Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/404ba5-c466-43c3-a616-9e0407626667/1/96Sm-g_D47k2V-7xCu2sD7LEU4w.mft
File:                     96Sm-g_D47k2V-7xCu2sD7LEU4w.mft (raw, json)
Hash identifier:          lU4iDQTAKdktklLPnaWaGAsnxe7QBdtzaoQqBd0vWRk=
Subject key identifier:   80:4D:70:87:CC:B8:88:ED:68:CE:FF:22:F4:F3:07:7D:9F:8E:59:0C
Authority key identifier: F7:A4:A6:FA:0F:C3:E3:B9:36:57:EE:F1:0A:ED:AC:0F:B2:C4:53:8C
Certificate issuer:       /CN=f7a4a6fa0fc3e3b93657eef10aedac0fb2c4538c
Certificate serial:       01A0D728059624D58A2A64D8A47484285F03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/96Sm-g_D47k2V-7xCu2sD7LEU4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/404ba5-c466-43c3-a616-9e0407626667/1/96Sm-g_D47k2V-7xCu2sD7LEU4w.mft
Manifest number:          07D2
Signing time:             Fri 25 Sep 2026 06:01:59 +0000
Manifest this update:     Fri 25 Sep 2026 06:01:59 +0000
Manifest next update:     Sat 26 Sep 2026 06:01:59 +0000
Files and hashes:         1: 96Sm-g_D47k2V-7xCu2sD7LEU4w.crl (hash: 1hw7kkPtuQaSB2tKcKjEhj2OeJnyo6gKCiSvkRSARbE=)
                          2: d4KrySsXtgR3TbJYSM5N4Uqx4KU.roa (hash: EHWSR+qUf6znYV7HsqlNW+Vcbs+/lAqwQEe/T0CiYVo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/404ba5-c466-43c3-a616-9e0407626667/1/96Sm-g_D47k2V-7xCu2sD7LEU4w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/404ba5-c466-43c3-a616-9e0407626667/1/96Sm-g_D47k2V-7xCu2sD7LEU4w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/96Sm-g_D47k2V-7xCu2sD7LEU4w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 23:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d7:28:05:96:24:d5:8a:2a:64:d8:a4:74:84:28:5f:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7a4a6fa0fc3e3b93657eef10aedac0fb2c4538c
        Validity
            Not Before: Sep 25 06:01:59 2026 GMT
            Not After : Sep 26 06:01:59 2026 GMT
        Subject: CN=804d7087ccb888ed68ceff22f4f3077d9f8e590c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:7d:7a:3b:f7:a3:1b:fd:c9:37:fe:65:c4:9f:
                    f4:36:cf:58:97:19:03:b8:c6:ba:a8:3d:c3:e7:78:
                    11:80:5d:34:e0:72:c7:a5:68:2f:dc:c2:be:8b:7e:
                    86:8b:03:d6:f7:f7:52:2c:49:fc:7e:ed:56:4b:e6:
                    db:d7:7a:ae:d7:1e:75:51:ad:5a:7d:42:57:df:d0:
                    c6:5b:31:f5:cd:bf:f2:16:7c:9e:98:84:57:56:b1:
                    64:60:c5:8b:e7:c0:59:46:12:45:74:86:91:a6:88:
                    c4:1f:af:13:17:81:f5:86:d9:1e:82:6e:77:88:fc:
                    fc:b8:4c:95:f5:ab:27:5e:09:07:1e:8b:ae:8c:7c:
                    cd:05:53:e8:1b:ca:ac:6c:77:f1:27:49:56:4d:1d:
                    42:20:ec:1a:9d:ec:02:c5:9e:5e:7e:d3:8b:06:35:
                    c6:ab:9e:1e:98:2a:d5:c2:0b:24:0f:99:08:e7:3a:
                    f3:f3:05:5e:26:75:8f:73:df:df:8c:90:81:31:d8:
                    61:ff:c5:36:cd:aa:55:16:ff:91:1c:bf:03:4f:fb:
                    19:4f:79:3e:14:9e:ec:ee:9b:75:12:67:35:6c:cf:
                    c0:19:c9:45:eb:1b:94:cd:cf:b3:e6:e1:1c:2e:df:
                    1e:fa:32:94:53:ae:98:99:63:0c:4a:83:1e:e3:c9:
                    66:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:4D:70:87:CC:B8:88:ED:68:CE:FF:22:F4:F3:07:7D:9F:8E:59:0C
            X509v3 Authority Key Identifier:
                keyid:F7:A4:A6:FA:0F:C3:E3:B9:36:57:EE:F1:0A:ED:AC:0F:B2:C4:53:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96Sm-g_D47k2V-7xCu2sD7LEU4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/404ba5-c466-43c3-a616-9e0407626667/1/96Sm-g_D47k2V-7xCu2sD7LEU4w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/404ba5-c466-43c3-a616-9e0407626667/1/96Sm-g_D47k2V-7xCu2sD7LEU4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:81:62:c1:b2:6c:39:40:d7:f4:0a:c9:3b:ff:cd:b3:1b:ef:
         94:38:cb:4c:6d:e5:70:0d:84:55:e6:09:75:16:fc:e4:a7:1a:
         56:40:f8:cf:ce:ad:c8:87:d6:bd:05:f1:fd:f9:52:47:4f:0a:
         ba:02:4f:7f:45:e9:b9:4c:e3:0f:15:83:ce:0b:73:1b:84:06:
         db:ad:d0:80:56:9c:45:e9:a5:01:7a:5a:08:a4:91:06:1a:ea:
         c7:9a:40:12:63:df:d7:09:3b:9f:b7:78:a9:eb:e8:26:f2:7c:
         02:eb:3f:03:82:d7:58:67:c7:c4:fa:d5:93:7a:63:34:55:78:
         1e:26:2e:e7:a0:05:f2:32:ca:0a:ac:45:10:c1:2b:3e:29:62:
         c3:77:54:ce:b7:8b:2b:66:07:cf:3d:74:f1:1b:57:8d:3a:46:
         76:1f:6e:94:f6:90:61:87:69:c0:2d:69:8b:ae:a0:69:f7:8e:
         b1:21:3e:f0:58:17:8e:00:f3:fd:a5:41:72:d0:5f:a3:ed:53:
         cc:33:84:1f:b1:f2:18:49:c5:c9:ef:3d:13:51:84:39:79:84:
         39:7d:37:f3:d9:90:66:0f:b5:17:c8:dc:30:0b:02:6d:bb:be:
         b4:bf:b3:48:71:fe:5d:cd:95:33:a7:6e:dd:4c:e6:57:9f:7f:
         c6:fc:70:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 08:56:39 2026 by rpki-client