1:ce:94:1b:57:ef:9f:2f:92:35:92:cf:89:da:7b:
         dd:28:85:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:05:43 2026 by rpki-client