Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/97wp81OFLRgNI0EJl9DwR-wXeNM.mft
File:                     97wp81OFLRgNI0EJl9DwR-wXeNM.mft (raw, json)
Hash identifier:          Di/i+YLnMcvYhyTOksEUC4gWboxetFJPKEevB4S+gdY=
Subject key identifier:   08:2E:C5:49:E0:8F:DA:86:8C:BB:90:53:E4:5B:E2:E1:9C:42:C3:94
Authority key identifier: F7:BC:29:F3:53:85:2D:18:0D:23:41:09:97:D0:F0:47:EC:17:78:D3
Certificate issuer:       /CN=f7bc29f353852d180d23410997d0f047ec1778d3
Certificate serial:       01A0DA28599B3162EC918882D284DBFBB155
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/97wp81OFLRgNI0EJl9DwR-wXeNM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/97wp81OFLRgNI0EJl9DwR-wXeNM.mft
Manifest number:          1A05
Signing time:             Fri 25 Sep 2026 20:01:12 +0000
Manifest this update:     Fri 25 Sep 2026 20:01:12 +0000
Manifest next update:     Sat 26 Sep 2026 20:01:12 +0000
Files and hashes:         1: 97wp81OFLRgNI0EJl9DwR-wXeNM.crl (hash: xkIr7+W1j3GUQGzlwW9uGshOWFIkm3BsFm6AdrS2u6I=)
                          2: DOD5qI-P3bpZWxbpEfJc0KLvVyo.roa (hash: W0rNIyBEFVhXx/n2AztKg7R5ocbVDsSXMidn5DVXJl4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/97wp81OFLRgNI0EJl9DwR-wXeNM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/97wp81OFLRgNI0EJl9DwR-wXeNM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/97wp81OFLRgNI0EJl9DwR-wXeNM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 17:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:da:28:59:9b:31:62:ec:91:88:82:d2:84:db:fb:b1:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7bc29f353852d180d23410997d0f047ec1778d3
        Validity
            Not Before: Sep 25 20:01:12 2026 GMT
            Not After : Sep 26 20:01:12 2026 GMT
        Subject: CN=082ec549e08fda868cbb9053e45be2e19c42c394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:45:7f:99:55:42:69:ec:36:c5:fd:67:3f:63:
                    bd:f6:9b:bc:35:ed:50:3d:0d:20:70:3f:cb:af:8c:
                    1d:54:2b:29:91:a7:f7:eb:a7:1e:5d:77:9d:b2:f0:
                    1d:ee:94:11:59:a5:ec:1a:d0:09:2d:8c:92:bf:c6:
                    26:fa:75:e8:f0:14:4e:3c:b8:8b:4f:13:04:8b:0d:
                    2e:bd:2d:ad:2c:95:42:49:a8:ab:39:dc:fd:62:09:
                    05:88:3b:76:39:59:d5:34:dc:cb:d8:c7:a6:31:f5:
                    5f:42:05:45:04:31:c6:c3:33:fc:91:4b:31:e8:73:
                    73:cf:0a:bc:2d:44:bf:6d:95:bc:db:4a:24:1c:e3:
                    a7:76:d3:d0:fe:3f:bd:a6:3c:d8:7a:60:a6:e6:47:
                    e7:23:be:b4:fc:8c:1d:74:5b:69:53:d6:33:be:93:
                    d1:0d:54:32:df:31:de:49:00:f1:c5:66:aa:9a:65:
                    58:31:bf:39:76:8a:3c:e6:38:14:b2:70:2e:5d:4e:
                    e3:1e:67:4d:be:f0:a3:5f:fb:95:28:63:d1:c7:e1:
                    73:dd:4e:c5:2e:e4:4a:c5:17:7a:56:50:d6:66:72:
                    02:ab:04:32:8a:ec:49:2f:10:fd:48:de:7e:3f:9b:
                    47:3e:c0:5c:2c:3b:69:9f:1b:58:00:13:d0:80:b1:
                    5e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:2E:C5:49:E0:8F:DA:86:8C:BB:90:53:E4:5B:E2:E1:9C:42:C3:94
            X509v3 Authority Key Identifier:
                keyid:F7:BC:29:F3:53:85:2D:18:0D:23:41:09:97:D0:F0:47:EC:17:78:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97wp81OFLRgNI0EJl9DwR-wXeNM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/97wp81OFLRgNI0EJl9DwR-wXeNM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/97wp81OFLRgNI0EJl9DwR-wXeNM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:e6:9a:f3:20:45:ee:70:55:3f:2a:b0:a6:a1:8a:7d:df:29:
         de:16:57:5f:0d:da:63:c2:f6:af:f8:e0:62:30:c7:5d:08:87:
         e9:e5:1e:3c:58:ad:a0:2e:a9:5a:2f:21:e8:61:d2:97:1a:20:
         11:4a:84:12:21:99:16:45:b1:ca:ee:a0:02:8f:6a:23:95:3a:
         7f:7f:63:78:9b:7c:62:ae:e6:a9:c1:fd:c5:16:84:fa:33:65:
         83:a7:41:be:ed:d5:ce:d2:8d:bf:bf:81:1f:32:f0:35:68:c3:
         9e:be:98:2a:35:17:50:87:1f:0b:f5:9c:67:6a:15:c6:cd:cd:
         aa:6c:c6:b8:33:3b:a6:34:ff:51:06:5b:9d:27:c5:b4:4e:8a:
         4c:e2:0f:ba:c1:08:8b:77:2e:48:09:0b:48:f0:ac:ff:77:d1:
         c4:d8:30:f7:24:de:dd:b8:b5:f1:ab:ab:be:05:90:2d:fe:6e:
         8c:36:84:1c:ba:35:cc:bc:75:45:16:58:b2:5b:a4:45:9f:db:
         ac:ca:9e:da:7c:28:e7:2a:41:1d:e3:b7:58:fb:c5:08:83:92:
         35:e1:5f:05:88:8a:77:49:cc:9f:7a:f4:ed:fe:05:b8:61:41:
         53:38:de:c9:2d:e9:b5:0d:d6:a2:de:f5:62:80:96:70:d4:58:
         64:d1:e0:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 01:59:56 2026 by rpki-client