Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.mft
File:                     2v75fKAQutT_We99K2vJB3hgqrI.mft (raw, json)
Hash identifier:          GgYyjV7jLVfXuE7Pa1M6s8L6dNJhjTzlupkqt63cF18=
Subject key identifier:   48:23:A8:A9:C4:DB:59:C1:38:FC:EC:31:BA:11:E4:15:08:3C:D9:33
Authority key identifier: DA:FE:F9:7C:A0:10:BA:D4:FF:59:EF:7D:2B:6B:C9:07:78:60:AA:B2
Certificate issuer:       /CN=dafef97ca010bad4ff59ef7d2b6bc9077860aab2
Certificate serial:       01A0CC353C1F8B83E4FAB1F9A3C697E62C28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2v75fKAQutT_We99K2vJB3hgqrI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.mft
Manifest number:          0674
Signing time:             Wed 23 Sep 2026 03:00:35 +0000
Manifest this update:     Wed 23 Sep 2026 03:00:35 +0000
Manifest next update:     Thu 24 Sep 2026 03:00:35 +0000
Files and hashes:         1: 2v75fKAQutT_We99K2vJB3hgqrI.crl (hash: Rz9oZkr9RVwIWoDkSZi4anpAZA/Cq0VyWJ/DWM9j1IQ=)
                          2: XJrQypw2eXZ7ezpEOpOj8qOwJlc.roa (hash: U5AFVavv4y8bxwhEhQQ2exL+ZJwtyEE2Q3oN6TBpcsU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2v75fKAQutT_We99K2vJB3hgqrI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 03:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cc:35:3c:1f:8b:83:e4:fa:b1:f9:a3:c6:97:e6:2c:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dafef97ca010bad4ff59ef7d2b6bc9077860aab2
        Validity
            Not Before: Sep 23 03:00:35 2026 GMT
            Not After : Sep 24 03:00:35 2026 GMT
        Subject: CN=4823a8a9c4db59c138fcec31ba11e415083cd933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c1:35:95:31:99:73:bb:6b:5d:18:fd:c6:44:
                    c0:db:0a:26:5e:3e:97:b9:ca:10:59:8a:d3:df:37:
                    1c:b7:44:18:ab:47:72:17:39:d5:fe:64:2e:67:17:
                    08:4c:72:25:9d:af:33:2d:44:d3:12:e2:33:e9:13:
                    c2:18:92:35:78:56:f0:65:53:fb:93:b4:ba:a8:e3:
                    b8:66:88:f9:e2:8a:90:6d:bf:24:6c:a3:85:04:14:
                    3a:dd:b3:8b:31:12:a5:b3:b9:6f:de:2e:95:44:15:
                    9d:73:ae:e0:5e:17:aa:1e:e4:0c:0d:22:4d:66:64:
                    60:33:1b:2d:c4:40:f9:b7:a2:db:6c:75:78:14:f4:
                    31:01:83:0d:da:7b:7c:90:a9:8b:ad:be:d8:42:85:
                    21:7c:e5:ad:15:c1:8f:b6:64:fa:24:40:de:9d:2d:
                    86:e8:58:39:06:f0:6f:2c:a8:d9:c1:66:2e:a7:ab:
                    59:e2:87:36:89:5a:ba:02:eb:3c:15:12:05:2c:f3:
                    61:14:e0:bd:76:d5:bb:57:74:ad:48:79:da:70:ab:
                    b0:17:2a:7d:68:bd:e7:e9:4d:40:55:6c:4c:be:7e:
                    83:92:08:bf:89:c4:89:c4:43:d1:ef:41:16:7a:b8:
                    ed:12:8b:63:0b:7a:57:cb:f7:a8:2a:e2:11:34:e7:
                    0f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:23:A8:A9:C4:DB:59:C1:38:FC:EC:31:BA:11:E4:15:08:3C:D9:33
            X509v3 Authority Key Identifier:
                keyid:DA:FE:F9:7C:A0:10:BA:D4:FF:59:EF:7D:2B:6B:C9:07:78:60:AA:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2v75fKAQutT_We99K2vJB3hgqrI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:b1:b3:30:6b:37:df:af:51:02:a5:14:61:b5:5f:8f:cc:ba:
         bc:bd:37:4e:63:04:cd:08:17:be:d7:98:94:9b:69:20:53:8e:
         29:30:69:2c:b2:e6:1e:32:74:6d:d7:8b:29:1e:3b:9c:21:16:
         cb:fe:c1:8b:50:24:5d:e2:95:ab:a5:b6:3d:5b:a3:57:07:21:
         70:1d:a4:c3:44:95:2d:83:14:3a:f1:48:78:8d:52:1e:cd:c2:
         2f:12:3a:40:18:fb:d8:c3:55:6f:de:32:0a:f9:0a:0b:a2:53:
         6a:ab:25:6a:c1:ce:72:8c:66:c0:bf:c0:e6:ec:6d:c8:31:5d:
         ca:c4:d0:76:bc:97:b8:a7:a6:9e:d8:c7:af:16:dc:7f:e6:6d:
         4f:0d:fb:74:c0:d2:66:60:3f:3f:c9:a5:d7:13:6a:ab:b4:ab:
         73:f8:62:4b:f9:ca:6a:ea:bb:21:65:c0:92:e7:35:f3:59:87:
         8f:e5:cb:71:0f:fb:dc:cb:1a:eb:93:f0:8b:25:bd:b9:76:66:
         01:cb:65:c1:9b:38:fb:74:d4:5f:c5:a8:96:bf:99:a9:b4:a4:
         4d:da:20:60:9c:b8:18:5c:3c:3d:fb:a2:bb:a9:40:01:79:33:
         f7:5d:ab:06:18:fb:93:7f:ae:de:00:c1:53:53:f1:c7:b9:51:
         c7:61:71:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:44:46 2026 by rpki-client